Privacy Policy

1. Information We Collect

At @YourService, we collect minimal personal data required to provide a safe, high-quality freelance marketplace:

• Account Profile Data: Full Name / Username, Email Address, Password hashes, and optional profile pictures.
• Social OAuth Data: When registering or signing in via Google, LinkedIn, or Facebook, we collect basic profile metadata (email, display name, profile avatar) provided by the OAuth provider.
• Transaction & Escrow Data: Service orders, milestone status, escrow balances, withdrawal requests, and nominated bank details.
• Communication Data: In-app messages exchanged between Buyers and Sellers to facilitate service delivery.

2. How We Use Your Data

We process your personal information strictly for legitimate operational purposes:

• To facilitate service ordering, milestone tracking, and instant escrow settlement.
• To send real-time notification alerts (🔔) regarding order status, deliveries, and new messages.
• To enforce platform governance rules, prevent fraud, and maintain administrative audit trails.
• To display public reviews, rating scores, and seller trust badges.

3. Data Protection & Encryption

Your data security is paramount. We employ industry-standard security measures, including 256-bit SSL encryption for all web transit, salted bcrypt password hashing, and isolation of private payment/bank credentials. Database records are secured on encrypted PostgreSQL infrastructure behind Nginx reverse proxies.

4. Cookies & Authentication Tokens

We use secure, HTTP-only JWT cookies to maintain user session state across NextAuth authentication cycles. We do not sell user data to third-party ad networks or use intrusive tracking cookies.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. Limited data is shared strictly with essential service providers (e.g. NextAuth OAuth providers like Google, LinkedIn, Facebook, and PostgreSQL database servers) solely for executing platform operations.

6. Personal Data Deletion & Right to be Forgotten (GDPR / CCPA)

In accordance with international privacy laws (GDPR Article 17 & CCPA), you have the absolute right to request the deletion or anonymization of your personal data.

• Submitting a Deletion Request: Users can request data erasure directly from their account portal under Profile → 🛡️ Data Privacy & Erasure.
• SuperAdmin Restricted Fulfillment: To safeguard financial records and prevent fraud, data deletion requests are reviewed and executed exclusively by authorized SuperAdmin Governance Officers within 30 days.
• Anonymization vs. Hard Delete: SuperAdmins may choose between:
  (a) Anonymization & Archival: Redacting all Personally Identifiable Information (PII) including full name, email address, password hash, bio, and bank details, while preserving anonymized transactional order totals for legal tax compliance.
  (b) Full Hard Delete: Completely purging the user profile and credentials from the database.
• Right to Retract Request: Users have the right to cancel or retract a pending data erasure request at any time prior to SuperAdmin fulfillment directly from their account portal (Profile → 🛡️ Data Privacy & Erasure).
• Re-Authentication Protection: SuperAdmin data deletion actions require mandatory password re-verification and generate immutable, timestamped entries in the platform's administrative audit log.

7. Your Privacy Rights & Contact

You have the right to access, update, or request the deletion of your personal account data at any time. For privacy inquiries or data requests, please contact privacy@atyourservice.website.