Who we are
This Privacy Policy explains how personal data is handled on side.work (the "Service"). The controller of your personal data is the administrator of the side.work service ("we", "us"). You can reach us at [email protected] for any question about this policy or your data.
Side.work is a marketplace that connects companies with independent senior specialists for part-time work. This policy applies to visitors, companies, their team members and specialists.
Data we collect
Account data
- Name, email address, password (stored in hashed form), role on the Service (company or specialist) and account settings.
- Sign-in records such as time, device type and approximate location derived from the network address.
Specialist profile data
- Professional title, experience, skills, rates, weekly availability, portfolio links and the work email domain and LinkedIn profile you provide for verification.
- Confirmation that your side work does not conflict with your employment terms.
Company workspace data
- Company name, team members and seats, role briefs, hours and budget, saved searches, alerts and spend reports.
Messages, contracts, timesheets and invoices
- Introductions and messages exchanged between companies and specialists.
- Contracts, hours caps, notice periods, NDA and IP assignment terms and their acceptance records.
- Weekly timesheets, approvals, invoices and payment status.
Payment and payout data
Card payments for subscriptions and invoices are handled by our payment processor. Specialist identity and bank account details for payouts are collected and checked directly by the payment processor. We receive limited information such as verification status, the last digits of an account and transaction records, and we do not store full card numbers or bank credentials.
Usage and device data
- Pages viewed, features used, error logs, browser type and network address, kept to operate and secure the Service.
How we use data and our legal bases
Where the General Data Protection Regulation or similar laws apply, we rely on the following legal bases.
- Performing our agreement with you. Creating accounts, matching companies and specialists, issuing contracts, timesheets and invoices, processing payments and payouts, and providing support.
- Legitimate interests. Keeping the Service secure, preventing fraud and abuse, improving matching and features, measuring performance and enforcing our terms. We balance these interests against your rights.
- Legal obligations. Keeping financial records, responding to lawful requests and meeting tax and compliance duties.
- Consent. Where we ask for it, for example for optional emails. You can withdraw consent at any time.
We use automated matching to rank specialists against a company brief, based on role, hours, budget, availability and verified profile data. A person can contact us to ask about how a ranking was produced.
Who receives data
We do not sell personal data. We share data only as needed to run the Service, with these categories of recipients.
- Other users. A specialist profile is visible to companies in matching. When a company and a specialist exchange introductions or sign a contract, the information needed to work together is shared between them.
- A hosting provider that stores and serves the Service.
- A payment processor that handles subscriptions, invoices, payouts and identity checks.
- An email delivery provider that sends account, contract and notification emails.
- An AI model provider that supports paid features, which receives only the content needed for a request.
- Professional advisors, authorities and successors, where the law requires it or in a business transfer, under confidentiality duties.
These recipients act under written terms that limit their use of your data.
How long we keep data
We keep account and profile data while your account is active. After you close it, we delete or anonymize personal data within a reasonable period, except where we must keep it longer. Financial records such as invoices and payment history are kept for the period required by tax and accounting laws. Security logs are kept for a limited time. Messages and contract records may be kept as long as needed to resolve disputes and enforce agreements.
International transfers
We and our providers may process data in countries other than your own, including the United States. Where required, we use safeguards such as standard contractual clauses or other approved transfer mechanisms so that your data receives an adequate level of protection.
Your rights
Depending on where you live, you may have the right to the following.
- Access a copy of your personal data.
- Correct data that is inaccurate or incomplete.
- Delete your data, subject to legal retention duties.
- Object to processing based on legitimate interests, and restrict processing in some cases.
- Receive your data in a portable format.
- Withdraw consent for processing that relies on it.
- Complain to your local data protection authority.
To use a right, write to [email protected] from the email address on your account. We may ask you to verify your identity and will respond within the time the law requires.
California and other US state privacy rights
Residents of California and several other US states have rights over their personal information, which generally include knowing what is collected and why, requesting access or deletion, correcting inaccurate information, and not being discriminated against for using these rights. We do not sell personal information and we do not share it for cross-context behavioral advertising. You may use an authorized agent to make a request, and we may need to verify both you and the agent. Send requests to [email protected].
Cookies
The Service uses only essential cookies for sign-in sessions, security tokens and preferences. We do not use advertising pixels or third-party advertising cookies. Details are in our Cookie Policy.
Security
We use technical and organizational measures to protect data, including encrypted connections, hashed passwords, access controls and monitoring. No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect unauthorized access. More about our approach is on the security page.
Children
The Service is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.
Changes to this policy
We may update this policy as the Service or the law changes. When we make material changes, we will post the new version with an updated date and, where appropriate, notify you by email or in the Service.
Contact
Questions or requests about privacy can be sent to [email protected].