Privacy Policy

We take the protection of your personal data very seriously. This privacy policy explains what data we collect, why we collect it, and how we use it.

1. Overview

This privacy policy applies to RefConnect and explains how we handle your personal data when you use our platform.

2. Data Controller

The data controller responsible for this website is:

[Your Company Name]

[Your Address]

For privacy-related inquiries, contact us at: [privacy@refconnect.com]

3. Data We Collect

  • Account information (email, name, password hash)
  • Profile data (job title, company, bio, location)
  • Messages exchanged on the platform
  • Payment information (processed by Stripe)
  • Usage data (pages visited, actions taken)
  • Technical data (IP address, browser, device info)

4. How We Use Your Data

  • To provide and maintain the RefConnect service
  • To match job seekers with referrers
  • To process payments and subscriptions
  • To send service-related emails (confirmations, notifications)
  • To improve our platform and user experience
  • To prevent fraud and ensure security

5. Legal Basis (GDPR)

  • Contract performance (Art. 6(1)(b) GDPR) - to provide our service
  • Legitimate interests (Art. 6(1)(f) GDPR) - for security and improvement
  • Consent (Art. 6(1)(a) GDPR) - for marketing communications
  • Legal obligation (Art. 6(1)(c) GDPR) - for tax and legal requirements

6. Third-Party Services

We use the following third-party services:

  • Supabase (database and authentication) - EU servers
  • Stripe (payment processing) - PCI DSS compliant
  • Resend (email delivery) - transactional emails only
  • Vercel (hosting) - global CDN

7. Cookies

We use cookies for authentication and to remember your preferences. See our Cookie Settings for more details.

  • Essential cookies: Required for the platform to function
  • Preference cookies: Remember your language and settings
  • Analytics cookies: Help us understand usage (optional)

8. Your Rights (GDPR)

You have the following rights regarding your personal data:

  • Right to access your data
  • Right to correct inaccurate data
  • Right to delete your data
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

To exercise these rights, contact us at [privacy@refconnect.com] or use the account settings.

9. Data Retention

We retain your data for as long as your account is active. After account deletion, we keep anonymized data for legal and analytical purposes for up to 3 years.

10. Data Security

We implement industry-standard security measures including encryption in transit (TLS), secure password hashing, and regular security audits.

11. Children's Privacy

RefConnect is not intended for users under 16 years of age. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or platform notification.

13. Contact Us

For questions about this privacy policy or your data:

Email: [privacy@refconnect.com]

Data Protection Officer: [if applicable]

Last updated: September 15, 2026