1. Introduction
Welcome to Stablelance (“we,” “us,” or “our”). We operate a zero-fee stablecoin payroll and contract management platform for global freelancers (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We are committed to protecting your personal data and your right to privacy. If you have any questions or concerns about our policy, or our practices with regards to your personal information, please contact us. This policy applies to all information collected through our Service, as well as any related services, sales, marketing, or events.2. Information We Collect
We collect personal information that you voluntarily provide to us, information that is automatically collected when you use our Services, and information from third-party sources.2.1. Information You Provide to Us
- Account Information: When you register for an account, we collect your email address, name, and password. You may also choose to provide additional profile information such as your bio, skills, hourly rate, location, timezone, and links to your portfolio or social media profiles (e.g., GitHub, LinkedIn).
- Contract and Communication Data: We collect information you provide within contracts, including descriptions, milestones, and any messages or files exchanged between employers and freelancers.
2.2. Information We Collect Automatically
- Log and Usage Data: We automatically collect log and usage data, which is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Service. This data may include your IP address, device information, browser type, and settings, and information about your activity on the platform (such as date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take).
- Device Data: We collect data about your computer, phone, tablet, or other device you use to access the Service. This may include device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, and operating system.
- Blockchain Data: Our Service interacts with the Polygon blockchain. As such, your public wallet address and transaction history (including transaction hashes, amounts, and timestamps) are publicly and permanently stored on the blockchain. We collect and store associations between your account and your wallet address.
2.3. Information from Third Parties
- Authentication Services: We use Web3Auth to provide social login options (e.g., Google, Apple). When you use these services to log in, we receive information from the provider, such as your email address and name, which we use to create and manage your account.
3. How We Use Your Information
We use the information we collect for various purposes, including:- To Provide and Manage the Service: To create and manage your account, facilitate contract creation and management, process payments, and provide customer support.
- For Security and Fraud Prevention: To monitor for and prevent fraudulent or unauthorized activity, and to enforce our Terms of Service.
- For Legal and Compliance Purposes: To comply with legal obligations, and to respond to legal requests from law enforcement.
- To Communicate with You: To send you administrative information, such as updates to our terms and policies, and to respond to your inquiries.
- To Improve Our Service: To analyze usage trends and user feedback to improve the functionality and user experience of our platform.
4. How We Share Your Information
We may share your information in the following situations:- With Other Users: Your profile information (such as name, skills, and bio) may be visible to other users on the platform, particularly when you apply for a job or enter into a contract. Information within a contract is shared between the employer and the freelancer party to that contract.
- With Service Providers: We share information with third-party vendors and service providers that perform services for us, such as database management (Supabase), authentication (Web3Auth), cloud hosting (Vercel), and error tracking (Sentry). These providers only have access to the information necessary to perform their functions and are contractually obligated to protect it.
- For Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
- To Protect Our Rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
5. Data Security
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. These measures include:- Encryption: All data is encrypted in transit (HTTPS) and at rest.
- Access Control: We utilize robust access control mechanisms, including Supabase’s Row-Level Security (RLS), to ensure that data is only accessible by authorized users.
- Non-Custodial Wallets: You maintain full control over your funds and private keys through the non-custodial wallet created via Web3Auth. We never have access to your private keys.
- Secure Authentication: We use secure, httpOnly cookies for session management and validate tokens on every request.
6. Data Retention
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it. Information stored on the blockchain, such as transaction history, is immutable and cannot be deleted.7. Your Data Rights
Depending on your location, you may have the following rights regarding your personal information:- The right to access: You have the right to request copies of your personal data.
- The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.