Legal draft

Privacy policy

Production launch requires a controller-specific privacy policy, retention schedule and user rights workflow.

Data minimization built into the product

Expert CVs remain private by default; public profiles contain only approved marketplace fields; provider KYC documents should stay with the payment provider where possible; financial, dispute and audit records use restricted server-side collections.