Privacy Policy

• Account data — your email, workspace name, branding (logo, color). Needed to run your account.
• Client contact details — names, email addresses, companies, and job titles that freelancers add. Used only to send testimonial requests and reminders on the freelancer’s behalf. Client emails are never shown on any public page.
• Testimonial content — the answers clients write or speak, AI-polished drafts, and the final approved text.
• Voice recordings — stored in private storage, playable only through short-lived signed links. Shown publicly only when the client explicitly consents to media proof.
• Consent records — what the client agreed to, when, and from which IP address and browser. Kept as an audit trail so consent can be demonstrated later.
• We do not store payment or invoice data of your clients, and we never sell any data to third parties.

• Freelancers see only the data in their own workspace — this is enforced at the database level.
• Public pages (verification pages, portfolios, the directory) show only what the client consented to: the approved testimonial text and the credit line they chose. Never their email or contact details.
• Private testimonial links are unique, unguessable, expire after 60 days, and are excluded from search engines.

• Supabase — database, authentication, and file storage.
• Resend — sending transactional email (requests, reminders, notifications).
• Anthropic — AI polishing of testimonial drafts (only the testimonial text is sent; the client reviews and approves every result).
• Groq — transcribing voice recordings to text.
• Vercel — hosting.

• You choose exactly where your testimonial may be used, on the consent screen. Anything you didn’t tick doesn’t happen.
• You can withdraw consent at any time by contacting the freelancer who requested the testimonial — the testimonial is then revoked and removed from all public pages.
• If the freelancer edits your approved wording, nothing is shown as verified until you approve the new version.

• You can delete clients, projects, and testimonials from your workspace at any time; deletions cascade to related records.
• Your portfolio and directory listing are opt-in and can be unpublished instantly.
• To delete your account and all associated data, contact us.

Data is kept while the workspace is active. Voice recordings and testimonials are removed when the testimonial or workspace is deleted. All data is transmitted over HTTPS, stored with row-level access controls, and secrets are never exposed to the browser.