Version 2026-09-28
What we store about you, who can see it, and what you can do about it.
Nobody has reviewed this text. It describes how the software actually behaves today, which is the part we can state honestly — governing law, retention periods and liability are missing and need a lawyer. When the reviewed version lands you will be asked to accept it, and this version stays on record as what you agreed to.
Your email address and password, held by our authentication provider — we never see the password itself.
What you put on your PROfile: headline, bio, skills, specialisms, availability, rates, location, and the case studies and media you upload.
What you do on the platform where a record is the point of the feature: profiles you shortlist, opportunities you save, contact requests you send or receive, and review decisions on your work.
The version of these documents you accepted, and when.
Enforced by profiles, case_studies, shortlisted_profiles, saved_opportunities, contact_requests, terms_acceptances.
We do not sell your data, and we do not run advertising on it.
There is no third-party analytics or tracking on this prototype. If that changes, this document changes first.
We do not show a recruiter your drafts, your unpublished case studies, or the evidence behind a review. That is enforced by the database, not by the screens.
Enforced by npm run verify:recruiter, verify:review — negative cases included.
A recruiter sees your PROfile only once you have published it and made it discoverable. Nothing else.
A reviewer sees only the snapshot of the work assigned to them, and cannot browse anyone's profile or see unrelated records.
Other freelancers cannot see your PROfile through the platform at all.
Enforced by the role table in CLAUDE.md, enforced in RLS.
Our hosting and database provider (Supabase) and our application host (Netlify), because the software runs on them.
Where a feature sends text to an AI model to draft something for you, only the text needed for that draft is sent, and the result is labelled as a draft pending human review.
Nobody else, unless the law requires it.
You can edit or delete anything on your PROfile yourself, and unpublish so recruiters can no longer find you.
Ask us and we will send you a copy of your data, or delete your account and everything attached to it.
The named contact for data requests, our retention periods, and the legal basis on which we process each category are the parts that need a lawyer and a company decision. They are not settled yet and will appear in a later version.