Privacy Policy
Draft – to be reviewed by a lawyer before publication. Effective from: [DATE].
1. Controller
The controller of your personal data is Artur Bucki, ul. Południowa 6, 16-420 Raczki, Poland, tax ID (NIP) 8442387394, REGON 540570765. Contact: the email address shown in the footer of the Service.
2. What data we process, why, and on what basis
| Purpose | Data | Legal basis (GDPR) | How long |
|---|---|---|---|
| Running your account and the Service | email, password (hashed), name, business/individual status | Art. 6(1)(b) – contract | until the account is deleted |
| Profile and Listings | content, photo and portfolio images, skills, wallet address (if provided) and whether you verified it, public badges (GitHub connected, completed collaborations, typical reply time) | Art. 6(1)(b) – contract | until the content or account is deleted |
| Applications to Listings | message and contact details shared with the client | Art. 6(1)(b) – contract | until the Listing or account is deleted |
| Chat (about applications and direct messages) | messages, attached files (images, PDFs), offers you send or accept, time sent, read status, who the chat is with | Art. 6(1)(b) – contract | until the Listing, application, conversation or account is deleted |
| Notifications (in-app and email) | notification type, related Listing, email address (if you have one), saved searches for daily alerts, bookmarks | Art. 6(1)(b) – contract | in-app: up to 12 months; emails are not stored after sending |
| Moderation and reports (DSA) | report content, reporter details, decisions; for a reported chat message – a copy of that one message (moderators cannot read your chats otherwise) | Art. 6(1)(c) – legal obligation | 3 years from the decision |
| Security and fraud prevention | IP address, logs, device data | Art. 6(1)(f) – legitimate interest | up to 12 months |
| Establishing and defending claims | data needed for the case | Art. 6(1)(f) – legitimate interest | until claims are time-barred |
Providing data is voluntary, but you can't create an account without the account data.
3. Wallet addresses – important
A wallet address you add to your Profile is public. Linked to your name, it lets anyone see the balance and full transaction history of that wallet on the blockchain, and that data cannot be deleted from the blockchain. We recommend using a separate wallet only for gig payments. You can remove the address from your Profile at any time, but that won't remove past transactions from the blockchain.
4. Recipients
Data may be shared with companies that help us run the Service under data processing agreements: Vercel Inc. (hosting), Supabase Inc. (database and sign-in; data stored in the EU – Frankfurt) and our email provider. Data may also be disclosed to public authorities where the law requires it. Public Profile and Listing content is visible to every visitor. Contact details from an application are visible only to the author of that Listing.
5. Transfers outside the EEA
Some providers may process data in the United States. This is based on a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.
6. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. You can delete your account yourself in the settings. You can also lodge a complaint with a data protection authority – in Poland, the President of the Personal Data Protection Office (UODO). We do not make decisions about you based solely on automated processing that produce legal effects.
7. Cookies
The Service uses only strictly necessary cookies – to keep you signed in and for security. These don't require consent. We also remember the language you pick (a cookie) – only when you choose it yourself. We don't use analytics or marketing cookies. If that changes, we'll ask for your consent in a banner, and rejecting will be as easy as accepting.
8. Changes
We'll tell you about material changes to this policy by email and in the Service.