Privacy Policy

Effective date: May 10, 2026

This Privacy Policy explains what personal data ClaudeWork.ai ("we", "our") collects, how we use it, and your rights regarding it. By using the Platform you agree to this Policy.

1. What we collect

You provide:

• Account info: email address, display name, password (hashed), bio, skills, optional profile photo and cover image, optional headline, location, portfolio URL.
• Transaction info: jobs and offers you post or accept, deliverables, messages, file attachments, reviews, ratings.
• Payment info: handled by Stripe — we never see or store your full card number. We store a Stripe customer/account identifier and the metadata of your wallet transactions.

Collected automatically:

• Device + log data: IP address, browser type, pages visited, timestamps, referrer.
• Cookies + sessions: a session cookie keeps you signed in. We use a separate cookie for the preview gate during testing. We do not run third-party advertising or tracking cookies.

From third parties:

• Stripe: payment status, charges, payouts, KYC results for Connect Express accounts.
• Resend: email delivery status (delivered, bounced, complained).
• Cloudflare: aggregate traffic and security data for the domain.

2. How we use it

• To operate the marketplace — auth, escrow, messaging, reviews
• To send transactional email — welcome, password reset, deadline reminders, dispute notifications
• To process payments and payouts via Stripe
• To prevent fraud, abuse, and policy violations
• To respond to support requests and legal obligations

We do not sell your personal data. We do not use your data to train AI models without explicit consent.

3. When we share it

• With the other party on a job or offer: your display name, profile, messages, and review history are visible to the user you're working with.
• Publicly on your profile: display name, bio, skills, headline, location, portfolio URL, completed-job count, and review history are visible to anyone visiting /u/<your-id>.
• With service providers: Stripe (payments, payouts, KYC), Resend (email), Cloudflare (DNS/CDN/WAF), our hosting provider. Each acts as a processor under contract.
• For legal reasons: when required by valid legal process, to enforce our Terms, or to protect the rights, property, or safety of users or the public.
• In a corporate event: if ClaudeWork.ai is acquired or merges, your data may transfer to the successor entity.

4. Storage and security

Account data is stored in a managed database. Passwords are hashed with bcrypt. Sessions are stored server-side. Uploaded files (avatars, covers, message attachments) are stored on our hosting provider. We use Cloudflare for transport-layer encryption (HTTPS) and DDoS protection. We use industry-standard practices but cannot guarantee absolute security.

5. Retention

• Account data: kept while the account is active. After deletion, retained up to 30 days for backup purposes, then irreversibly deleted, except as required by law (e.g. tax records: 7 years).
• Transaction records: kept for 7 years for accounting and legal compliance.
• Messages and attachments on completed jobs: kept indefinitely as part of the job record, unless you request deletion.
• Server logs: rotated within 30 days.

6. Your rights

You may, at any time:

• Access the personal data we hold about you (download via Settings or by emailing Support)
• Correct inaccurate data (most fields are editable in Settings)
• Delete your account (email Support@claudework.ai; we'll process within 30 days, subject to legal-retention obligations)
• Object to processing or request restriction
• Port your data to another service
• Withdraw consent for non-essential processing (e.g. marketing email — we don't currently send marketing)

EU/UK residents have rights under GDPR/UK GDPR; California residents under CCPA/CPRA. Contact us to exercise them.

7. International transfers

Our hosting and most service providers are based in the United States. If you access the Platform from outside the US, your data will be transferred to and processed in the US, which may have different privacy laws than your country.

8. Children

The Platform is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact Support@claudework.ai and we will delete it.

9. Changes to this Policy

Material changes will be announced via email or in-app notice at least 14 days before they take effect.

10. Contact

Privacy questions, data requests, or complaints: Support@claudework.ai.

This Privacy Policy is a starting template tailored for ClaudeWork.ai. Before live launch with real users, you should have a licensed attorney in your jurisdiction review and finalize it based on the laws applicable to your operations and your users' locations (GDPR, CCPA, etc.).