Privacy Policy

Proflance (proflance.com and the Proflance mobile app) is operated by [Legal entity name], a [company type] registered in India with [CIN / registration number], whose registered office is at [Registered address] (“Proflance”, “we”, “us”).

For the personal data described here, we are the Data Fiduciary under the DPDP Act: we decide why and how it is processed. You are the Data Principal.

• Experts — people who sign up in the Proflance mobile app to offer their expertise.
• Client Contacts — people at our clients who receive a CV Share link from our team.
• Website visitors — anyone browsing proflance.com, including people who send us an enquiry.
• People referred by an Expert — whose phone number or email an Expert enters when referring them.

Proflance staff accounts are covered by [internal staff privacy notice], not by this policy.

If you are an Expert

• Sign-in details. The phone numbers and email addresses you sign in with, and, if you use Google or Apple, the account identifier they give us (plus the name and email they return). We send one-time codes to verify phones and emails.
• Profile. Display name, headline, bio, city, country, years of experience, LinkedIn URL, current employer and title, languages, availability, photo, and the Services, Industries and Skills you choose.
• CVs. Every CV you upload is kept as a separate version, together with the text we read from it. Values suggested from your CV only become part of your Profile when you confirm them.
• Marketplace activity. Your Applications (including your Quote and optional cover note), Invitations you receive, and Assignments (Service, dates, status and the agreed amount you receive).
• Ratings and Reviews given about you by clients (or entered by our staff on a client’s behalf) and those you give about clients.
• Verifications. When our team verifies a claim (your identity, a credential, a Service or an Industry), we keep the evidence you or they provide — for example an identity document or certificate — and its expiry date. Badges are awarded from these Verifications and other facts.
• Referrals. The phone number or email of each person you refer, and how far each Referral has progressed.
• Message preferences. Your marketing opt-in, Do Not Disturb setting and which phone or email should receive messages.
• Duplicate-account checks. Signals we use to spot when one person has more than one account, and records of any merge notice, your response and any account merge.
• Security and audit records. Sign-ins and sessions, changes you make, and a log of every time a staff member reveals your contact details or downloads your CV.

If you are a Client Contact

• Your name, work email and the client organisation you belong to, entered by our team.
• The one-time codes we email you to open a CV Share, and a record of each time you view one.
• Ratings and Reviews you give about an Expert, which our staff may enter on your behalf.

If you visit proflance.com or send an enquiry

• The enquiry form asks for your name, email and message, and optionally your phone number and organisation.
• To stop spam we limit enquiries per visitor. For this we keep a one-way hash of your IP address, not the address itself.
• Our hosting providers keep standard technical logs (such as IP address, browser and pages requested) for [server log retention period].
• If something breaks, an error report may be sent to our error-monitoring provider. These reports are configured not to include cookies, request headers or bodies, query strings or user details, and secret parts of CV Share and invite links are removed.

If an Expert referred you

We store the phone number or email the Expert entered so that we can credit the Referral if you join. We never message you ourselves — the Expert shares their invite link with you directly.

We process your personal data on the basis of your consent, which you give when you sign up or submit a form and can withdraw at any time, and for the legitimate uses the DPDP Act allows — for example, data you have voluntarily provided for a specific purpose, or compliance with the law. We use it to:

• Create your account, sign you in and keep it secure.
• Read your CV with automated text-recognition (OCR) and suggest Profile values for you to confirm or reject.
• Match you to Opportunities. We calculate a score from the Services, Skills, Industries, experience and availability on your Profile. Scores help our staff find candidates; people, not the score, decide who is shortlisted or selected.
• Run Applications, Invitations and Assignments, and record Ratings and Reviews.
• Verify claims you make and show the Badges you have earned.
• Find and resolve duplicate accounts so that each person has one account. We never merge accounts automatically; we notify you first and you can confirm or dispute.
• Send you messages: security notices and updates on your own Applications and Assignments always; Opportunity alerts unless you have set Do Not Disturb; marketing only if you opted in.
• Answer enquiries from visitors and clients.
• Prevent fraud and abuse, keep audit records and meet our legal obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

The public

Everything on your Profile is private by default. You choose, field by field, what is public. A public profile exists only once you make your display name public, and it then shows only the fields you switched on, plus your Badges. Public profiles appear in our expert directory and can be indexed by search engines. Your Ratings, Reviews, CVs and contact details are never public.

Proflance staff

Our staff can search and view Expert profiles to do their work. Access to more sensitive data depends on their role: revealing your phone or email and downloading your CV each need a specific permission, and every such access is logged.

Clients

• Our staff may share your CV with a named Client Contact through a CV Share. By default it is a cleaned copy generated from your CV’s text with phone numbers, email addresses and profile links removed. If your CV could not be read automatically, staff may instead share the original file, which may include your contact details.
• Each CV Share is for one person and one CV version, expires (after 7 days by default, at most 30), opens only after a code sent to that person’s email, is logged every time it is viewed, and can be revoked at any time. All your CV Shares are revoked as soon as you ask to delete your account.
• If you are selected for an Assignment, the client will learn who you are so the work can take place.

Other Experts

Other Experts see only what you have made public. If someone referred you, they see the contact they entered and the Referral’s stage — not your profile, unless it is public.

Enquiries

Messages sent through “Contact this Expert” go to our team, never directly to the Expert.

When the law requires it

We may disclose personal data where required by law, a court order or a lawful request from a government authority, or to protect the rights and safety of our users and the public.

We use the following providers (“Data Processors”) to run Proflance. They process personal data only on our instructions and under contract.

Our main database is hosted in [Neon region, e.g. Singapore or Mumbai]. Some providers listed above may process data outside India. We transfer personal data abroad only as the DPDP Act permits, and never to a country the Government of India has restricted.

• Expert accounts: for as long as your account exists, then as described in Deleting your account.
• Verifications: each has an expiry (identity checks 2 years by default; credentials until the certificate’s own date). A Badge disappears when its Verification expires.
• CV Shares: stop working when they expire or are revoked. [Retention period for expired CV Share records and generated copies].
• Enquiries: [Enquiry retention period].
• Client Contact details: [Client Contact retention period].
• Audit and security records: [Audit log retention period]. When an Expert’s account is erased, personal details in these records are redacted.
• Backups: erased data can remain in encrypted backups for up to [backup retention period] before it is overwritten.

You can delete your account at any time in the app under Account → Delete account. You can also email us at [privacy contact email] and our team will start it for you.

What happens straight away

• All your CV Shares are revoked.
• Open Applications are withdrawn and pending Invitations are declined.

The 14-day grace period

Your account is erased automatically 14 days after you ask. If you change your mind, just sign in during those 14 days and the request is cancelled. If you have an Assignment that is confirmed or in progress, erasure waits until our team completes or cancels it.

What is erased

Your Profile and photo, all CVs, your sign-in methods, message preferences, visibility settings, Verifications and their evidence, Badges, Referrals you sent, and the text of every Review you wrote or received.

What is kept, anonymised

So that our clients’ records stay accurate, we keep the history of your Assignments (Service, dates, status and the amounts you received) and Rating scores in both directions, shown only as “Former Expert” and no longer linked to your name or contact details. Audit and merge records keep their structure, with phone numbers, emails, names and other personal values redacted.

After erasure, your phone number and email are free to sign up again as a brand-new account with no link to the old one.

Under the DPDP Act you have the right to:

• Access information — a summary of the personal data we hold about you, how we process it, and who we have shared it with.
• Correction, completion and updating — most Profile details you can edit yourself in the app; for anything else, contact us.
• Erasure — see Deleting your account. We may keep data where the law requires it.
• Withdraw consent — as easily as you gave it. You can turn marketing off, switch profile fields back to private, or delete your account. Withdrawing consent does not affect processing that happened before.
• Grievance redressal — complain to our Grievance Officer (below). We will respond within [response period required by the DPDP Rules].
• Nominate someone to exercise these rights for you in the event of your death or incapacity.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

To exercise any right, email [privacy contact email] from an email address on your account. We may need to confirm your identity first.

CVs and contact details are private by default and are served only through authorised, logged access. CV Shares need an email code and expire. Sensitive actions — such as linking a new sign-in method — need you to sign in again recently, and we send a security notice to your other sign-in methods whenever one is added or removed. Data is encrypted in transit. No system is perfectly secure; if a breach affects your personal data, we will inform you and the Data Protection Board as the law requires.

The public website has no sign-in and does not use advertising or analytics cookies. The Proflance app keeps you signed in by storing an essential sign-in token on your device; it cannot be switched off without signing you out.

Proflance is for working professionals and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.

We will update this policy as Proflance changes. For material changes, we will tell Experts in the app or by email before they take effect. The effective date at the top always shows the current version.

Privacy questions: [privacy contact email]

Grievance Officer: [Grievance Officer name], [Grievance Officer email], [Grievance Officer phone (optional)]

Post: [Legal entity name], [Registered address]

See also our Terms of Use.