Privacy Policy

2.1. Registration Data:

• Name
• Email address
• Phone number
• Profile photo (optional)
• City/location

2.2. OAuth Provider Data:

• Google: Email, name, profile photo
• Facebook: Email, name, profile photo
• Telegram: Telegram ID, username, name, profile photo

This data is only received if you choose to register through the respective provider.

2.3. Professional Data (additional):

• Professional skills and service categories
• Service description
• VAT number (optional, for legal entities)
• Portfolio and work examples

2.4. Platform Usage Data:

• Posted tasks and applications
• Messages between users
• Reviews and ratings
• Transaction history (without payment details - those are handled directly between users)

2.5. Technical Data:

• IP address
• Browser and device type
• Date and time of visits
• Pages you visit

3.1. We use your data for:

• Service provision: Creating and managing your account, connecting customers with professionals
• Communication: Sending notifications about applications, messages, and task updates
• Platform improvement: Analyzing usage to improve user experience
• Security: Preventing fraud and abuse
• Legal obligations: Complying with legal requirements

3.2. Legal Bases for Processing (under GDPR):

• Contract performance: Processing is necessary to provide the service
• Consent: For marketing communications (you can opt out at any time)
• Legitimate interest: To improve security and service quality
• Legal obligation: When required by law

4.1. Sharing with Other Users:

Your contact information (name, email, phone, Telegram) is shared with other users only when:

• You apply to a task - your information is shared with the task owner
• You accept an application - your information is shared with the selected professional

By performing these actions, you consent to this limited sharing.

4.2. Public Profile Information:

• Name (or nickname)
• Profile photo
• City
• Rating and number of reviews
• For professionals: service categories, description

4.3. Service Providers (Data Processors):

• Supabase: Database hosting and authentication (EU region)
• Vercel: Website hosting
• Telegram: Sending notifications (if you have connected Telegram)

4.4. We do NOT sell your personal data to third parties for marketing or advertising purposes.

4.5. Legal Requirements: We may disclose data if required by law or upon valid request from competent authorities.

5.1. Trudify uses only functional cookies that are necessary for the platform to work:

• Session cookies (Supabase Auth): Maintain your login session
• Language preferences (NEXT_LOCALE): Remember your selected language

5.2. We do NOT use:

• Advertising cookies
• Third-party tracking cookies
• Analytics cookies (Google Analytics and similar)

5.3. Since we only use strictly necessary cookies, separate cookie consent is not required under GDPR.

5.4. You can manage cookies through your browser settings. Note that blocking functional cookies may impair platform functionality.

7.1. We implement appropriate technical and organizational measures to protect your data:

• Encryption: All connections are secured with HTTPS/TLS encryption
• Database security: We use Supabase with Row Level Security (RLS) policies
• Access: Limited access to personal data only for authorized personnel
• Passwords: Passwords are stored encrypted (hashed)

7.2. Data is stored in data centers within the European Union (Supabase EU region).

7.3. Despite security measures, no system is 100% secure. If we become aware of a security breach, we will notify you in accordance with legal requirements.

8.1. We retain your data as long as you have an active Trudify account.

8.2. Upon Account Deletion:

• Personal data is deleted or anonymized within 30 days
• Reviews and ratings may be retained in anonymized form
• Data required for legal purposes may be retained longer

8.3. Inactive Accounts: We reserve the right to delete accounts inactive for more than 24 months, after prior notice.

9.1. Trudify is intended only for persons aged 18 years and older.

9.2. We do not knowingly collect personal data from persons under 18 years of age.

9.3. If we learn that we have collected data from a minor, we will take steps to delete it immediately.

10.1. We reserve the right to update this Privacy Policy as needed.

10.2. For significant changes, we will notify you via:

• Email to your registered address
• Notification in the platform
• Updating the "Last updated" date

10.3. Continued use of the platform after changes constitutes acceptance of the updated policy.