Privacy Policy

This Privacy Policy explains what personal data [Company legal name] ("AideRoster", "we") collects when you use the AideRoster website (the "Service"), why, and the choices you have. AideRoster is a directory and matchmaking platform: we do not run AI agents and we do not process payments.

1. Data we collect

• Account data: your name, email address, role (creator / business), and a one-way hash of your password (we never store your password in plain text).
• Profile data: what you choose to add — e.g. creator headline, bio and links; company name, industry, size and description (you can choose to hide your company name).
• Content you post: agent listings, job posts, proposals, reviews and ratings. Listings, job posts, reviews and public profiles are visible to everyone.
• Messages: the content of messages you send to other users through the Service, plus who sent them and when. Messages are visible to the people in the conversation and, where needed for safety, moderation or legal reasons, to our administrators.
• Usage / click logs: when an agent page is viewed or a trial / website link is clicked, we record the agent, the event type, the time and (if you are signed in) your user ID, so creators can see aggregate statistics. Our hosting provider also keeps standard server logs (such as IP address, browser user-agent and requested URL) for security and operations.

We do not intentionally collect sensitive categories of data, and we do not collect payment card data.

2. How we use data

• to provide the Service: accounts, listings, search, job posts, messaging and reviews;
• to show creators aggregate statistics about their listings (views and clicks);
• to keep the Service safe: moderation, fraud and spam prevention, and enforcing our Terms;
• to operate, debug and improve the Service; and
• to contact you about your account or important changes (we do not send marketing email without consent).

Where the law requires a legal basis (e.g. GDPR), we rely on performance of our contract with you, our legitimate interest in running a safe marketplace, your consent where we ask for it, and legal obligations.

3. Cookies

We use one strictly necessary cookie to keep you signed in. It is a signed, HTTP-only session cookie that expires after 30 days or when you sign out. We do not currently use advertising or third-party analytics cookies. If that changes, we will update this policy and, where required, ask for your consent.

4. Sharing

• Other users: public content is visible to everyone; messages are visible to their recipients.
• Service providers that host and operate the Service for us (e.g. web hosting and database providers), under contracts that limit their use of your data.
• Legal reasons: when required by law, or to protect the rights, safety and property of users or us.
• Business transfers: if the Service is merged or sold, data may transfer to the successor under this policy.

We do not sell your personal data.

When you click through to an agent, a trial, or a creator's website, or share data with a creator, that third party's own privacy policy applies.

5. Retention

We keep account data while your account is active. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep it for legal, security or dispute purposes. Click logs are kept in aggregate form.

6. Your rights and deletion requests

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit most profile data in Settings. To request a copy or deletion of your data, email privacy@aideroster.com from the address on your account. We will respond within the time required by applicable law (typically 30 days).

7. Security

We use reasonable measures to protect data, including HTTPS, hashed passwords and access controls. No system is perfectly secure, so please use a unique password.

8. International transfers

Our providers may process data in the United States and other countries. Where required, we use appropriate safeguards for such transfers.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

10. Changes

We may update this policy. We will post the new version here and update the "Last updated" date.

11. Contact

Privacy questions or requests: privacy@aideroster.com.