Privacy Policy

1. Introduction

This policy applies to all users of ggfreela and describes how we process personal data, in accordance with the General Data Protection Law (Law 13.709/2018 - LGPD).

By creating an account you declare that you have read and understood this policy. If you do not agree with it, you must not use the platform.

2. Information we collect

We collect the information you provide when creating an account, publishing projects, submitting proposals and communicating with other users, as well as usage and device data.

• Registration data: name, email, password, country, date of birth, account type and language preferences.
• Profile data: photo, professional title, description, skills, experience level and public username.
• Verification data: identity documents, selfie, address and proof of residence, when you request identity or address verification.
• Activity data: projects published, proposals sent, messages exchanged, deliveries, reports and disputes.
• Financial data: deposits, withdrawals, balance, credits, payment method data, PIX keys and transaction history.
• Access data: IP address, device, browser, login records and pages visited on the platform.

3. How we use your information

We use your data to operate the platform, connect freelancers and clients, process payments, prevent fraud and comply with legal obligations.

• Create and manage your account and allow you to sign in.
• Publish projects, send proposals, enable chat and the delivery flow.
• Process deposits, payments, releases, refunds and withdrawals.
• Verify identity and address, as required for withdrawals and for the security of the platform.
• Prevent fraud, abuse and breaches of the Terms of Use.
• Send service communications, such as payment confirmation, dispute results and security alerts.
• Produce statistics and improve the features of the platform.

4. Legal bases for processing

We process your data based on the execution of the contract, on the compliance with legal and regulatory obligations, on the legitimate interest in preventing fraud and improving the platform, and on your consent, when required.

When the processing is based on consent, you may revoke it at any time in your account settings or through our contact channels.

5. Sharing with third parties

We do not sell, rent or trade your personal data. We share data only with partners necessary to operate the platform, always limited to what is needed for each service.

• Payment gateways, for processing deposits, payments, refunds and withdrawals.
• Identity and address verification providers, when the automatic verification is enabled.
• File storage and hosting providers, which keep the data on secure servers.
• Public authorities, when there is a legal, judicial or administrative order.

6. Data displayed publicly

Projects published by clients, the public profile data, the portfolios and the information you choose to make public may be displayed to any visitor of the platform and indexed by search engines.

Information exchanged outside the platform is not protected by this policy, and we are not responsible for the use third parties make of it.

7. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, such as language and theme, and measure the use of the platform.

You may block or delete cookies in your browser settings. Blocking essential cookies may prevent parts of the platform from working properly.

8. Disputes and access to conversations

If a dispute is opened, the moderation team may read the messages, files and delivery records exchanged in the conversation, exclusively to analyse the case and issue a decision.

Access is restricted to the responsible team and the content is used only for the analysis of the dispute.

9. Data storage and security

Your data is stored on secure servers and access is restricted. Identity documents are stored encrypted in a private bucket and reviewed only by authorized staff.

Passwords are stored using encryption and sensitive keys are protected. Communication with the platform uses secure connections.

No system is completely safe. In case of a security incident that may cause relevant risk to users, we will communicate the affected users and the competent authority, as provided in the LGPD.

10. Retention and deletion

We keep your data while your account is active and, after the closure, for the periods necessary to comply with legal, tax and regulatory obligations, to prevent fraud and to allow the exercise of rights in judicial or administrative proceedings.

You may request the deletion of your data at any time. The request is analysed in the light of the legal retention obligations and, once approved, the data is deleted or anonymised.

Some records, such as financial transactions and messages linked to a dispute, may be kept after the account closure, as provided by law.

11. Your rights

You can access, correct or delete your personal data at any time in your account settings, or by contacting us.

Under the LGPD you may also request the confirmation of the processing, the anonymisation, the blocking or the elimination of your data, as well as the portability and the information about the sharing of your data with third parties.

You may revoke the consent given and oppose processing that does not comply with the law. Requests are answered within the legal periods and may be made in your account settings or through our contact channels.

12. Children and teenagers

ggfreela is intended for users of at least 18 years old and does not knowingly collect data from children or teenagers. If we identify a registration in this condition, the account will be closed and the data deleted.

13. International transfer

Your data may be processed on servers located outside Brazil, in countries that offer an adequate level of protection or through contractual clauses that guarantee the protection of the data, as provided in the LGPD.

14. Communications

The registration email is our main communication channel. Notices about payments, deliveries, disputes and security are always sent to it and cannot be disabled while your account is active.

Promotional communications may be disabled at any time in your account settings or through the unsubscribe link present in the emails.

15. Changes to this policy

We may update this policy to reflect changes in the platform, in the legislation or in the way we process data. Significant changes will be communicated on the platform or by email.

The current version is always available on this page and the date of the last update is informed at the top of the document.

16. Contact

If you have questions about this policy, contact us at [email protected].

To exercise your rights as a data subject, use the same address and inform the email linked to your account, so that we can confirm your identity.