Privacy Policy

6.1. Controller

The controller of personal data is Helply EOOD / Helply BG, company number 208972017, 24 Aleksandar Stamboliyski St., ground floor, 8000 Burgas. Email: support@helplybg.com.

6.2. Scope

This Policy applies to the use of helplybg.com, Helply BG, HelplyPRO, the Telegram integrations and the other official interfaces of Helply BG.

6.3. Account data

We may process name, email, phone, profile photo, user ID, language, chosen city and login data.

6.4. Client data

Depending on the feature, we may process the content of a Request, category, description, budget, date and time, approximate or specific location, photos, messages, the chosen Provider, ratings, reviews and the history of Requests.

6.5. Provider data

We may process name, company, company number or other registration data, professional categories, service area, portfolio, qualifications, verification documents, rating, offers, interaction history, HT balance and ledger, and information about purchases and subscriptions.

6.6. Geolocation

Where a feature requires a location, Helply BG may process the city chosen by the User, an approximate location or a precise geolocation where the User has allowed it through their device.

6.7. Apple and Google login

When signing in through an external provider, we may receive a provider ID, name, email and other information the User has allowed. Helply BG does not receive the password of the Apple or Google account.

6.8. Telegram

When the Telegram integration is used, we may process the Telegram ID, username, name, messages to the bot and information about the linked Request.

6.9. Technical data

We may process IP, browser, OS, device type, app version, session identifiers, push token, crash logs, diagnostic data, security logs, UTM, referral information and interaction events.

6.10. Purposes

The data is used for:

• providing the service;
• security;
• communication;
• paid features;
• support;
• analysis;
• marketing, on an appropriate legal basis;
• compliance with legal obligations.

6.11. Legal bases

Depending on the case, processing is based on the performance of a contract, steps taken at the User's request before a contract, a legal obligation, legitimate interest or consent.

6.12. Legitimate interest

This may include fraud prevention, security, the defence of legal claims, the prevention of abuse and improving the reliability of the service, after weighing the interests and rights of the person concerned.

6.13. What Providers see

Before a Provider is chosen, we may show the information needed to assess the Request, without unnecessarily disclosing personal contacts.

Once the conditions for connecting are met, certain contact details may become available to the specific Provider.

6.14. Public profile

A Provider's profile may contain a name or trade name, photo, description, services, areas, portfolio, rating, reviews and verification statuses.

6.15. Automated matching

We may use automated technologies to match Requests and Providers, for ranking, spam detection, fraud detection, content moderation and recommendations.

Unless stated otherwise, Helply BG does not base a decision that produces significant legal effects on a natural person solely on automated processing within the meaning of the applicable GDPR provisions.

6.16. AI services

Certain features may use AI technologies for translation, categorisation, moderation, text processing or support assistance. Where possible, the data is limited to what is necessary.

Users should not enter unnecessary sensitive personal data in free-text fields.

6.17. Recipients

Where necessary, data may be provided to a chosen Provider or Client, cloud and hosting providers, email and SMS providers, push, analytics and advertising providers, payment operators, the App Store / Google Play, providers of AI functionality, professional advisers and competent authorities.

6.18. Main providers used

As of the date of this policy, Helply BG may use services from:

• Google Firebase / Google Cloud;
• Vercel;
• Resend;
• BulkGate;
• Twilio;
• Anthropic;
• Apple;
• Google;
• Google Analytics;
• Google Ads;
• payment providers, where the respective feature is active.

6.19. Payments

As a rule, Helply BG does not need to store full bank card details when the payment is processed by an external payment operator.

We may keep the transaction ID, amount, currency, product, status, date and invoice information.

6.20. International transfers

Certain providers may process information outside the EEA. Where necessary, an applicable international transfer mechanism is used, for example an adequacy decision, standard contractual clauses or another permissible safeguard.

6.21. Retention

Data is kept only for as long as it is needed. As a guide:

• Account — until it is closed, and for a further period where there is a legal basis;
• Requests and related communication — as needed for operation, dispute resolution and the defence of rights;
• Payment and accounting data — for the statutory periods;
• Security logs — usually up to 12 months, except in case of an incident;
• Support — usually up to 3 years after the case is closed;
• Marketing consent — until withdrawn or until the purpose lapses.

Where the information is needed for a legal dispute, the period may be extended until it is concluded.

6.22. Marketing

Marketing messages are distinguished from service communications. The User can stop marketing messages by unsubscribing, in the settings or via support@helplybg.com.

6.23. Push notifications

Helply BG may send service push notifications about a new offer, a new Request, a message, a change or security. Marketing push notifications are managed separately where required.

6.24. Cookies

The details are described in the Cookie Policy.

6.25. Rights

Under the applicable conditions, a natural person has the right of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, complaint, and rights concerning certain automated decisions.

Requests are sent to support@helplybg.com.

6.26. Identification on request

To protect the data, Helply BG may ask for reasonable information to confirm identity.

6.27. Response time

GDPR requests are handled within the applicable statutory periods.

6.28. Supervisory authority (CPDP)

Supervisory authority: Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria.

6.29. Security

Helply BG applies appropriate technical and organisational measures, which may include HTTPS, access control, MFA for administrative access, logging, backups, least-privilege access and security monitoring.

No system can guarantee absolute security.

6.30. Account closure

The User may request closure of their account. Certain data may be retained where required by law or for the defence of legal interests.

6.31. Children

Helply BG is not intended for persons under 18 to conclude contracts on their own.

6.32. Sale of personal data

Helply BG does not sell personal data to advertisers.

6.33. Changes

This Policy may be updated. For material changes, appropriate notice is given where required.