Privacy Policy

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register, build a profile, post or accept work, or otherwise use the Services. This includes:

• Account data: name or company name, email address, and password (stored only as a one-way hash — we never store your password itself).
• Profile data: resumes, portfolios, bios, skills and specialties, hourly rates, and AI-extracted skill lists.
• Images: profile photographs and company logos you upload.
• Contact and location data: phone number, city, state, and postal code, where you choose to provide them.
• Project and message content: project briefs, milestone descriptions, revision notes, dispute submissions, and messages you exchange with other users through the platform.
• Financial data: payment card and bank account details, collected and processed by Stripe. We do not receive or store full card or bank numbers.
• Identity and background verification data: government identification documents and related information, collected and processed by Stripe Identity and, where applicable, Checkr. We receive only the verification outcome, not the underlying documents.

Information from Google Sign-In

If you choose to create an account or sign in using Google, Google provides us with your email address, name, and a unique Google account identifier. We use these to create or locate your account and to confirm your email address is verified. We do not receive your Google password, and we do not access your Gmail, Drive, contacts, or any other Google service data.

Information collected automatically

When you use the Services we automatically collect limited technical information, including your IP address, browser and device characteristics, and request timestamps. We use this for security, rate limiting, abuse prevention, and diagnosing errors. Our hosting and infrastructure providers also generate server logs containing this information.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with the law.

• To create and authenticate your account, including email verification, password reset, and Google Sign-In.
• To power the AI matchmaker. We send resumes, profile text, and project descriptions to Google Gemini to extract skills, estimate effort, draft milestone schedules, and score matches between clients and professionals.
• To moderate uploaded images. Profile photographs and company logos are sent to Google Gemini to check they are appropriate for display before they go live.
• To verify business accounts. We send a submitted company name and email domain to Google Gemini to assess whether the domain plausibly belongs to that company.
• To facilitate escrow and payments, including holding project funds, releasing milestone payments, issuing refunds, and arbitrating disputes.
• To notify you about matches, messages, milestone activity, and account events, by email and in-app notification. You can turn off email notifications in your inbox settings.
• To protect our Services, including identity verification, background checks where applicable, rate limiting, suspension of abusive accounts, and maintaining administrative audit records.
• To comply with legal, tax, and accounting obligations relating to payments processed through the platform.

We do not sell your personal information, and we do not use your data to train third-party AI models. Content sent to our AI providers is processed to return a result for you, not to improve their public models.

3. When and With Whom Do We Share Your Information?

In Short: We share information with the service providers that make the platform work, and with other users as described in section 4.

We share data with third-party vendors who perform services for us or on our behalf:

• Payments, escrow, payouts, and identity verification: Stripe, Inc.
• Background checks: Checkr, Inc., where a professional opts into background verification.
• Authentication: Google LLC, where you use Google Sign-In.
• AI processing: Google LLC (Gemini), for resume parsing, milestone generation, image moderation, and business-domain verification.
• Email delivery: Google LLC, which transmits our notification and transactional emails.
• Cloud hosting and infrastructure: Google Cloud Platform (application and database hosting) and Vercel, Inc. (website hosting).
• Advertising measurement: Google LLC (Google Ads conversion tracking), as described in section 5.
• Website analytics: Vercel, Inc. (aggregate traffic analytics).

We may also disclose information where required by law, subpoena, or other legal process, or where we believe disclosure is necessary to protect our rights, investigate fraud, or respond to a safety concern. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. What Information Is Visible to Other Users?

In Short: Parts of your profile are shown to other users of the marketplace. That is how matching works.

• Professionals: your name, profile photograph, bio, skills, specialties, portfolio items, hourly rate, general location, verification status, and aggregate review rating may be shown to clients whose projects you match or who you express interest in.
• Clients: your company or display name, logo, industry, company size, website, general location, and track record (projects posted and completed) may be shown to professionals matched to your projects.
• Messages you send through the platform are visible to the other party in that conversation, and may be reviewed by our staff if a dispute is opened on that project.
• Contact details such as your email address and phone number are not published on your public profile.

