Privacy Policy

Alwass (“we”, “our”, or “us”) operates the Alwass platform accessible at alwass.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully. If you disagree with its terms, please discontinue use of the platform.

We collect information you provide directly to us, including:

• Account information: name, email address, password, and role type when you register.
• Profile information: work history, skills, education, resume/CV, portfolio links, and profile photo.
• Job and marketplace activity: applications submitted, projects posted, proposals sent, and messages exchanged.
• Billing information: payment method details processed securely through our payment provider (Stripe). We do not store full card numbers.
• Communications: messages sent through our platform, support tickets, and survey responses.

We also collect information automatically when you use the platform:

• Usage data: pages viewed, features used, search queries, and time spent.
• Device data: IP address, browser type, operating system, and referring URLs.
• Cookies and similar technologies: see Section 7 for details.

We use the information we collect to:

• Create and manage your account and provide platform features.
• Match job seekers with relevant job listings and employers with qualified candidates.
• Process payments and send billing communications.
• Send transactional emails (account confirmation, application status updates, new messages).
• Send marketing and product update emails — you may opt out at any time.
• Improve and personalise the platform experience through analytics.
• Detect and prevent fraud, spam, and abuse.
• Comply with legal obligations.

We do not sell your personal information. We share your information only in the following circumstances:

• With employers/recruiters: when you apply for a job, your application and profile are shared with the posting employer.
• With clients/freelancers: when you engage on the marketplace, relevant profile and project information is visible to the other party.
• Service providers: we use trusted third-party vendors (Stripe for payments, AWS for hosting, PostHog for analytics) who process data on our behalf under data processing agreements.
• Legal requirements: when required by law, court order, or to protect the rights and safety of our users.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate notice to you.

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account at any time from Settings → Privacy. After deletion, we may retain anonymised data for analytics and legal compliance purposes for up to 90 days.

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete information via your profile settings.
• Deletion: request deletion of your account and associated personal data.
• Portability: receive a machine-readable export of your data.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Restriction: request that we restrict processing in certain circumstances.

To exercise any of these rights, contact us at privacy@alwass.com or use the data tools in Settings → Privacy.

We use cookies and similar tracking technologies to maintain sessions, remember preferences (including dark mode), and analyse usage. Cookies we use:

• Essential cookies: required for authentication and security. Cannot be disabled.
• Preference cookies: store UI preferences such as theme. Can be cleared by resetting browser storage.
• Analytics cookies: help us understand how users interact with the platform (PostHog). You may opt out in Settings → Privacy.

We implement industry-standard security measures including TLS encryption in transit, bcrypt password hashing, and role-based access controls. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication when available.

The platform is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the platform. Your continued use after the effective date constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Contact our Data Protection team:

• Email: privacy@alwass.com
• Postal: Alwass Ltd, 1 Hiring Lane, London EC1A 1BB, United Kingdom