Privacy policy

This privacy policy explains what personal data Setflow collects, why it collects it, how long it keeps it, and what rights you have as a user, in line with the principles of the General Data Protection Regulation (GDPR). Setflow is the data controller for the information you enter while using the platform.

Depending on which platform modules you use, we collect:

• Account, name, email address, password (exclusively in hashed form), the organization you belong to.
• Profile, description, city, skills, categories, portfolio examples, profile photo, public/private status.
• My Equipment, the name, category, and quantity of equipment items you enter, and the QR identifiers you generate for tracking.
• Offers and projects, line items, prices, discounts, markup, deposit, status (sent/accepted/declined), estimates.
• Messages, the content of conversations you have with other users.
• Reports and moderation, if you file or are the subject of a report: reason, details, and, for conversation reports, a text transcript of the recent messages (not a screenshot).
• Technical data, cookies necessary for account operation (session, theme, language); we don't use cookies for ad tracking.
• Optional personal analytics, only if you turn it on yourself in settings (see section 4).

We process data on the following bases: contract performance (data necessary for the platform to function, account, profile, offers, projects), your consent (optional personal analytics, which you can withdraw at any time by turning off the option), and legitimate interest (content moderation and platform security, based on community reports).

We keep account, profile, project, and message data while your account is active. If you delete your account, the data is permanently removed in accordance with section 12. Data related to resolved reports (in case of a dispute or repeated violation) is kept for a reasonable time after the case is resolved, then deleted.

We don't share your data with third parties for marketing purposes. Data is available exclusively to: you, the other party in a conversation (for messages you send them), and our internal team (moderators/administrator) strictly within the scope of reviewing a report. Technical service providers (e.g. hosting infrastructure) process data solely for the platform's operation, on Setflow's instructions, and have no right to use it for other purposes.

In accordance with the GDPR, upon request via the Feedback & Reports page you have the right to:

• Access, viewing the personal data we hold about you.
• Correction, amending inaccurate or incomplete data.
• Deletion, permanent removal of the account and associated data (section 7).
• Restriction of processing, temporarily halting processing of certain data.
• Data portability, exporting data in a readable format.
• Objection to processing based on legitimate interest.
• Withdrawing consent at any time (e.g. turning off personal analytics), without affecting the lawfulness of prior processing.
• Filing a complaint with the competent data protection supervisory authority if you believe your rights haven't been respected.

A public profile (if enabled) is visible to all registered users via Search. A private profile is visible only to you. Messages are visible only to the sender and recipient of that conversation.

The account administrator has NO access to the content of other users' profiles, messages, or projects on their own initiative, they can only act on community reports, and only on the reported content. Moderators only have access to the moderation panel (reports, reported profiles/listings/conversations), they have no visibility into the rest of the platform.

Passwords are stored exclusively in hashed form, never as plain text. Access to admin and moderation tools is restricted by account role (admin/moderator), and any change to account status (e.g. approving a profile deletion) goes through a separate request-and-approval process, not a single person's direct action.

We use only strictly necessary cookies: a session cookie for account login and a cookie to remember settings (site theme, language). We don't use cookies for ad tracking, third-party analytics, or selling data to advertisers.

Setflow is intended for professionals and companies in the creative industry and is not intended for children. We don't knowingly collect data from minors.

Deleting your account permanently removes:

• The profile and all its data (description, portfolio, photos).
• The organization, if you're its sole owner.
• Projects, offers, and estimates tied to that account.
• Messages you've sent (they stay hidden from you in the other party's conversation, but deleting your account permanently removes your content from the system).
• Equipment records tied to the account.

Deleting a profile for violating platform rules goes through a separate process, a moderator can only request deletion based on confirmed reports, and the final decision is always made by an administrator, never directly by a moderator.