Privacy Policy

1. Information We Collect

We collect only the information necessary to operate the marketplace, process payments, verify identity, and keep the platform safe.

• •Account information: name, email address, password (stored only as a salted, irreversible hash), role, and profile details you provide.
• •Platform activity: projects posted, proposals submitted, messages sent, reviews written, files uploaded, and time logs recorded.
• •Transaction data: engagement amounts, escrow status, payouts, and invoices processed through zayase Payments.
• •Technical data: device and browser information, approximate location derived from IP address, and usage patterns.

2. How We Use Information

• •To operate the marketplace — matching Clients with Professionals and administering engagements.
• •To process payments, hold funds in escrow, and issue payouts and invoices.
• •To keep the Platform secure, prevent fraud and abuse, and enforce our policies.
• •To communicate with you about your account, engagements, and security matters.
• •To comply with legal obligations and respond to lawful requests.

3. Data Sharing

We do not sell your personal information. We share data only with: (a) counterparties in your engagements (e.g., a Professional sees the Client's project brief); (b) Stripe, our payment processor and compliance engine — Stripe handles identity verification, W-9 / tax ID collection, bank account linking, and payout transfers as part of Stripe Connect Express onboarding; (c) service providers who support hosting and communications under contract; and (d) authorities where required by law. zayase does not see or store identity documents, tax IDs, or full bank account details — Stripe handles all sensitive compliance data.

4. Data Security

• •Passwords are hashed with a modern adaptive hashing algorithm and are never stored or transmitted in plain text.
• •All traffic is encrypted in transit using TLS; sensitive payment data is handled exclusively by our payment processor.
• •Access to production data is limited to authorized personnel, and privileged actions are recorded in audit logs.
• •We apply role-based access control so users can only reach data intended for them.

5. Cookies and Similar Technologies

We use a small number of strictly necessary cookies to keep you signed in and protect against fraud, plus optional analytics cookies to understand how the Platform is used. See our Cookie Policy for details and choices.

6. Data Retention

We keep account and transaction records for as long as your account is active and thereafter as required for legal, accounting, and dispute-resolution purposes. You may request deletion of personal data not subject to a retention obligation.

7. Your Rights

• •Access and portability: request a copy of the personal data we hold about you.
• •Correction: ask us to correct inaccurate or incomplete information.
• •Deletion: request deletion of data we are not legally required to retain.
• •Objection and restriction: object to certain processing, including marketing communications.
• •To exercise any right, contact privacy@zayase.app. We respond within 30 days.

8. Children's Privacy

The Platform is not directed to children under 18, and we do not knowingly collect their personal information.

9. U.S.-Only Operations — No International Transfers

zayase operates exclusively in the United States and is available only to U.S. citizens and U.S. resident aliens residing in the United States. All users must attest to their U.S. tax status during registration. Because we do not offer the Platform outside the United States and do not knowingly collect personal information from non-U.S. residents, the international data transfer provisions (including the EU GDPR cross-border transfer rules and standard contractual clauses) do not apply to our processing.

Your personal information is collected, processed, and stored in the United States. Our service providers and processors are likewise based in or provide services within the United States, and we do not transfer personal information to countries outside the United States.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

We do not sell your personal information, as “sale” is defined under California law, and we have not sold your personal information in the preceding twelve (12) months. We also do not share your personal information for cross-context behavioral advertising.

California residents may exercise the following rights: (a) the right to know what personal information we collect and how it is used; (b) the right to request deletion of personal information; (c) the right to correct inaccurate personal information; (d) the right to opt out of any future sale or sharing of personal information (not applicable, as we do not sell or share it); and (e) the right not to receive discriminatory treatment for exercising these rights.

To exercise these rights, submit a verifiable consumer request to privacy@zayase.app. We will confirm your identity before processing your request and respond within forty-five (45) days, as allowed by California law.

We collect the categories of personal information described in Section 1 for the business and commercial purposes described in Section 2. We retain personal information as described in Section 6.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced through the Platform at least fourteen (14) days before taking effect.

12. Contact

Questions about this Privacy Policy may be sent to privacy@zayase.app.