Legal

Privacy Policy

Last updated: 24 July 2026

1. Data controller

The controller of your personal data is Robin Bali, VAT / P.IVA 04942290166, address Via Paderno 13, 24068 Seriate (BG), Italy. Contact: qdesystem@gmail.com.

2. What we collect

• Account data — email, password (stored hashed by our auth provider), role, and profile details you add (display name, bio, skills, languages, avatar, CV/portfolio).
• Listing & order data — services you publish, orders, briefs, deliverables, custom offers and their status.
• Messages — the content you exchange on order pages and pre-purchase inquiries, including any files you attach.
• Payment data — processed by Stripe. We do not store your full card details; we receive limited transaction and payout information needed to run orders and the 10% fee.
• Analytics data — if you consent, page views, a random visitor identifier stored on your device, referrer, and approximate location (country/city) derived from your IP by our hosting provider. This is not linked to your account.
• Support communications — messages you send us by email or social channels.

3. How & why we use it

• To operate the Platform: accounts, listings, orders, delivery, chat and disputes.
• To process payments and payouts and to apply the Platform Fee (via Stripe).
• To provide support and handle disputes.
• To keep the Platform secure and prevent fraud or abuse.
• To measure traffic and improve the product (analytics — only with your consent).
• To comply with legal, accounting and tax obligations.

4. Legal bases (GDPR)

• Performance of a contract — to give you the service you signed up for.
• Legitimate interests — security, fraud prevention, and running the Platform, balanced against your rights.
• Consent — for analytics; you can withdraw it at any time.
• Legal obligation — accounting, tax and responding to lawful requests.

5. Who we share it with

We do not sell your personal data. We share it only with service providers and parties needed to run the Platform:

• Stripe — payment processing and payouts.
• Supabase — database, authentication and file storage hosting.
• Vercel — application hosting and infrastructure.
• Other users — to the extent necessary to complete an order (e.g. a Seller sees the brief and messages of their Buyer, and vice-versa).
• Authorities — where required by law.

6. Cookies & local storage

We keep this minimal:

• Essential — authentication/session storage set by our auth provider so you can stay logged in, and a small qde_consent entry that remembers your cookie choice. These are required for the Platform to work.
• Analytics (optional) — a random qde_vid identifier in your browser's local storage to count unique visitors. It is only created if you choose "Accept" in the cookie banner, and is removed if you choose "Essential only".
• Embedded video — the Studio page embeds YouTube in privacy-enhanced (no-cookie) mode.

7. How long we keep it

We keep account, order and message data for as long as your account is active and as needed to provide the service, resolve disputes and meet legal/accounting obligations. Analytics data is kept in aggregate for a limited period. When no longer needed, data is deleted or anonymised.

8. International transfers

Some providers may process data outside your country. Where data leaves the EEA, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) offered by those providers.

9. Your rights

Under the GDPR you have the right to:

• access your data and get a copy;
• correct inaccurate data;
• erase your data ("right to be forgotten"), subject to legal retention;
• restrict or object to certain processing;
• data portability;
• withdraw consent for analytics at any time (via the cookie banner or by clearing site data).

To exercise these rights, email qdesystem@gmail.com. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

10. Security

We use reputable providers and technical measures (encryption in transit, access controls, row-level security on the database) to protect your data. No system is perfectly secure, but we work to keep your information safe and to notify you and the authorities of breaches where required.

11. Children

The Platform is not intended for people under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will remove it.

12. Changes

We may update this policy; the "Last updated" date reflects the latest version. Material changes will be signalled where appropriate.

13. Contact

Questions about your data? Email qdesystem@gmail.com.

← Back to Syodra