The detailed privacy reference for the Guild platform.

1. Information We Collect

1.1 Account Information

• Name, email address, password (hashed)
• Role (Adventurer, Company, Admin)
• Profile information (bio, location, GitHub and LinkedIn URLs)

1.2 Adventurer Profile

• Skills, specialization, availability status
• XP, rank, skill points, completion rates
• Quest history and performance metrics

1.3 Company Profile

• Company name, website, industry, size
• Quest posting history and spending

1.4 Payment Information

• Razorpay contact and fund account IDs (bank account details are stored by Razorpay, not us)
• Transaction history and payment status

1.5 Usage Data

• IP address, browser type, device information
• Pages visited, features used, time spent
• Cookies and similar tracking technologies

2. How We Use Your Information

• Provide and maintain the platform
• Match Adventurers with suitable quests
• Process payments and send notifications
• Calculate XP, rank, and leaderboards
• Detect fraud and ensure platform security
• Send transactional emails (not marketing unless opted in)
• Improve our services through analytics

3. Information Sharing

We share information only as necessary to operate the platform:

• Between Users: Companies see Adventurer profiles when reviewing applications
• Payment Processors: Razorpay receives necessary payment and bank details
• Service Providers: Neon (database), Vercel (hosting), SMTP provider (email)
• Legal Requirements: When required by law or to protect rights and safety

We do not sell your personal information to third parties.

4. Data Security

We implement industry-standard security measures:

• Passwords are hashed using bcrypt (12 rounds)
• JWT tokens for session management (30-day expiry)
• HTTPS encryption for all data transmission
• Database hosted on Neon (SOC 2 compliant)
• Regular security updates and monitoring

5. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict processing

To exercise these rights, contact us at admin@adventurersguild.com.

6. Data Retention

We retain your information while your account is active. Upon account deletion:

• Personal identifiers are removed or anonymized
• Transaction records are retained for 7 years (legal compliance)
• Quest completion history may be retained for platform statistics

7. Cookies

We use essential cookies for authentication (NextAuth session). We may use analytics cookies if configured. You can control cookies through browser settings.

8. Children's Privacy

The platform is not intended for users under 16. We do not knowingly collect data from children. If we become aware of such data, we will delete it promptly.

9. International Users

The platform is operated from India. If you access from other regions, your data may be transferred to and processed in India, which may have different privacy laws.

10. Changes to Privacy Policy

We may update this Privacy Policy. We will notify users of material changes via email or platform notification. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions or to exercise your rights:
Email: abid@guilds.work
Address: Guild, Gandhinagar, Gujarat, India