Privacy Policy

1. Our Sovereign Commitment

Worklyfy operates on the foundational principle that creators, software engineers, and founders are sovereign builders. Unlike legacy monopolies that monetize proposal fees, sell bidding telemetry, and take predatory cuts, Worklyfy operates on a flat, transparent 5% platform fee (freelancers keep 95%) and enforces the revolutionary 100% Connect Return Protocol.

• Zero Sale of User Data: We will never sell, license, or monetize your personal profiles, bid submissions, project messages, or client briefs to third-party ad networks or data brokers.
• Portable Professional Reputation: Your verified milestone history, client feedback ratings, and earnings metrics belong to you. You maintain ownership of your professional track record.
• No Secret Shadow Banning: We do not employ opaque automated AI algorithms that arbitrarily suspend accounts without human review and accessible appeal channels.

2. Information We Collect and Process

We collect and process only the information strictly necessary to facilitate milestone contracts, verify authentic talent, prevent spam bots, and execute financial disbursements:

A. Profile & Verification Data

• Account Identifiers: Full legal name, verified email address, contact telephone number (+91 or international dialing code), professional title, and primary skill specializations.
• Proof-of-Work Portfolios: URLs to verified public code repositories (GitHub, GitLab), design frames (Figma), and live deployed staging links submitted during proposal bidding.
• Identity Verification (KYC): Government-issued ID and biometric liveness checks where required for high-volume transactions, processed exclusively via certified, zero-knowledge verification partners. We store cryptographic verification tokens, not raw identification scans on public servers.

B. Project & Contract Data

• Milestone briefs, scope specifications, agreed contract deliverables, deadline timestamps, and escrow lock amounts.
• Encrypted communications exchanged through the native Worklyfy messaging system, preserved solely for contract fulfillment and dispute mediation audit trails.

3. Smart Escrow Vault & Connect Telemetry

When a client deposits funds for an active contract milestone, the capital is locked in segregated, tier-1 custodial escrow vaults before work commences:

• Escrow Audit Logs: Cryptographically signed deposit timestamps, transaction reference IDs, and automated milestone approval records are securely archived for statutory compliance and accounting verification.
• 100% Connect Return Logs: When a client closes a job without hiring, rejects a proposal, or when a job post expires after 7 days of client inactivity, our backend cron worker automatically credits 100% of spent connects back to the freelancer's wallet balance. Every return transaction is permanently recorded in your transparent wallet ledger.

4. Built-in In-Browser Video Studio Privacy

Worklyfy features native WebRTC high-definition video conferencing directly within your browser, eliminating the security hazards of third-party external meeting links:

• End-to-End Peer Encryption: Live audio, video, and screen-sharing data streams between clients and freelancers are encrypted using standard DTLS/SRTP protocols.
• Zero Secret Recording: Worklyfy does not record, tap, or transcribe audio or video streams unless explicitly requested and confirmed with dual-party mutual consent for formal dispute arbitration.
• Ephemeral Screen Sharing: Screen share buffers are processed strictly in browser memory and are never persisted to platform disks or cloud databases.

5. Local Payouts & Forex Transparency

Worklyfy provides transparent local banking disbursements and international payout routing across 70+ countries:

• Regulated Payment Rails: All banking data (IFSC, Account Number, UPI IDs, IBAN, Wise recipient hashes) are handled through PCI-DSS Level 1 compliant gateways (Stripe Connect, Wise Platform API, and regulated local banking rails).
• Zero Forex Spread Gouging: Unlike legacy platforms that embed 3.5% to 5.0% hidden markups on currency conversions, Worklyfy applies transparent live mid-market exchange rates with a flat 1.2% banking rail fee. The exact exchange rate applied is displayed to the second before withdrawal confirmation.

6. User Privacy Rights (GDPR, CCPA & India DPDP Act 2023)

Worklyfy enforces comprehensive data protection standards worldwide, complying with the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Digital Personal Data Protection Act, 2023 (India):

• Right to Access & Portability: You may request an export of your complete profile record, contract milestones, wallet transaction ledger, and proposal history at any time.
• Right to Rectification: You can modify or update skills, work history, phone number, and payout coordinates immediately via your profile settings.
• Right to Erasure ("Right to Be Forgotten"): Subject to statutory tax and financial record-keeping mandates, you may request full anonymization and permanent deletion of your account upon completion and payout of all active contracts.
• Right to Grievance Redressal: Dedicated, expedited escalation to our Data Protection Officer for any privacy concerns.

7. Security Architecture & Threat Defense

Worklyfy infrastructure utilizes zero-trust architecture designed for institutional reliability:

• AES-256 encryption at rest for all database volumes, backups, and file storage.
• TLS 1.3 encryption in transit across all web interfaces and API endpoints.
• Two-Factor Authentication (2FA/TOTP) enforcement for sensitive actions, including wallet withdrawals and milestone payouts.
• Daily threat mitigation, automated vulnerability scanning, and rate-limiting anti-DDoS firewalls.

8. Contact Our Data Protection Officer & Support Team

For privacy inquiries, audit requests, data correction, or security vulnerability disclosures, reach out directly to our designated compliance desk: