Privacy Policy

Last updated: April 2025

1. Who We Are

redraf ("we", "us", "our") is a freelance and professional networking platform available at redraf.com, operated by Artem Chikishev. We are responsible for the processing of your personal data as described in this Privacy Policy.

Contact: a420021@gmail.com · +358 40 221 2665

2. Data We Collect

Account data: name, email address, profile photo.
OAuth data: when signing in via Google, Facebook, or Apple, we receive only your public name and email. We never receive your password.
Profile data: occupation, skills, portfolio, work history — everything you add voluntarily.
Project and task data: projects, tasks, messages, and files you create on the Platform.
Technical data: IP address, browser type, pages visited, session duration — collected via Google Analytics and Google Tag Manager.
Advertising data: browsing behaviour for ad personalisation, collected by Google AdSense with your consent.

3. Legal Basis for Processing

Contract performance: to provide the Platform's services to you.
Legitimate interests: to improve our services, ensure security, and prevent fraud.
Consent: for analytics and advertising cookies (you can withdraw consent at any time).
Legal obligation: to comply with applicable laws.

4. How We Use Your Data

To create and manage your account.
To provide Platform features: projects, vacancies, messaging, search.
To display relevant advertisements via Google AdSense.
To analyse Platform usage and improve our services.
To respond to your support requests.
To comply with legal obligations.

5. Data Sharing

We do not sell your personal data. We share data only with:

Supabase — database and authentication infrastructure.
Vercel — hosting and content delivery.
Google — Analytics, Tag Manager, AdSense, and OAuth sign-in.
Other users — your profile information is visible to other users as you choose.
Legal authorities — when required by applicable law or court order.

6. International Data Transfers

Your data may be processed outside the European Economic Area (EEA), including in the United States, by our service providers. These transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, your data will be removed within 30 days, except where retention is required by law.

8. Your Rights (GDPR)

If you are in the EEA or UK, you have the right to:

Access — request a copy of your personal data.
Rectification — correct inaccurate data.
Erasure — request deletion ("right to be forgotten").
Restriction — limit how we process your data.
Data portability — receive your data in a machine-readable format.
Objection — object to processing based on legitimate interests.
Withdraw consent — withdraw at any time without affecting prior processing.

To exercise these rights, email a420021@gmail.com.

9. Cookies

We use cookies and similar technologies. For full details, see our Cookie Policy.

10. Security

We use HTTPS for all data transmission. Passwords are never stored — authentication is handled via OAuth providers. We apply appropriate technical and organisational measures to protect your data.

11. Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us and we will delete their data.

12. Changes to This Policy

We may update this policy from time to time. Significant changes will be reflected by updating the date at the top of this page.

13. Contact

Artem Chikishev
Email: a420021@gmail.com
Phone: +358 40 221 2665