Privacy policy

Who we are

Errander (errander.eu) is a bounty and errand marketplace operated from Sweden, with users mainly in the EU.

The data controller is Errander, operated by Gustav Rukhadze, enskild firma (org.nr 870607-6315).

You can reach us about privacy at hi@errander.eu.

What data we collect and why

Account and profile: name, email address, password hash (we never store your password in plain text), optional profile text, skills, rates, and avatar image stored in Cloudflare R2. We need this to run the service, communicate with you, and show your public profile to other users.

Country and city: the country you confirm in your profile (with the time of confirmation) and, optionally, your city. The country decides which country's marketplace you take part in, the currency your tasks are priced in and — if you earn above the EU reporting threshold — which tax authority we report your earnings to (DAC7).

Sign-in: we support email and password and Google OAuth. For OAuth, the provider sends us identifiers and verification status. Identity verification runs through Didit (ID document scan and facial recognition); we store only the result and the timestamp, not the images or your national ID number.

Location: when you post a bounty we store geocoded coordinates and related place text from Amazon Location Service so erranders can find tasks. You choose what you share.

Payments: amounts, Stripe customer and Connect account identifiers, invoice metadata, and payout status. Card numbers and full bank details are handled only by Stripe — they never pass through our application servers.

Messaging: content you send through in-task messaging between poster and errander.

Reviews: ratings and text you submit about completed tasks.

Referrals: referral codes and links so we can attribute finder's fees.

Technical logs: we avoid logging personal data. We may log security and reliability events without content that identifies you personally.

Lawful bases: we process data to perform our contract with you (Art. 6(1)(b) GDPR), for legitimate interests such as fraud prevention and service improvement where balanced against your rights (Art. 6(1)(f)), and where consent is required (for example marketing — we do not send marketing without opt-in). Identity verification via Didit relies on your use of their flow, which is governed by their terms as well.

How we use your data

We use data to provide the marketplace: matching posters and erranders, messaging, payments in escrow, reviews, referrals, and support.

We use processors listed below under strict agreements. We do not sell your personal data.

If we must disclose information to authorities, we will only do so when legally required and proportionate.

Processors and where data is stored

We aim to keep personal data in the EU or EEA.

Railway (Railway Corporation, USA) — application hosting and database in an EU region (Netherlands).

Cloudflare — CDN, DNS, and R2 object storage for avatars and uploads; EU configuration where available. We also use Cloudflare Web Analytics for visitor statistics. It sets no cookies, does not follow you across sites and builds no profile of you; your IP address is used momentarily to count the visit and is not stored.

Brevo (Sendinblue SAS, France) — all email from the service: email verification, password reset and notification emails about applications, acceptance, submitted proof and completed tasks.

Stripe Payments Europe Ltd (Ireland) — payments, Connect, invoicing including Swedish VAT on invoices.

Didit (Didit Identity Spain, S.L., Barcelona, Spain) — identity verification through ID document scan and facial recognition (liveness); we store only the result and the timestamp.

Google (Gemini API, paid service) — the support chat on the site and our internal content generation. Google processes as a processor under its Data Processing Addendum and may cache data transiently outside the EU. Do not enter personal data in the chat.

Amazon Location Service — geocoding and place search; we use the eu-north-1 (Stockholm) Region.

If a processor stores data outside the EU, we rely on appropriate safeguards: an EU Commission adequacy decision (EU–US Data Privacy Framework) or the EU Commission's standard contractual clauses.

Retention

We keep account data while your account is active.

After you delete your account via Settings, we delete or anonymise personal data within a reasonable period, except where law requires longer retention (for example accounting records).

Uploaded files in R2 may be removed sooner by automated lifecycle rules (for example temporary uploads).

Messaging and task history may be kept in anonymised form for analytics after deletion where permitted.

Your rights

Under GDPR you may request access, rectification, erasure, restriction of processing, data portability (where applicable), and object to certain processing.

You may withdraw consent where processing is consent-based, without affecting prior lawful processing.

You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

How to exercise your rights

Email hi@errander.eu from the address associated with your account and describe your request.

To delete your account and much of your data in one step, use Settings → delete account and confirm by typing DELETE as instructed.

If we have appointed a Data Protection Officer, their contact details will appear here: Not yet appointed — use hi@errander.eu.

Cookies

We use functional cookies and similar technologies required for sign-in and security (Better-Auth session cookies).

We do not use analytics or advertising cookies today, so we do not show a cookie consent banner for non-essential cookies.

Changes

We may update this policy. We will change the "Last updated" date and, for material changes, provide a reasonable notice on the site or by email.

Contact

Website: https://errander.eu

Privacy contact: hi@errander.eu