Privacy Policy

We collect only what we need to run the marketplace.

• Account details: your name, email address and a securely hashed password, plus the role you chose (client, freelancer or vendor).
• Profile details you choose to add: photo, bio, skills, company, website and social links, country, phone and address.
• Identity documents: if you apply for seller verification, the ID and business documents you upload. They are used only to verify you.
• Orders and payments: what you bought or sold, amounts, taxes, invoices, wallet activity and payout details. Card details are entered with our payment processors and are not stored by us.
• Content you create: messages, proposals, reviews, forum posts, support tickets, tasks and time entries on your contracts.
• Technical data: your IP address and device type when you sign in, check out or sign up (used for security and fraud checks), and the country derived from it.

We do not sell your personal information.

• To create your account, show your profile and let buyers and sellers deal with each other.
• To process payments, hold them until delivery, issue licenses and invoices, and pay sellers.
• To keep the platform safe: spotting fraud, resolving disputes and enforcing our Terms.
• To send notifications about your account, orders, contracts and tasks, and security messages such as sign-in codes.
• To send our newsletter, only if you subscribed. Every newsletter has an unsubscribe link.
• To improve the platform, using the usage statistics described below.

Essential cookies and storage keep you signed in and remember choices such as your language and cart. They cannot be switched off.

Analytics is optional and off until you accept it in the cookie banner. You can change your choice at any time with “Cookie settings” in the footer. If you accept, we record which pages are viewed, where visitors came from (referring site and campaign tags in links), your country and device type, using a random visitor ID stored in your browser. We do not store your IP address in this usage history. Withdrawing consent deletes the visitor ID and stops the recording.

Separately from consent, the platform records key actions inside your account (for example signing in, placing an order or opening a support ticket) and the actions administrators take, so that we can keep an audit trail and investigate problems.

If you arrive through another member’s affiliate link, we remember that link in your browser for 30 days so the referral can be credited if you sign up. When you sign up through it, we keep your IP address and browser details with the referral for up to 180 days to prevent abuse, then remove them.

Public information, such as your profile, listings, reviews and forum posts, can be seen by anyone.

• The other party in a transaction: a buyer sees the seller’s public profile and a seller sees what they need to deliver an order. Contract participants see each other’s names, messages, tasks and tracked time.
• Payment processors that take your payment or send your payout, such as Stripe, Razorpay and PayPal.
• Service providers that run the platform for us: hosting, email delivery and, where translation is switched on, a translation service that receives the text being translated.
• Authorities, when the law requires it or to protect the rights and safety of our users.

Data is kept only as long as it is needed. Deleted accounts are anonymised, but records we must keep for accounting and tax (orders, payments and invoices) stay, unlinked from your name where the law allows.

You are in control of your data. In your dashboard, open Account Settings → Privacy to:

• Download a copy of your data (profile, orders, messages and more) in one file.
• Delete your account. Your personal data is removed and your account anonymised. We ask for your password first, and you must first settle open obligations such as a wallet balance, open orders or disputes.
• Edit or remove profile information and uploaded documents at any time.
• Change cookie preferences with “Cookie settings” in the footer, and unsubscribe from the newsletter with the link in any email.

No system is perfectly secure. If you notice something suspicious, tell us straight away through the contact page.

• Connections are encrypted with HTTPS and passwords are stored hashed, never in plain text.
• Identity documents are private: they are opened only by administrators, through links that expire after a few minutes.
• Access is limited by role, so you can only see your own orders, contracts, tasks and messages. Administrator actions are logged.
• Sign-ins use expiring sessions, sign-in attempts are rate-limited, and verification codes are available as a second step.

Your data may be processed in countries other than your own, including where our providers operate. We apply the protections described here wherever it is handled.

WeaveStacks is for people aged 18 or over, or the age of majority where they live. We do not knowingly collect data from children.

When we change this policy we update the date at the top, and tell you in the app if the change is significant.

For questions or to use your rights, contact us through the contact page and mention “Privacy”.