Privacy Policy

SoloNerds.com ("we," "us," "our," or the "Platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace platform connecting freelance developers ("Nerds") with clients seeking technical services ("Clients").

By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Platform.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide when creating an account, building a profile, posting jobs, or communicating through the Platform:

• Account Information: Name, email address, password, and authentication data
• Profile Information: Professional bio, skills, portfolio items, social links, hourly rates, availability status, and profile photo
• Job Information: Project descriptions, requirements, budget details, and technical specifications
• Communications: Messages between Users, support requests, and feedback
• Payment Information: Billing details processed through our payment provider (Stripe); we do not store full payment card numbers
• Identity Verification: Government ID or other verification documents if you participate in enhanced verification programs

1.2 Information Collected Automatically

When you access the Platform, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns, and search queries
• Location Data: Approximate location derived from IP address
• Cookies and Tracking: See Section 7 for details on cookies

1.3 Information from Third Parties

We may receive information from third-party services you connect, including OAuth providers (Google, GitHub), linked social media accounts, and payment processors (Stripe).

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Platform
• Create and manage your account and profile
• Facilitate connections and communications between Users
• Process payments and prevent fraud
• Send transactional communications (confirmations, updates, security alerts)
• Send marketing communications (with your consent, where required)
• Improve and personalize the Platform experience
• Analyze usage patterns and optimize features
• Enforce our Terms of Service and protect against abuse
• Comply with legal obligations and respond to lawful requests

3. Confidentiality and Data Protection for Users

3.1 Project and Code Confidentiality

We understand that Clients share sensitive code, business logic, and proprietary information with Nerds through our Platform. We implement the following protections:

• Project details, code snippets, and attachments shared through our messaging system are encrypted in transit and at rest
• Access to project information is strictly limited to the involved parties and essential Platform staff for support purposes
• We do not analyze, mine, or use the content of your code or project materials for any purpose other than providing the Platform service
• Our staff who access project data for support are bound by confidentiality obligations

3.2 Protection of Nerd Proprietary Methods

We recognize that Solo Nerds may utilize proprietary tools, methodologies, scripts, and techniques. We commit to:

• Never requiring Nerds to disclose proprietary methods to us as a condition of Platform use
• Not claiming any rights to Nerds' proprietary tools or methodologies
• Binding all Users to confidentiality obligations through our Terms of Service regarding information learned through engagements
• Supporting Nerds' right to protect trade secrets in any disputes we facilitate

3.3 Non-Disclosure of Engagement Details

Unless explicitly authorized, we will not disclose: the identity of Clients or Nerds in specific engagements; project details, scope, or deliverables; financial terms between Users; or communications between Users. This applies to third parties, including other Users, partners, and the public.

3.4 Portfolio and Reference Permissions

Nerds may only include project information in their portfolio or reference completed work with explicit written permission from the Client. We provide tools for Clients to grant or deny such permissions. Nerds must not use Client logos, names, or project details without authorization.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

4.1 With Other Users

Your profile information (name, bio, skills, portfolio, ratings) is visible to other Users as necessary for the Platform to function. Clients can see Nerd profiles; Nerds can see job postings. Messages and project details are shared only with the specific Users you communicate with.

4.2 With Service Providers

We share information with third-party vendors who provide services on our behalf:

• Payment Processing: Stripe processes payments and receives necessary billing information
• Authentication: AWS Cognito handles authentication services
• Cloud Infrastructure: Our data is hosted on secure cloud providers (MongoDB Atlas, AWS)
• Analytics: We use analytics services to understand Platform usage (anonymized where possible)
• Email Services: Transactional email providers deliver notifications

These providers are contractually obligated to protect your information and use it only for specified purposes.

4.3 For Legal and Safety Reasons

We may disclose information if required by law, court order, or government request; to protect our rights, property, or safety; to prevent fraud, abuse, or illegal activity; or to enforce our Terms of Service. We will attempt to notify you before disclosure unless prohibited by law.

4.4 Business Transfers

If SoloNerds.com is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with hashed passwords and optional MFA
• Regular security assessments and vulnerability testing
• Access controls limiting employee access to personal data
• Incident response procedures for potential data breaches
• Employee training on data protection and security practices

While we strive to protect your information, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account deletion:

• Profile Data: Deleted within 30 days, except for data required for legal compliance or ongoing disputes
• Transaction Records: Retained for 7 years for tax and legal compliance
• Messages: Deleted within 90 days of account deletion unless required for dispute resolution
• Project Files: Deleted within 30 days; Users should download their files before account deletion
• Anonymized Analytics: May be retained indefinitely for research and improvement

7. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for Platform functionality, authentication, and security
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how Users interact with the Platform
• Marketing Cookies: Used for targeted advertising (with consent where required)

You can control cookies through your browser settings. Note that disabling essential cookies may impair Platform functionality.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

8.1 All Users

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your account and personal data
• Communication Preferences: Opt out of marketing communications
• Download: Export your data in a portable format

8.2 European Users (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under GDPR:

• Right to restrict processing of your personal data
• Right to object to processing based on legitimate interests
• Right to data portability
• Right to withdraw consent (where processing is based on consent)
• Right to lodge a complaint with a supervisory authority

Our legal bases for processing include: contract performance, legitimate interests (improving services, preventing fraud), legal compliance, and consent.

8.3 California Users (CCPA/CPRA)

California residents have additional rights under CCPA/CPRA:

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt out of "sale" of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information

To exercise these rights, contact us at privacy@solonerds.com. We will verify your identity before processing requests.

9. International Data Transfers

Our Platform is operated from the United States. If you access the Platform from outside the US, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate.

For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission and other lawful transfer mechanisms. By using the Platform, you consent to the transfer of your information to these locations.

10. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

11. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services you access.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Platform or via email. The "Last Updated" date at the top indicates when the policy was last revised. Your continued use after changes constitutes acceptance of the updated policy.