Privacy Policy

1. What data we collect

We collect only what the platform needs in order to work:

• Account data: name, email address, role (client or developer). Your password is never stored in the clear — only an irreversible hash.
• Profile data (optional): phone number, bio, skills, avatar, portfolio links.
• Business profile for clients (optional): company name, industry, website. The tax ID (INN/STIR) is used for verification only and is never shown to anyone.
• Platform activity: the projects you post, applications, contracts, tasks and chat messages.
• Payment data: the amount and status of escrow transactions. We do NOT store your card number — it goes directly to Click or Payme.
• Technical data: IP address and request logs, used for security and troubleshooting.

2. Signing in with Google or GitHub

When you use the Google or GitHub button, we receive only the following from the provider:

• Google: your verified email address and your name.
• GitHub: your verified primary email address, your name, your username and your public profile URL.
• Your password never reaches us — only Google or GitHub ever sees it.
• We perform no actions in your Google or GitHub account on your behalf: we do not read your contacts, your files or your private repositories.

3. Why the data is used

Collected data is used only for the following purposes:

• Creating your account and signing you in.
• Running the project, application and contract flow — that is, showing the two sides to each other.
• Processing escrow payments and calculating the platform commission.
• Sending notifications about applications, payments and messages.
• Detecting fraud, spam and account takeover attempts.
• Showing a moderator both sides' evidence when a dispute is opened.

4. We do not pass data to third parties

We do NOT sell your personal data and never hand it to anyone for advertising. Data leaves the platform only in these cases:

• Payment providers (Click, Payme) — only to the extent needed to carry out a transaction.
• When the law requires it — on a lawful request from the competent authorities of the Republic of Uzbekistan.
• Within the platform itself: the public part of your profile (name, skills, portfolio, rating) is visible to other users. Your email and phone are disclosed only to the party you have a contract with.

5. Storage and security

Data is not kept longer than it needs to be:

• All connections are encrypted over HTTPS.
• Access credentials handed over with a delivery (admin panel, hosting, database passwords) are stored encrypted and are revealed only to the client on that contract.
• Chat messages are deleted automatically after 365 days.
• After you delete your account your data is purged completely within 30 days. That window makes an accidental deletion reversible.
• Contract and payment records may be retained in anonymised form as required for accounting.

6. Your rights

You have the following control over your data:

• View and correct: at any time from your profile page.
• Obtain a copy: download all of your data in a machine-readable format (JSON).
• Delete: request complete deletion of your account.
• Opt out of notifications: turn off email and Telegram messages in your profile settings.

7. Cookies

The platform uses only cookies that are necessary for it to function: a secure (HttpOnly) cookie that holds your session, and a cookie that remembers the language you chose. No advertising or third-party tracking cookies are used.