Privacy Policy

Effective date: January 1, 2026

Workia.dev ("we", "our", or "us") operates the workia.dev platform. This Privacy Policy explains how we collect, use, and protect your personal data when you use our services. We are committed to full compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Information We Collect

We collect information you provide directly to us, as well as data generated through your use of our platform.

Account Information

When you register, we collect your name, email address, password (hashed), role (client or freelancer), and optionally your profile photo, bio, skills, hourly rate, and portfolio items.

Project & Transaction Data

We store project descriptions, proposals, milestone details, messages exchanged between users, and payment records. Financial transactions are processed by Stripe; we do not store raw card data.

Usage & Technical Data

We automatically collect IP addresses, browser type, device information, pages visited, session duration, and referral sources to improve platform performance and security.

2. How We Use Your Information

To provide, operate, and improve the Workia.dev platform and its features.
To match clients with relevant freelancers using our AI-powered recommendation engine.
To process payments, manage escrow, and handle billing via Stripe.
To send transactional emails (account confirmation, project updates, payment receipts).
To send marketing communications where you have given explicit consent.
To detect, prevent, and investigate fraud, abuse, or security incidents.
To comply with legal obligations, including tax reporting and GDPR obligations.
To personalise your experience and show relevant projects or freelancers.

3. Data Sharing

We do not sell your personal data to third parties. We share data only in the following limited circumstances:

With Stripe for payment processing. Stripe's privacy policy governs their use of your data.
With Supabase for database hosting and authentication, under a data processing agreement.
With other platform users as necessary for the service (e.g., your public freelancer profile is visible to clients).
With law enforcement or regulatory authorities where required by law.
With service providers who help us operate the platform (e.g., email delivery, analytics), under strict data processing agreements.

4. Cookies

We use cookies and similar tracking technologies to operate the platform and analyse usage. These include:

Essential Cookies

Required for authentication, session management, and security. Cannot be disabled.

Analytics Cookies

Help us understand how users interact with the platform. Used with your consent.

Preference Cookies

Remember your settings and preferences across sessions.

5. Data Retention

We retain your personal data for as long as your account is active or as required to provide services. Specifically:

Account data is retained for the lifetime of your account plus 30 days after deletion.
Transaction records are retained for 7 years to comply with tax and accounting obligations.
Messages and project data are retained for 2 years after a project is closed.
Server logs are retained for 90 days.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of Access

Request a copy of the data we hold about you.

Right to Rectification

Correct inaccurate or incomplete data.

Right to Erasure

Request deletion of your data ("right to be forgotten").

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing for direct marketing or legitimate interests.

Right to Restrict

Request that we limit the processing of your data.

To exercise any of these rights, please contact us at privacy@workia.dev. We will respond within 30 days.

7. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer:

Workia.dev — Data Privacy Team

Email: privacy@workia.dev

You may also lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

For more information on how we comply with GDPR, please visit our GDPR Compliance page.