Privacy policy
Draft. This text has not yet been reviewed by a lawyer.
Who is responsible
The controller of your personal data is the Aphelore team (contact: support@aphelore.com). Contact: privacy@aphelore.com.
What we collect
Account details: name, work email, company and language. Builder details: public profile, past work, business and tax details, including tax number and date of birth, and verification records, including proof files, test answers and reviewer notes. References: the name and company of client contacts that builders give us, which we use only to check that builder. Project details: requests, messages, files and payment status. Contact form details. Technical logs needed to keep the service secure. Card details go directly to Stripe, and we never see them.
Why we use it
To provide the service and perform our contract with you. To verify builders and keep the marketplace safe, which is our legitimate interest. To meet legal duties on tax and accounting. To reply to you when you write to us.
Decisions about builders
Filters and turn order suggest builders from facts they declared. A person approves every shortlist and every verification decision. We do not use automated decisions with legal or similarly significant effects.
Who receives it
Clients and builders on the same project see what they need for that project. Verified builders' public profiles are visible to everyone. We use these providers: Supabase for the database, sign-in and files; Cloudflare for hosting and for translating project messages between people who use different languages; Resend for email; Stripe for payments. Some may process data outside the EEA, under standard contractual clauses or another lawful basis.
How long we keep it
Accounts: while they are open, then up to 12 months. Project and payment records: as long as tax and accounting law requires, usually 10 years in Italy. Unsuccessful applications: 24 months. Contact messages: 24 months.
Your rights
You can ask to access, correct, delete, restrict or transfer your data, and you can object to processing based on legitimate interest. Write to privacy@aphelore.com. You can also complain to your data protection authority, which in Italy is the Garante per la protezione dei dati personali.
If we contacted you first
If we wrote to you, we found your business contact details in a public source and contacted you about your professional activity. The source is named in our message. To stop hearing from us, reply "no thanks" or write to privacy@aphelore.com.