Service and contact.
Shebeklebek is a mobile service marketplace operated by BAS SARL. Privacy questions and requests can be sent to r2d2@bas.sarl.
Data provided by users.
Customer and provider accounts use an email address, name, phone number, address/location details and account role. Providers may add a business name, specialties, service prices, availability, coverage area, portfolio photos, resume and verification documents. Users may create projects, quotes, bookings, messages, reviews, photos, and records of payments or promotion orders. Optional image/video campaign content is supplied by providers. Authentication may be performed by email/password or a supported social sign-in provider.
How the data is used.
BAS uses these records to create accounts, show provider profiles and service coverage, match customers with providers, support messaging and bookings, manage project and transaction history, moderate reviews and promotional content, provide support, and protect the service against misuse. Account and language preferences may be stored on the device.
Visibility and recipients.
A provider's public profile, portfolio, prices, coverage and reviews can be visible to other users. A project or message is visible to its authorized participants and to administrators as needed for operation and support. Authentication, database and file storage are provided using Supabase. BAS should list any other operational processors actually used, including hosting, analytics, crash reporting, payment processors or notification providers if present in the deployed system. BAS should clarify whether campaign media and review photos use public URLs.
Deletion and retention.
Users can request deletion in the app from Profile → Deactivate Account or by emailing r2d2@bas.sarl. When an account has no activity, its profile is deleted. When jobs, projects, messages, reviews or payments require a historical record, the profile is anonymized as “Deleted User” and personal contact, address and authentication data are removed. Some transaction records may remain for legal, accounting, dispute or fraud purposes. BAS should specify actual retention periods and applicable legal grounds; do not promise that every transaction record is immediately erased.
Security and international processing.
Data is transmitted over HTTPS and access is controlled by authentication and database permissions. BAS should identify any countries in which it or its service providers process data and describe additional controls or transfer bases where applicable.
Choices.
Users may edit their profile, choose whether to upload optional media, and request account deletion. Requests can be sent to r2d2@bas.sarl. BAS should state the response period it actually follows.