Privacy Policy

1. Introduction

At Reffes ("we", "our" or "the platform"), we are committed to protecting your privacy and the security of your personal data. This Privacy Policy explains how we collect, use, share and protect your information when you use our verified work references platform.

By using Reffes, you accept the practices described in this policy. If you do not agree with this policy, please do not use our platform.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Full name, email address, password (encrypted), profile photo, professional bio, work experience, and custom URL.
• Reference information: Names and corporate emails of people you request references from, as well as the content of received references.
• Communications: Messages you send through our platform or to our support team.

2.2 Automatically Collected Information

• Usage data: Pages visited, browsing time, clicks, and other interactions with the platform.
• Device information: Browser type, operating system, IP address, unique device identifiers.
• Cookies: We use cookies to improve your experience, keep your session active and analyze platform usage.

3. How We Use Your Information

We use the collected information to:

• Provide, operate and maintain our platform
• Create and manage your account and public profile
• Process and verify work reference requests
• Validate reference authenticity through corporate domain verification
• Send email notifications about account activity
• Improve, personalize and expand our platform
• Understand and analyze how you use our platform
• Develop new features and services
• Communicate with you, including customer support
• Detect, prevent and address technical or security issues
• Comply with legal obligations

4. How We Share Your Information

4.1 Public Information

Your public profile (including name, photo, bio, experience and verified references) is visible to anyone who accesses your Reffes URL. This is the core functionality of our platform.

4.2 Service Providers

We share information with service providers who help us operate the platform, including:

• Cloud hosting and storage services (Vercel, Supabase)
• Transactional email services
• Analytics and metrics services

5. Data Security

We implement technical and organizational security measures to protect your personal information, including:

• Data encryption in transit and at rest
• Hashed passwords with secure algorithms
• Secure authentication with session tokens
• Mandatory email verification
• Suspicious activity monitoring
• Restricted access to personal data only to authorized personnel

However, no internet transmission method is 100% secure. We do our best to protect your information, but we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Update or correct incorrect information (you can do this from your dashboard)
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in structured format
• Objection: Object to certain uses of your information
• Restriction: Request restriction of processing of your data

To exercise these rights, contact us through the means indicated in the Contact section.

10. Contact

If you have questions about this Privacy Policy, you can contact us: