Privacy Policy

We collect the following categories of personal data:

**Account Information:** Name, email address, username, password (hashed), phone number (optional), profile photo, country/location.

**Profile & Work Data:** Professional skills, work experience, portfolio items, education history, identity verification documents (where applicable).

**Transaction Data:** Order history, payment amounts, withdrawal requests, wallet balances, invoices.

**Usage Data:** Pages visited, search queries, gigs viewed, time spent on platform, device type, browser, IP address.

**Communications:** Messages exchanged via our chat system, support ticket content, email correspondence with our team.

**Third-Party Login Data:** If you sign in via Google or Facebook, we receive your public profile data as permitted by those platforms.

We process your personal data for the following purposes:

• **Contract Performance:** Processing orders, payments, withdrawals, and dispute resolution. • **Platform Operation:** Displaying your profile, gigs, and reviews to relevant users. • **Security:** Fraud prevention, identity verification, and account protection. • **Communication:** Sending transactional emails (order updates, payment confirmations), platform notifications. • **Improvement:** Analyzing usage patterns to improve platform features and user experience. • **Legal Compliance:** Meeting our obligations under applicable law, including tax reporting. • **Marketing:** Sending newsletters and promotional emails (only with your consent; unsubscribe at any time).

We do not sell your personal data. We may share data in the following circumstances:

**Between Users:** Your public profile, gigs, reviews, and response time are visible to other users as part of normal marketplace operation. Your name and general location may be shared with clients when you accept an order.

**Service Providers:** We engage trusted third-party processors including Stripe and PayPal (payments), AWS (cloud infrastructure), Pusher (real-time messaging), and Google Analytics (aggregated analytics). All processors are bound by data processing agreements.

**Legal Requirements:** We may disclose data to comply with a legal obligation, protect our rights, or cooperate with law enforcement when required by law.

**Business Transfers:** In the event of a merger, acquisition, or asset sale, user data may be transferred. We will notify affected users before data is transferred and becomes subject to a different privacy policy.

FindAssign uses cookies and similar technologies for the following purposes:

**Essential Cookies:** Required for authentication, security, and basic platform functionality. These cannot be disabled.

**Preference Cookies:** Remember your settings such as language, currency, and dark/light mode.

**Analytics Cookies:** Help us understand how users interact with the platform. We use anonymized and aggregated data only.

**Marketing Cookies:** Used to measure the effectiveness of our advertising campaigns. Only deployed with your explicit consent.

You can manage cookie preferences through your browser settings or via our cookie consent banner. Disabling non-essential cookies will not prevent you from using the platform.

If you are located in the European Economic Area (EEA) or UK, you have the following rights under GDPR:

• **Right of Access (Art. 15):** Request a copy of all personal data we hold about you. • **Right to Rectification (Art. 16):** Correct inaccurate or incomplete data. • **Right to Erasure (Art. 17):** Request deletion of your data ("right to be forgotten"), subject to legal retention obligations. • **Right to Restrict Processing (Art. 18):** Ask us to pause processing your data in certain circumstances. • **Right to Data Portability (Art. 20):** Receive your data in a structured, machine-readable format. • **Right to Object (Art. 21):** Object to processing based on legitimate interests or for direct marketing. • **Right to Withdraw Consent (Art. 7):** Where processing is based on consent, withdraw it at any time without affecting prior lawfulness.

To exercise any of these rights, email our DPO at privacy@findassign.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

We retain your data for as long as your account is active or as needed to provide services. Specific retention periods:

• **Account data:** Retained for the duration of your account plus 3 years after closure (for dispute and legal purposes). • **Transaction records:** 7 years (tax and financial compliance). • **Chat messages:** 2 years from the date of the message. • **Support tickets:** 3 years from resolution. • **Server logs:** 90 days for security purposes.

When data is no longer required, we securely delete or anonymize it. You may request earlier deletion where no legal obligation requires retention.

FindAssign's Data Protection Officer (DPO) can be reached at:

Email: privacy@findassign.com Postal address: FindAssign Inc., 1234 Market Street, Suite 500, Wilmington, DE 19801, USA

For EU/UK users, we have appointed a representative in accordance with Article 27 GDPR. Contact details available upon request.

For general support inquiries, please use our Contact page rather than the DPO email, which is reserved for data protection matters only.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will notify you by email (at the address associated with your account) and/or by posting a prominent notice on the platform at least 30 days before the changes take effect.

We encourage you to review this policy periodically. Your continued use of FindAssign after the effective date of any changes constitutes your acceptance of the updated policy.