Privacy Policy

This Privacy Policy applies to NearbyAssist, a service operated by DAICISION s.r.o., a limited liability company registered in the Slovak Republic ("DAICISION", "we", "our", or "us"). DAICISION is the data controller responsible for your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service"). Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide to Us

We may collect information that you provide directly to us, including:

• Account Information: When you create an account, we collect your name, email address, username, password, and profile information.
• Profile Information: Information you add to your profile, such as a profile picture, biography, and preferences.
• Communications: Information you provide when you contact us, respond to surveys, or communicate with other users.
• Transaction Information: If you make purchases through the Service, we collect payment information, billing details, and transaction history.
• User Content: Information you post to the Service, including reviews, ratings, comments, photos, and videos.

1.2 Information We Collect Automatically

When you use our Service, we may automatically collect certain information, including:

• Device Information: Information about your device, including IP address, device type, operating system, browser type, device identifiers, and mobile network information.
• Usage Information: Information about your use of the Service, such as the pages you visit, the time and duration of your visits, and the actions you take within the Service.
• Location Information: With your consent, we collect precise location information from your device. You can disable location services in your device settings, but this may limit certain features of the Service.
• Camera and Sensors: With your permission, we may access your device's camera and sensors to provide augmented reality (AR) features.
• Cookies and Similar Technologies: We and our service providers use cookies, pixel tags, web beacons, and other tracking technologies to collect information about your use of the Service and to provide features and personalized content.

1.3 Information from Third Parties

We may collect information about you from third parties, including:

• Social Media Platforms: If you choose to link your account with a social media platform, we may receive information from that platform.
• Business Partners: We may receive information about you from our business partners, such as advertisers and analytics providers.
• Public Sources: We may collect information about you from publicly available sources.

2. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Personalize your experience and provide content and features relevant to your interests
• Facilitate communication between users and businesses
• Send you technical notices, updates, security alerts, and support and administrative messages
• Respond to your comments, questions, and requests, and provide customer service
• Monitor and analyze trends, usage, and activities in connection with the Service
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Comply with legal obligations and enforce our terms and policies

2A. AI-Powered Features

NearbyAssist uses artificial intelligence to enhance the Service. The following features are powered by AI models provided by OpenAI, Inc. (our sub-processor):

• AI Concierge: A chat assistant that helps you discover local businesses, compare services, and make bookings. It processes your messages, selected language, (with your permission) your location, and — when you are signed in — a personalisation profile built from your booking history and preferences to provide relevant results.
• Business Assistant: An AI assistant for business owners to manage bookings, invoices, projects, and analytics through natural language.
• Visual Search: Analyzes images you upload to identify the type of service shown and suggest matching businesses.
• Smart Recommendations: AI-generated business insights, daily digests, and performance recommendations for business owners.
• Semantic Search: Uses AI embeddings to match your search queries with relevant businesses beyond exact keyword matches.

2B. Automated Decision-Making & AI Transparency

In compliance with the EU AI Act (Regulation 2024/1689), we disclose the following about how AI affects your experience:

• Search Ranking: Business search results are ranked using a combination of text relevance, geographic distance, and AI-powered semantic matching. No single business can pay to override the AI ranking algorithm.
• Recommendations, Not Decisions: All AI outputs (business suggestions, booking recommendations, analytics insights) are recommendations. They do not constitute binding decisions. You always retain full control over your choices.
• Human Review: You have the right to request human review of any AI-generated result or recommendation by contacting our support team.
• Risk Classification: Our business search ranking system is classified as precautionary high-risk under EU AI Act Annex III, Category 4(a). We maintain a Fundamental Rights Impact Assessment for this system.

2C. Data Sent to AI Providers

When you use AI-powered features, the following data may be sent to OpenAI's API for processing:

• Your chat messages and conversation history (up to 20 recent messages per session)
• Your approximate location (latitude/longitude), if you have granted location permission
• Images you upload for Visual Search
• Your selected language preference

OpenAI processes this data in accordance with their data processing agreement with us. Your data is not used to train OpenAI's models.

2D. Web Scraping & Content Extraction

To provide up-to-date business information (such as daily menus, events, and opening hours), we may automatically extract publicly available content from business websites. This process:

• Respects robots.txt directives on each website
• Only extracts publicly available business information
• Uses AI to structure raw text into useful data (e.g., menu items, event details)
• Does not collect personal data from scraped websites

2E. Business Data Enrichment

We may verify and enrich business profiles by matching them against public government registries, including the Slovak RPO (Register of Legal Entities) and the Czech ARES (Administrative Register of Economic Subjects). This enrichment uses publicly available business registration data (company ID, tax ID, industry classification) and does not involve personal data.

