Privacy Policy

1. Introduction

Welcome to VERORA. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our platform. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. What Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Site includes:

• Personal Data: We collect essential account details (name, email address, password hash, role) and portfolio content you voluntarily publish (proof URLs, descriptions, skills, rates, social links).
• Derivative Data: Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site.
• Third-Party Data: When linking your GitHub account, we verify your public username and repository metadata strictly via public GitHub API endpoints. We only collect what is necessary for verification and portfolio building.

3. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

• Create and manage your account.
• Facilitate job postings, contract negotiations, and talent discovery.
• Protect against fraudulent transactions, monitor against theft, and protect against criminal activity.
• Resolve disputes and troubleshoot problems.
• Send you administrative information, such as updates to our Terms of Service or Privacy Policy.

4. How Your Data Is Protected

VERORA stores passwords using adaptive bcrypt hashing (minimum cost factor 10). Session tokens are stored in HTTP-only, SameSite encrypted cookies via Iron Session. All database connections use SSL in production, and all mutations are secured by strict anti-CSRF token verification and rate limiting. We use administrative, technical, and physical security measures to help protect your personal information.

5. Disclosure of Your Information

We do not sell, trade, or rent your personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners, trusted affiliates, and advertisers. We may also disclose your information if required by law or to protect the rights, property, and safety of VERORA, our users, or others.

6. Zero Third-Party Advertising Trackers

VERORA does not run Google Analytics, Meta Pixels, or third-party behavioral advertising scripts. Your contract details, message trails, and earnings history remain confidential and visible only to the participating parties and authorized platform audits.

7. Data Portability & Account Deletion

You have full control over your data. You may edit, update, or purge your portfolio proofs and profile information at any time from your account settings. To request a complete export of your personal data or full erasure of your account and associated audit trails (Right to be Forgotten), please submit a request via platform moderation or contact our support team.

8. Children's Privacy

Our Services do not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: privacy@verora.org.