Last updated: October 20, 2026
Effective date: October 20, 2026
Publication checklist: replace every bracketed item before publishing. This template describes the mobile app as implemented in this repository, but it must be reviewed by the business owner and legal counsel against the deployed website, API, vendors, retention schedule, and applicable law. Do not publish it with placeholders.
Goolancer is operated by [legal entity name] ("Goolancer," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you use the Goolancer mobile application, website, marketplace, project workspace, and related services (collectively, the "Services").
Controller/contact details
Privacy contact: app@codgoo.com
We collect information that you provide directly, information generated as you use the Services, and information from service providers that help us operate the Services.
This may include your name, email address, username, password, account role (such as client or freelancer), country, professional title, company or agency information, profile photo, biography, skills, portfolio, service listings, availability, and other profile information you choose to provide.
This includes job posts, proposals, contracts, milestones, orders, project workspaces, tasks, deliverables, reviews, dispute information, meeting details, and communications needed to provide the marketplace and workspace services.
We process messages, comments, posts, attachments, documents, images, videos, and other content you submit or share through the Services. Content you make public, such as a public profile, portfolio, service listing, job post, review, or community post, may be visible to other users and the public as indicated in the relevant feature.
We process transaction, order, payment-status, wallet, payout, and payment-method information needed to operate payments and payouts. Card-entry and card-storage functions are provided through Kashier-hosted checkout; the Goolancer mobile app does not receive or store your full card number or CVV. If you add a bank account or mobile-wallet payout method, we process the details required to arrange that payout.
We may process device and app information, IP address, log information, authentication tokens, security events, and push-notification tokens. We use this information to operate, secure, troubleshoot, and improve the Services, prevent fraud and abuse, and deliver notifications you choose to enable.
We request access only when you use a feature that needs it:
Photos/files: to select and upload profile images, portfolio items, project files, and other attachments.
Camera and microphone: for project meetings or when you choose to capture media.
Calendar: if you choose to save a project meeting time to your device calendar.
Notifications: to send account, message, order, contract, payment, and project updates.
Device biometrics: if you turn on biometric sign-in. Biometric matching is performed by your device; Goolancer does not receive or store your biometric template. Credentials used for this optional sign-in method are stored using device-protected secure storage.
You can deny or revoke permissions in your device settings. Some related features may then be unavailable.
When you use Goolancer AI Studio, we process the prompts, messages, files, context, and feedback you deliberately submit, along with the AI-generated response, to provide that feature, maintain the conversation, apply safety controls, and improve or troubleshoot the service as permitted by law and your settings. Do not submit confidential, sensitive, or third-party information unless you are authorized to do so.
We may receive information from other Goolancer users when they invite, message, review, hire, pay, or otherwise interact with you, and from payment, identity-verification, communications, cloud-hosting, meeting, and AI service providers where necessary to provide the Services.
We use personal data to:
create and administer accounts;
provide marketplace, project, messaging, community, meeting, AI, payment, payout, and support features;
match users with relevant work, talent, services, and opportunities;
process and record payments, orders, payouts, refunds, disputes, and compliance activities;
communicate service, security, transactional, and support information;
protect users, enforce our terms, prevent fraud, abuse, and unauthorized access, and resolve disputes;
personalize the Services, including language, settings, and relevant marketplace content;
comply with legal obligations and respond to lawful requests; and
analyze, maintain, and improve the reliability, safety, and performance of the Services.
We do not sell personal data. We do not use information for cross-context behavioral advertising or tracking as described in this Policy.
Where data-protection law requires a legal basis, we process personal data to perform our contract with you; pursue our legitimate interests in operating, protecting, and improving the Services; comply with legal obligations; and, where required, with your consent. You may withdraw consent at any time, without affecting processing completed before withdrawal.
We may share information with:
other users, according to the visibility and collaboration features you use;
vendors that process information for us, including cloud hosting/storage, payment provider Kashier, push-notification provider Firebase/Google, communications and meeting providers, AI providers, and customer-support or security providers;
professional advisers, auditors, insurers, and corporate affiliates where necessary;
government authorities, regulators, or other parties where required by law or necessary to protect rights, safety, and security; and
parties involved in a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law.
Our service providers may process personal data only on our instructions and for the purposes described above, except where they act as independent controllers under their own terms and privacy notices (for example, a payment provider processing a payment).
Your information may be processed in countries other than the country where you live. When required, we use appropriate safeguards for international transfers, such as contractual protections or another lawful transfer mechanism. Contact us at [privacy contact] to request more information.
We retain personal data only for as long as necessary for the purposes described in this Policy, including to provide the Services, maintain required business and financial records, resolve disputes, enforce agreements, and meet legal obligations. Retention periods depend on the data type, your relationship with us, and applicable law.
[Add the approved retention schedule or a link to it. In particular, specify account data, transaction/payout records, messages/files, backups, security logs, and AI conversation retention periods.]
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data, and to withdraw consent. You may update certain profile information in the app. To exercise a privacy right, contact us at [privacy contact]. We may need to verify your identity before fulfilling a request.
You can manage notification, camera, microphone, photo/file, calendar, and biometric permissions through your device settings. You can opt out of non-essential marketing communications using the unsubscribe option in the message or by contacting us.
If you are in the EEA, UK, or another jurisdiction with a supervisory authority, you may also have the right to lodge a complaint with your local data-protection authority.
You may request deletion of your Goolancer account and associated personal data by [provide the in-app deletion path and public web deletion URL] or by contacting [privacy contact] from the email address associated with your account. We will delete or de-identify information unless we need to retain it for legal, fraud-prevention, security, transaction, dispute, or recordkeeping purposes.
Important: the current mobile code supports account creation but does not expose an in-app account-deletion control. Add one, or provide a compliant deletion flow before App Store submission.
We use reasonable administrative, technical, and organizational safeguards designed to protect personal data. For example, the app uses encrypted transport where supported, device-protected storage for authentication credentials, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
The Services are not directed to children under [minimum age, e.g., 18]. We do not knowingly collect personal data from children below that age. If you believe a child has provided personal data in violation of this Policy, contact us at https://codgoo.com/contact-us/.
We may update this Policy from time to time. We will post the updated version and revise the "Last updated" date. If changes are material, we will provide additional notice where required by law.
For questions, requests, or complaints about this Policy or our privacy practices, contact:
https://codgoo.com/contact-us/