2F. AI Data Retention

• AI conversation sessions: Message history is retained for 90 days after the session ends, then permanently deleted.
• AI audit logs: Records of AI tool usage are retained for 1 year. Personally identifiable information in these logs is scrubbed after 90 days.
• Embeddings: Semantic search embeddings for businesses and services are retained while the associated entity is active on the platform.
• Scraped content: Extracted website content expires automatically (daily menus: same day; weekly content: 7 days; events: 14 days).
• AI personalisation profile: Your AI personalisation profile is retained while your account is active. It is deleted immediately upon account deletion or a data erasure request.

2G. AI Personalisation & Learning

When you are signed in, the AI Concierge builds a personalisation profile from your in-platform activity. This profile is used to improve the relevance of business recommendations, adjust your default search radius, and prioritise service categories that match your interests.

Data used to build your profile:

• Categories of your completed bookings (e.g. massage, restaurant) — used to weight recommendations
• Ratings you have given in reviews — used to infer quality expectations
• Businesses you have saved (bookmarks)
• Your preferred service categories and search radius, as configured in Settings
• Your active saved searches

What is NOT included: Your review text, message content, payment details, and full addresses are never included in your personalisation profile and are never sent to AI models as part of personalisation.

How it is stored: A summarised profile (preferred categories, estimated radius, booking count, average rating given) is stored in a dedicated table (ai_user_profiles). This summary is refreshed at most once per hour based on your latest activity.

Legal basis (GDPR Art. 6): Processing is carried out under legitimate interest (Art. 6(1)(f)) to provide a personalised service, and under contract performance (Art. 6(1)(b)) where the service you signed up for includes personalised recommendations.

How to opt out: You can disable AI personalisation at any time in Settings → Privacy → Personalisation. You can also request deletion of your personalisation profile via Settings → Privacy → Delete my data, without deleting your account.

3. How We Share Your Information

We may share your information in the following circumstances:

• With Other Users: Information you post publicly on the Service (such as reviews, ratings, and profile information) will be visible to other users.
• With Businesses: If you interact with a business through the Service, we may share your information with that business to facilitate your interaction.
• With Service Providers: We share information with third-party vendors, consultants, and other service providers who need access to such information to carry out work on our behalf.
• For Legal Reasons: We may disclose your information if we believe it is necessary to comply with a legal obligation, protect our rights or the rights of others, detect or prevent fraud or security issues, or respond to a government request.
• Business Transfers: If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share your information with third parties when you have given us your consent to do so.

4. Availability Calendar Data

When a business enables calendar sharing, only free and busy time slots are visible to the public. No customer names, identities, or booking details are ever shared. When you make a reservation, the business receives your name and contact information for that specific appointment only.

5. Review Media

Photos and videos uploaded with reviews are stored in our secure cloud storage. Media is retained for as long as the associated review exists. To request removal of your media, contact our support team.

6. Search Intent Data

When you search for a service through our chat assistant, we may record the service category and city to improve recommendations and to enable businesses to announce relevant availability to you. This data is retained for 90 days. You can opt out of marketing use of this data in your account settings.

7. Your Choices

7.1 Account Information

You can update your account information at any time by logging into your account and adjusting your settings. You may also contact us to request that we delete your account, but note that some information may be retained in accordance with our legal obligations or legitimate business purposes.

7.2 Location Information

You can choose whether to allow the Service to collect and use real-time information about your device's location through your device's settings. If you disable location services, you may not be able to use certain features of the Service.

7.3 Cookies

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of the Service.

7.4 Promotional Communications

You can opt out of receiving promotional emails from us by following the instructions in those emails. If you opt out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.

8. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. However, no Internet or email transmission is ever fully secure or error-free, so you should take special care in deciding what information you send to us.

9. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information.

10. International Data Transfers

We are based in the United States and the information we collect is governed by U.S. law. If you are accessing the Service from outside of the U.S., please be aware that information collected through the Service will be transferred to, processed, and stored in the U.S. The data protection laws of the U.S. may be different from those of your country of residence.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service prior to the change becoming effective. Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the updated terms.

12. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you certain rights with respect to your personal information. These include the right to know what personal information we collect, the right to delete personal information we have collected about you, and the right to opt out of the sale of your personal information. To exercise these rights, please contact us as described below.

We do not sell your personal information as defined under the CCPA. However, we may share your information as described in this Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us through our Contact Page.