This Privacy Policy explains how Social Lancer ("we", "us") collects, uses and shares information when you use social-lancer.com and our related services (the "Service"). By using the Service, you agree to this Policy.
1. Information we collect
1.1 Information you provide
- Account data: name, email address, password (stored only as a secure hash by our authentication provider), role (brand or creator) and avatar.
- Profile data: handle, bio, city, platforms, niches, follower counts, rates, links to your social profiles and past campaigns.
- Brand data: company name, website and plan.
- Messages: the text and images you send in conversations, and when messages are read.
- Marketplace content: projects, proposals, milestones, services (gigs), packages, orders, order requirements, deliveries, reviews, saved lists and the files you attach to any of these.
- Support and reports: what you write when you contact support or report a user, plus the IP address and browser details sent with a support request.
1.2 Information we collect automatically
- Usage and activity data: pages viewed, searches, features used and timestamps.
- Device and log data: IP address, browser type, operating system and referrer, collected by our hosting and security provider.
- Cookies and local storage: to keep you signed in, protect your account and remember preferences such as dark mode and unsent message drafts.
1.3 Information from Google sign-in
If you choose "Continue with Google", Google shares your name, email address and profile picture with us (the openid, email and profile scopes). See section 4.
2. How we use information
- Create and secure your account and operate the Service.
- Show your public profile and listings to other users, and match brands with creators.
- Deliver messages, run projects, orders and reviews, and keep their history.
- Send emails about your account and activity: sign-up confirmation, password resets, a welcome email, new-message alerts (at most one per conversation every 30 minutes), proposals, awards, orders, deliveries, reviews and support replies.
- Detect, investigate and prevent fraud, spam, abuse and security incidents, and act on user reports.
- Comply with legal obligations and enforce our Terms.
You can turn off new-message emails in your profile settings. Emails about your account's security, and about orders or projects you take part in, are part of the Service and can't be turned off while your account is active.
3. How we share information
- With other users: your profile (name, handle, avatar, bio, city, platforms, niches, rates and links), and the projects, services and reviews you publish, are public. Your email address is never shown to other users. Messages and order details are visible only to the people in that conversation or order, and to our administrators when needed to handle reports, disputes or legal requests.
- Service providers that process data on our behalf:
- Cloudflare: hosting, content delivery and security.
- Supabase: database, authentication and file storage.
- Amazon Web Services (Amazon SES): sending email.
- Google: optional sign-in.
- When payments launch, a payment processor such as Stripe will handle card details. We will not store full card numbers.
- Legal: when required by law, court order, or to protect the rights, property or safety of our users or the public.
- Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy.
- We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
4. Google user data
When you sign in with Google we receive only your name, email address and profile picture. We use them solely to create your account, sign you in and display your name and picture on your profile. We do not request access to your Gmail, Drive, contacts or any other Google data, we do not sell Google user data or use it for advertising, and we do not transfer it to third parties except the service providers listed above that run the Service. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time from your Google Account's security settings.
5. Your rights
Depending on where you live, you may have the right to:
- Access, correct or delete the personal information we hold about you.
- Receive a copy of your data in a portable format.
- Object to or restrict certain processing, and withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority.
Most profile data can be edited directly in your profile. For anything else, including account deletion, email support@social-lancer.com. We will verify your request and respond within the time required by law.
6. Data retention
- Account, profile, message and marketplace data are kept while your account is active.
- When you delete your account, your profile and the messages, orders and listings tied to it are deleted, except where we must keep records for legal, tax, fraud-prevention or dispute purposes.
- Activity logs are deleted automatically after 90 days.
- Email delivery records held by our email provider are kept according to its standard retention.
7. Security
We use encryption in transit (HTTPS), hashed passwords, row-level security on our database so users can only reach data they are allowed to see, private storage for message images and order files, and least-privilege access for our staff and systems. No system is perfectly secure, so please use a strong, unique password.
8. International transfers
Our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers out of the EEA, UK and Switzerland.
9. Children
The Service is for people aged 18 or older. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.
10. Cookies
We use strictly necessary cookies and local storage for sign-in, security and preferences. We do not use advertising cookies. You can control cookies through your browser, but blocking them will break sign-in.
11. Changes
We may update this Policy. If changes are material, we will notify you in the Service or by email. The "Last updated" date at the top shows the latest revision.
12. Contact
Questions or requests? Email support@social-lancer.com.