Privacy Policy

Who is responsible

Papple World FZE LLC operates Papple and decides how personal data is used on it. Contact details are at the end of this page.

What we collect

Account data such as your name, email address and the profile information you choose to publish. Work data such as projects, proposals, messages, contracts, files and reviews. Payment status and identifiers from our payment provider; we do not store full card numbers.

Technical data needed to run and secure the service, such as sign-in sessions and abuse-prevention records.

How we use it

To provide the marketplace, process contracts and payments, review disputes, prevent fraud and abuse, send service emails and meet legal duties. We do not sell personal data.

Product analytics run only if you allow them in the consent notice.

Who we share it with

Service providers that run the platform for us: Vercel for hosting, Supabase for database and sign-in, Stripe for payments and payouts, Resend for transactional email, Cloudflare R2 for file storage, Sentry for error monitoring, and Upstash for abuse prevention (rate limits). PostHog provides analytics only if you allow them. Anthropic provides the optional AI assistant described below. Where a feature requires it, they receive only the data needed.

Other users see what you choose to publish and what a contract requires. Authorities receive data only when the law requires it.

The AI assistant (optional)

Where it is switched on, you can ask the AI assistant to draft or improve text, such as a proposal, a profile summary, a service description or a project brief. It is never required and never acts for you: you read, edit and send the text yourself.

When you use it, Anthropic receives only the text you submit for that request, plus the project or profile details needed to write it. We never send chat messages to it. We record that a request happened and how large it was, to apply usage limits, but we do not store the text you sent or the answer you received.

How long we keep it

We keep account and contract records while your account is active and for as long as needed for accounting, dispute and legal reasons. Ask us if you want a specific record deleted; we will say what must be kept and why.

Your rights

Subject to applicable law you can ask to access, correct, export or delete your personal data, and to object to or restrict some processing. Some records must be kept by law, and we will explain when that applies.

Security and transfers

Data is encrypted in transit, access is limited by role and row-level rules in the database, and administrative actions are logged. Our providers may process data outside your country; we use contractual safeguards where the law requires them.