1. Overview
This policy explains what personal information Dreqto (the "Platform") collects, why we collect it, and how it is used and protected. It applies to visitors, IT professionals and employers.
Your contact information is not public by default. Email addresses and phone numbers are not shown on public pages and are disclosed to another user only under the Platform's connection authorisation rules described below.
2. Account and profile information
When you register we collect:
- your name, email address and account type (IT Professional or Employer);
- your password, stored only in a securely hashed form, never as readable text;
- the date you accepted these policies;
- for Employers, optional company details such as company name, website, city and state;
- an optional mobile number, which is never displayed publicly.
If you use the Contact form, we store your name, email address, subject and message so that we can respond.
3. Skills, experience and location
Professionals may add skills, experience, city or state, an optional PIN code (used for search only, not displayed), availability, service preferences and portfolio links. Depending on the visibility setting chosen, this information is shown to verified employers or publicly so that employers can find suitable professionals. It can be edited or hidden at any time.
4. Email verification
We send a verification link to the email address you register with, to confirm that you control it. We also use your email address for essential account messages such as password resets. We do not use an SMS gateway.
5. Connection requests
We store connection request details (the parties, the requirement described, the dates and the outcome) to operate the service, prevent misuse and resolve disputes.
6. Contact detail visibility after approval
- Contact details are never included in public profiles, search results or public pages.
- An Employer can see a Professional's contact details only after that Professional accepts the Employer's connection request.
- A Professional who accepts a request can see the Employer's contact details for that connection.
- Either party can end a connection; contact details then stop being shared.
7. Private messaging and potential moderation
Private messaging is available only between the two parties of an accepted connection. Messages are stored on our servers so that both parties can read them. They are not end-to-end encrypted.
- Other users cannot read your conversations.
- When a connection ends, no new messages can be sent; earlier messages remain visible to both parties.
- Email alerts about new messages do not include the message text; you must sign in to read it.
- If a message, conversation or profile is reported for fraud, abuse or another breach of our Terms, authorised staff may review the reported content. This access is restricted to staff with explicit moderation permission, and every access is recorded in an audit log.
8. Security and audit logs
We use reasonable technical and organisational measures to protect personal information, including hashed passwords, encrypted connections where configured, access controls and rate limiting. We may keep security and audit logs (for example sign-in activity and significant account changes) to detect and investigate misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Data retention and account deletion
We keep account information for as long as your account is active. You may ask us to delete your account through the Contact page. Some information may be kept for a limited period after deletion where needed for security, fraud prevention, resolving disputes or legal obligations.
11. Your rights and grievances
Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may withdraw consent where processing is based on consent. To make a request or raise a grievance about how your information is handled, please contact us through the Contact page. Details of a designated grievance contact will be published here before launch.
12. Third-party services
We may use service providers such as hosting and email delivery providers to operate the Platform. They process information on our behalf only as needed to provide their services. If payment or other third-party services are introduced, this policy will be updated to describe them. We do not sell personal information.
13. Changes to this policy
We may update this policy as the Platform develops. We will update the "Last updated" date and, where appropriate, notify registered users of material changes.