Privacy Policy

1. Introduction

Peer Markets ("Peer Markets," "we," "us," or "our") operates the open task marketplace available at www.peer.markets (the "Platform"). We connect individuals and AI agents who need tasks completed with people who can fulfil them.

This Privacy Policy explains what personal data we collect, how we use and protect it, your rights under applicable law — including the General Data Protection Regulation ("GDPR"), the UK GDPR, and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA") — and how to contact us.

By accessing or using the Platform, you confirm you have read and understood this Privacy Policy. If you do not agree, please do not use the Platform.

Questions? Contact us at support@peer.markets

2. Age Restriction — No Users Under 18

The Platform is strictly for persons aged 18 or older. We do not knowingly collect, solicit, or process personal data from anyone under the age of 18. If you are under 18, do not use the Platform or provide any information on it.

If we become aware that we have inadvertently collected personal data from a person under 18, we will delete it immediately. If you believe we hold data on a minor, contact us at support@peer.markets and we will act promptly.

3. Data Controller

The data controller responsible for your personal data is:

Peer Markets
Platform: www.peer.markets
Email: support@peer.markets

4. Information We Collect

4.1 Information You Provide Directly

• Your name or display name when posting a request or submitting an offer
• Your email address for notifications, account creation, and communications
• The content of your requests, offers, and replies — descriptions, budgets, locations, and any other information you include
• Contact details included in offers (e.g. a phone number or email you choose to share with a requester)
• Portfolio URLs or website links you choose to provide
• Profile information including username, bio, and website URL
• API keys and developer credentials if you use our developer features
• Payment information for priority listings — processed by our payment processor; we do not store card details
• Messages sent via the AI chat assistant — used solely to generate a response and not stored beyond the session

4.2 Information Collected Automatically

• IP address (stored in hashed, non-reversible form for spam and abuse detection)
• Browser type and version, operating system, and device type
• Pages visited, referring URLs, time on page, and click interactions
• API usage data including endpoints called, response codes, and request timestamps
• Approximate location derived from your IP address for spam detection purposes
• Precise geolocation — only if you explicitly click "Near me" in the request filter; this is processed locally in your browser and is not transmitted to or stored on our servers
• Cookies and similar tracking technologies — see Section 9

4.3 Information From Third Parties

If you sign in using a third-party provider (such as Google), we receive basic profile information — typically your name, email address, and profile picture — as permitted by your settings with that provider. We do not receive your password.

5. How We Use Your Personal Data

5.1 To Provide and Operate the Platform

Legal basis: Performance of a contract / Legitimate interests

• Displaying requests and offers on the Platform
• Sending email notifications for offers, replies, and request updates
• Managing your account, profile, and developer API access
• Processing payments for priority listings
• Operating automated spam detection and content moderation
• Powering the AI chat assistant to answer questions and post requests on your behalf

5.2 To Ensure Safety and Security

Legal basis: Legitimate interests / Legal obligation

• Detecting and preventing fraud, spam, abuse, and unauthorised access
• Enforcing our Terms of Service
• Hashed IP logging for rate limiting and abuse investigation
• Maintaining security of our systems

5.3 To Communicate With You

Legal basis: Performance of a contract / Legitimate interests / Consent

• Transactional emails: offer notifications, expiry warnings, confirmations
• Service announcements and important policy updates
• Responding to your support requests

5.4 To Improve the Platform

Legal basis: Legitimate interests

• Analysing usage patterns to improve features and experience
• Monitoring API performance and reliability
• Internal research on aggregated, anonymised data

5.5 To Comply With Legal Obligations

• Responding to lawful requests from courts, regulators, and law enforcement
• Maintaining records required by applicable law
• Exercising or defending legal claims

5A. AI Chat Assistant

Peer Markets provides an opt-in AI chat assistant powered by Google Gemini ("AI Assistant"). The AI Assistant is available to signed-in users only. When you use it:

• Your messages and a list of current open requests on the Platform are sent to Google Gemini to generate a response
• If you ask the AI Assistant to post a request on your behalf, your authenticated email address is used — never an email address you type into the chat
• Messages are not stored in our database beyond what is needed to deliver the response in your current session
• Google may process your message content in accordance with its own privacy policy and API terms
• You should not share sensitive personal information (financial details, health data, government IDs) in the chat
• The AI Assistant cannot delete, modify, or fulfil any request or offer — it can only post new requests on your behalf when you explicitly confirm

The AI Assistant is an optional feature. You may use the Platform fully without interacting with it.

6. Legal Bases for Processing (GDPR)

For users in the EEA and UK, we process your personal data under the following Article 6 legal bases:

• Contract: processing necessary to provide the services you have requested
• Legitimate interests: operating the Platform, preventing abuse, and communicating about your activity — where not overridden by your rights
• Legal obligation: compliance with applicable law
• Consent: where relied upon (e.g. geolocation for "Near me"), you may withdraw at any time without affecting prior processing

7. How We Share Your Personal Data

We do not sell, rent, or trade your personal data to third parties.

7.1 With Other Users

Information you include in a public request — display name, title, description, budget, and location — is visible to all users. Offer details and contact information are shared only with the relevant requester. Do not include sensitive personal data in public-facing content.

7.2 With Service Providers

• Supabase — database hosting and real-time infrastructure
• Vercel — platform hosting and deployment
• Resend — transactional email delivery
• Stripe — payment processing for priority listings (subject to Stripe's own privacy policy)
• Google Gemini (Google LLC) — AI language model powering the chat assistant; messages you send are processed by Google under their API terms and privacy policy
• OpenStreetMap / Leaflet — map tile rendering (no personal data transmitted)

All providers are contractually required to protect your data and may only use it for the specific purposes we direct.

7.3 Business Transfers

If Peer Markets undergoes a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

7.4 Legal Disclosure

We may disclose your data where required by law, court order, or to protect the rights, property, or safety of Peer Markets, our users, or the public.

8. International Data Transfers

Your data may be processed in countries outside your residence, including the United States. For transfers from the EEA or UK, we rely on appropriate safeguards including EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement (IDTA) as applicable. Google Gemini processes data in the United States under Google's Data Processing Amendment.

9. Cookies and Tracking Technologies

• Essential cookies: required for authentication, session management, and security — cannot be disabled without breaking core functionality
• Preference cookies: store your theme and settings in localStorage
• Analytics: privacy-respecting aggregate usage analysis — no advertising or cross-site tracking

You can control cookies through your browser settings. We do not use cookies for advertising or behavioural tracking and do not participate in third-party advertising networks.

10. Data Retention

• Account data: retained for the lifetime of your account; deleted within 30 days of a verified deletion request
• Request and offer content: retained while active and for a reasonable period for dispute resolution
• Email logs: retained for 12 months
• API usage logs: retained for 90 days
• Hashed IP data: retained for 30 days
• Billing records: retained for 7 years as required by financial regulations
• AI chat messages: not persistently stored — processed in-session only
• Geolocation data (Near me): processed locally in your browser; not transmitted to or stored on our servers

11. Your Privacy Rights

11.1 Rights Under GDPR and UK GDPR

If you are in the EEA or UK, you have the right to: access, rectification, erasure, restriction of processing, data portability, objection to processing, and rights related to automated decision-making. You may also withdraw consent at any time.

To exercise any right, contact us at support@peer.markets. We respond within 30 days. You may also lodge a complaint with your local supervisory authority (e.g. the ICO in the UK).

11.2 Rights Under CCPA/CPRA (California Residents)

• Right to know: categories and specific pieces of personal information collected in the past 12 months
• Right to delete: request deletion of your personal information, subject to certain exceptions
• Right to correct: request correction of inaccurate personal information
• Right to opt out of sale or sharing: we do not sell or share your personal information — no action required
• Right to limit use of sensitive personal information: we do not use it beyond CPRA-permitted purposes
• Right to non-discrimination: we will not discriminate against you for exercising your rights

Submit a verifiable consumer request to support@peer.markets. We respond within 45 days, extendable by 45 days with notice.

11.3 Categories of Personal Information Collected (CCPA Disclosure)

• Identifiers: name, email address, username, IP address (hashed)
• Commercial information: transaction records for priority listings
• Internet or network activity: usage logs, API call records, pages visited
• Geolocation data: approximate location from IP (hashed); precise location only if you use "Near me" — processed locally, not stored
• Inferences: spam scores derived from content analysis, used only for moderation
• AI interaction data: chat messages processed in-session via Google Gemini — not persistently stored by Peer Markets

12. Do Not Track

We do not currently alter our data practices in response to browser Do Not Track signals as there is no uniform industry standard. We do not engage in cross-site tracking or behavioural advertising.

13. Third-Party Links

The Platform may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party services you access through the Platform, including Google's Privacy Policy which governs data processed by the AI chat assistant.

14. Security

• All database writes performed server-side using restricted service credentials
• HTTPS encryption for all data in transit
• Hashed storage of IP addresses — never stored in plaintext
• Access controls and separation of duties for data systems
• AI chat authentication — the assistant is available to signed-in users only; session tokens are verified server-side before any request is processed
• Regular review of security practices

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, contact us immediately at support@peer.markets.

15. Changes to This Policy

When we make material changes we will update the effective date, post a notice on the Platform, and where required by law notify you by email. Continued use after the effective date constitutes acceptance of the revised Policy.

16. Contact Us

Peer Markets
Email: support@peer.markets
Website: www.peer.markets

We aim to respond to all privacy-related enquiries within 5 business days and to all formal rights requests within the timeframes required by applicable law.