You control most of this through your profile settings. Removing information from your profile removes it from what other users can see going forward.

5. Cookies, Local Storage, and Tracking Technologies

In Short: We use your browser's local storage to keep you signed in. We do not use advertising or cross-site tracking cookies.

We store your authentication token and basic preferences in your browser's local storage so you stay signed in between visits. Clearing your browser storage signs you out.

If you use Google Sign-In, Google may set its own cookies as part of that process, governed by Google's privacy policy rather than this notice. Our hosting providers may also set strictly necessary cookies for security and load balancing.

Advertising and analytics

We use Google Ads conversion tracking on our website. This is provided by Google and may set cookies or similar identifiers in your browser to measure whether a visit that came from one of our advertisements resulted in a sign-up. This technology is operated by Google and may be used by Google across sites for advertising purposes, as described in Google's policy on how it uses data from sites that use its services.

We also use Vercel Analytics to understand aggregate page traffic. Vercel Analytics does not use cookies and does not build cross-site profiles of individual visitors.

You can limit ad personalisation through Google's My Ad Center, and most browsers allow you to block or delete cookies. Blocking them will not affect your ability to use the Services.

6. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary for the purposes in this notice, and longer where the law requires it.

We keep profile and account information for as long as your account is active. When you delete your account, we remove your profile, your notifications, and your messages from our active databases.

Some records are retained after account deletion because we are legally or operationally required to keep them:

• Payment and escrow records are retained by us and by Stripe for tax, accounting, chargeback, and anti-fraud purposes.
• Administrative audit records of moderation actions are retained so decisions such as suspensions and dispute resolutions remain reviewable.
• Records relating to an open dispute are retained until that dispute is resolved.

Where we no longer have a legitimate business or legal need to hold your personal information, we delete or anonymise it.

7. How Do We Keep Your Information Safe?

In Short: We use technical and organisational measures to protect your information, but no system is perfectly secure.

All traffic between your browser and our Services is encrypted in transit using TLS. Passwords are stored only as one-way hashes. Payment credentials and identity documents are handled by Stripe and never stored on our servers. Administrative actions are recorded in an audit log, and access to administrative tools requires a separate step-up credential in addition to an account login.

Despite these measures, no electronic transmission or storage system can be guaranteed to be one hundred percent secure. You share information with the Services at your own risk, and you should use a strong, unique password for your account.

8. Do We Collect Information From Minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

By using the Services, you represent that you are at least 18 years of age. If we learn that personal information from a user under 18 has been collected, we will deactivate the account and delete the data. If you believe we may have collected information from a person under 18, contact us at customersupport@scriptypointer.com.

9. What Are Your Privacy Rights?

In Short: You can review, change, export, or delete your information, and you can control the emails we send you.

You can do the following at any time from within your account:

• Review and update your profile information.
• Turn off email notifications in your inbox settings. We will still send messages essential to your account and to transactions, such as password resets and payment notices.
• Delete your account. Account deletion is not available while a project has funded escrow or a hired professional, or while a payout balance is outstanding — those must be resolved first so that money is not stranded.

Depending on where you live, you may have additional rights, including the right to request access to the personal information we hold about you, to request correction or deletion, to request a portable copy, to object to or restrict certain processing, and to withdraw consent. Residents of California and certain other US states have the right to know what personal information is collected and disclosed, the right to delete it, the right to correct it, and the right not to be discriminated against for exercising these rights.

We do not sell or share your personal information for cross-context behavioural advertising.

To exercise any of these rights, email us at customersupport@scriptypointer.com. We will verify your identity before acting on a request and will respond within the period required by applicable law. You may also have the right to complain to your local data protection authority.

10. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at customersupport@scriptypointer.com or contact us by post at: