Privacy Policy

1 Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our platform, and information from third-party sources. The types of information we collect include:

Personal Information You Provide

• Account Information: When you register for an account, we collect your full name, email address, phone number, password, and role (client, professional, or other). For professionals, we also collect business name, profession category, years of experience, and licensing information.
• Profile Information: Company description, portfolio images, service regions, specialty tags, and verification documents such as trade licenses, certifications, and government-issued identification.
• Project Information: Details about construction projects you post or bid on, including project descriptions, budgets, timelines, locations, and milestone requirements.
• Communication Data: Messages exchanged between users through our platform, including project discussions, proposal negotiations, and contract correspondence.
• Payment Information: Billing address and payment method details. We do not store full credit card numbers; payment processing is handled by secure third-party payment processors.
• Contact Form Submissions: When you contact us through our contact form, we collect your name, email address, subject, and message content.

Information Collected Automatically

• Device and Usage Data: IP address, browser type and version, operating system, device identifiers, and information about how you interact with our platform, including pages visited, time spent on pages, click patterns, and navigation paths.
• Location Data: Approximate location derived from your IP address or, with your consent, more precise location data from your device to match you with nearby professionals or projects.
• Log Data: Server logs that record access times, referrer URLs, and other technical information when you access our platform.

Information from Third Parties

• Verification Partners: We may receive verification status and credential information from third-party verification services used to authenticate professional qualifications.
• Social Media: If you choose to link your social media account, we may collect information from that account in accordance with the permissions you grant.
• Public Records: We may access publicly available databases to verify professional licenses, business registrations, and other credentials.

2 How We Use Your Information

We use the information we collect for the following purposes:

• Providing and Improving Services: To operate and maintain our platform, process transactions, connect clients with professionals, facilitate project management, deliver design marketplace services, and continuously improve the user experience.
• Account Management: To create and manage your account, verify your identity, authenticate your access, and provide customer support.
• Communication: To send you service-related notifications, project updates, proposal alerts, milestone reminders, contract notifications, and responses to your inquiries.
• Matching and Recommendations: To match clients with suitable professionals based on project requirements, expertise, location, and availability, and to recommend design listings, projects, and services tailored to your preferences.
• Safety and Security: To detect, prevent, and address fraud, unauthorized access, illegal activities, and other harmful behavior on our platform, and to enforce our Terms of Service.
• Analytics and Research: To analyze usage patterns, measure the effectiveness of our services, conduct research, and generate anonymized or aggregated insights that help us improve our platform.
• Marketing: With your consent where required, to send promotional communications about new features, services, and special offers. You may opt out of marketing communications at any time.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests, and to protect our rights, privacy, safety, or property, and that of our users and the public.

3 Data Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Between Users: When a client posts a project, relevant professional profiles may be visible. When a professional submits a proposal, their profile information is shared with the client. Contract and milestone information is shared between contracting parties.
• Service Providers: We share information with trusted third-party service providers who perform services on our behalf, such as payment processing, email delivery, hosting, analytics, and customer support. These providers are contractually obligated to use your information only for the purposes we specify.
• Verification Services: We may share professional credentials with third-party verification services to confirm licenses, certifications, and qualifications.
• Legal Requirements: We may disclose information when required by law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of such transaction. We will notify you via email or prominent notice on our platform of any change in ownership or uses of your personal information.
• With Your Consent: We may share your information with your consent or at your direction, such as when you choose to share your profile publicly or export your data.
• Aggregated or Anonymized Data: We may share aggregated or anonymized information that does not identify you individually for industry analysis, demographic profiling, or other purposes.

4 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of Cookies We Use

• Essential Cookies: Required for the operation of our platform, including session management, authentication, and security features. These cookies cannot be disabled.
• Functional Cookies: Enable personalized features such as remembering your preferences, recent searches, and saved filters. These cookies enhance your experience but are not essential for platform operation.
• Analytics Cookies: Help us understand how visitors interact with our platform by collecting information about pages visited, time spent, and navigation patterns. We use this data to improve our services.
• Marketing Cookies: Used to deliver advertisements relevant to your interests and to measure the effectiveness of our marketing campaigns. These cookies are set by us and our advertising partners.

Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may impact the functionality of our platform. For more information about cookies, visit allaboutcookies.org.

5 Your Rights & Choices

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

• Access: You have the right to request access to the personal information we hold about you and to obtain a copy of that information in a structured, commonly used, machine-readable format.
• Correction: You have the right to request correction of any inaccurate or incomplete personal information we hold about you. You can update most of your profile information directly through your account settings.
• Deletion: You have the right to request deletion of your personal information, subject to certain exceptions such as legal obligations, ongoing contract requirements, or legitimate business interests.
• Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible.
• Objection and Restriction: You have the right to object to the processing of your personal information in certain circumstances, and to request restriction of processing while we consider your objection.
• Withdrawal of Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before your withdrawal.
• Marketing Opt-Out: You may opt out of receiving marketing communications from us by following the unsubscribe link in our emails or by updating your communication preferences in your account settings.

To exercise any of these rights, please contact us at privacy@bonafyds.com. We will respond to your request within 30 days, or as required by applicable law.

6 Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols and encryption of sensitive data at rest using AES-256 encryption.
• Regular security assessments, vulnerability scanning, and penetration testing of our systems and applications.
• Access controls and authentication mechanisms, including role-based access, multi-factor authentication for administrative accounts, and audit logging.
• Secure data storage with regular backups and disaster recovery procedures.
• Employee training on data protection and information security best practices.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, and you are responsible for maintaining the confidentiality of your account credentials.

7 Children's Privacy

Our platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information as promptly as possible. If you believe that a child under 18 has provided us with personal information, please contact us at privacy@bonafyds.com.

8 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by revising the "Last updated" date at the top of this page and, for significant changes, by providing a more prominent notice such as adding a statement to our homepage or sending you an email notification. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of our platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

9 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following details: