favourcircleWORKING PRIVACY DESIGN · NOT FINAL LEGAL TERMS
Your work deserves a private space.
What this version stores
Account email, password hash, chosen public profile, listings, proposals, orders, messages, private delivery images, notifications and Favour Points records. No third-party analytics or advertising trackers are included.
Who can see it
Public profiles and active listings are visible in the marketplace. Email addresses are not shown on profiles. Proposals are visible only to their sender and listing owner. Order messages and files are visible only to the two order participants. Administrator record access is limited; sensitive decisions and adjustments are recorded.
Your controls
Hide your profile in settings, archive listings, block members, download your account data and request deletion. Hiding a profile does not automatically hide already published listings; archive those separately. A deletion request hides both immediately.
Retention and deletion
Deletion is a reviewed request, not immediate erasure. Active orders and financial/accountability records may need to be retained. Exact retention periods, the legal business identity, processors, grievance contact and deletion service levels remain launch dependencies. Do not treat this draft as a completed statutory privacy notice.
Local demonstration storage
The database and uploaded files persist on this computer. Database files are not separately encrypted by this application. Operating-system encryption, production encryption at rest, protected backups and managed storage must be configured and verified before launch.
Sessions
Essential session and CSRF cookies support sign-in and form security. Protected responses are marked private and no-store. Production settings require secure cookies and HTTPS.
Social-profile proof and negotiations
We store your declared platform, handle, public profile, verification code, proof URL, optional self-reported follower count and review outcome. Only verified social profiles appear publicly; pending proof is available to you and authorized reviewers. Ownership proof is distinct from identity verification or audience-quality certification. Private negotiation messages and quote history are visible to the two participants. These records are included in your account export.
Reviews and photos
Completed-favour reviews and ratings appear on the recipient’s public profile. You may add up to three photos. We validate and rewrite image files, remove their source metadata and keep them private until a moderator approves their content. Pending or rejected photos are accessible only to their uploader and authorized moderators. Approved photos follow the recipient profile’s visibility. Moderation decisions are recorded; the decision reason is shown to the uploader. There is no automated AI content classifier in this version. Please share only relevant images you have permission to use, without private information. Use the member report option to flag an inappropriate review or photo.