Legal

Draft. A starting point, not advice, and not reviewed by a lawyer. It is written against the GDPR because that is the strictest regime this service is likely to meet, but a site open worldwide also answers to local law. Have a lawyer review it.

Privacy Policy

This explains what gizycko.online collects, why, and what you can do about it. It is written against the GDPR (Regulation (EU) 2016/679) because that is the strictest regime the service is likely to meet. If your country gives you stronger rights - the UK GDPR, California’s CCPA/CPRA, Brazil’s LGPD and others do in places - those apply to you as well.

Who is responsible

The data controller is Gizycko. You can reach us through the contact page. Requests to see, correct or delete your data go the same way; choose “Delete my account” on the form for the last.

What we collect

  • Account data - name, email address, password (stored only as a hash), sign-in timestamps, IP address, and user agent.
  • Profile data - display name, headline, biography, country and city, languages, skills, hourly rate, company name, website, and the picture you upload.
  • Activity data - jobs you post, offers you send, messages, reviews, saved jobs, and reports you make.
  • Anti-spam data - a one-way hash of the IP address a contact form was sent from, kept so one machine cannot flood the inbox. The address itself is not stored.

What we do not collect

No card or bank details: payment happens directly between members and never through this service. No date of birth, no gender, and nothing about your health, beliefs or private life - the special categories under Article 9 GDPR. Please keep such details out of your profile and your job descriptions.

Why we process it, and on what basis

  • To run the service - showing jobs and profiles, carrying offers and messages between members, and keeping reviews. Basis: performance of our contract with you (Art. 6(1)(b)).
  • To keep people safe - moderation, blocks, reports, bans, fraud prevention. Basis: our legitimate interest in a safe platform (Art. 6(1)(f)).
  • To meet legal duties - responding to lawful requests, keeping records we are required to keep. Basis: legal obligation (Art. 6(1)(c)).

Who can see what

A job you post, and your profile - name, headline, biography, country and city, skills, rate, reviews - are public: they can be read by anybody on the internet and found through a search engine. That is the point of a board, but it is worth knowing before you write. You can hide your profile from the freelancer directory at any time in your profile.

Your email address is never shown to other members. Offers are visible only to you and the client who posted the job. Messages are visible only to the two people in the conversation, and to a moderator when a report is made about them.

Who we share it with

Processors that host and operate the service on our behalf, under written contracts: Vercel (hosting), Supabase (database and file storage), and Resend (email). We do not sell personal data, we do not share it with advertisers, and we do not use it to train AI models.

Where it is stored

In the European Union. Because the service is open worldwide, your data may be processed in a country other than your own. Transfers out of the European Economic Area or the UK rely on the European Commission’s Standard Contractual Clauses or the UK equivalent, and transfers elsewhere on the safeguard that country’s law requires.

How long we keep it

  • Account and profile data: until you delete your account.
  • After deletion: removed within 30 days, except records of bans and serious safety reports, which we keep for up to 2 years to stop banned users returning.
  • Server logs: 90 days.

Your rights

You may access, correct, erase, restrict, or object to processing of your data, and receive a copy in a portable format. Use Download my data in your settings, and ask there for the account itself to be deleted. You may withdraw consent at any time without affecting processing already carried out.

You may also complain to your national data protection authority. In the EU that is the regulator where you live or work; in the UK, the Information Commissioner’s Office.

Cookies

We set one strictly necessary cookie to keep you signed in. It requires no consent. We do not use advertising or analytics cookies. If that changes, we will ask first.

Children

The service is for adults. You confirm you are 18 or older when you create an account, and we remove accounts found to belong to anybody younger. Report one with the report button on any profile.