Privacy Policy

Last updated: May 6, 2026

1. Introduction

FreelanceHub ("we", "our", or "platform") is committed to protecting your personal privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our services.

This policy complies with the Personal Data (Privacy) Ordinance (Cap. 486) ("Privacy Ordinance"). We are committed to processing your personal data in accordance with the six data protection principles of the Privacy Ordinance.

1.1 Data User Identity

Under the Privacy Ordinance, as a data user, we are responsible for processing your personal data:

• Company Name: FreelanceHub
• Email: privacy@slashhub.space
• Address: Hong Kong

1.2 Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds:

• Contract Performance: To fulfill the service contract between you and us
• Legitimate Interests: For our legitimate business interests without significantly affecting your rights and freedoms
• Legal Obligations: To comply with applicable laws and regulatory requirements
• Consent: Where you have given explicit consent (such as marketing communications, optional cookies)

By using our services, you consent to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.

2. Data We Collect

2.1 Data You Provide Directly

• Account Data: Name, username, email address, phone number, date of birth, gender
• Verification Data: Identity documents (if using KYC verification), social media links
• Personal Data: Skills, work experience, education, professional qualifications, resume, portfolio links
• Financial Data: Bank account information, credit card details, PayMe / FPS information
• Communication Data: Data provided when you communicate with us or other platform users
• User Content: Files you upload, project deliverables, chat messages, reviews
• Marketing Preferences: Types of marketing communications you choose to receive

2.2 Data Collected Automatically

• Usage Data: IP address, browser type, operating system, device identifiers, pages browsed, time spent
• Cookies: Please refer to our Cookie Policy for more information
• Log Data: Server logs, error records, clickstream data
• Transaction Data: Payment records, Escrow status, project history
• AI Feature Data: To provide AI assistant functionality, we may analyze conversations and project content

2.3 Data from Third-Party Sources

• Public data from social media platforms (when you link accounts)
• Data from credit checking agencies (for fraud prevention)
• Data from partners (for service integration)
• Payment verification data provided by Stripe Connect

3. How We Use Your Data

We use collected data for the following purposes:

• Providing Services: Operating, maintaining, and improving our platform and services
• User Matching: AI algorithms analyze skills, experience, and project requirements to provide smart matching
• Payment Processing: Processing transactions, refunds, payments, and collecting platform fees
• Communication: Sending service notifications, updates, marketing communications (you can opt out)
• Security: Identity verification, fraud prevention, risk assessment, platform security
• AI Features: Providing AI assistant, health scores, risk detection, project analysis, and other intelligent features
• Legal Compliance: Complying with applicable laws, regulations, and court orders
• Statistics and Analysis: Understanding user behavior to improve products and services

4. AI Services and Automated Decision-Making

We use multiple artificial intelligence service providers to provide the following automated services:

• Smart Matching: AI analyzes your data and project requirements to recommend the most suitable Freelancer or project
• Project Health Score: AI evaluates project progress, risk levels, and delivery quality
• Risk Detection: AI identifies potential issues such as communication problems, payment delays, and progress stagnation
• Content Analysis: AI analyzes project descriptions, deliverables, and conversations to provide suggestions
• Fraud Detection: AI assists in identifying suspicious activities and potential fraud

4.1 AI Service Providers

We use multiple third-party AI service providers to process data for AI features. These providers are contractually bound to:

• Only process data according to our instructions
• Implement appropriate security measures to protect your data
• Assist us in fulfilling your rights under the Privacy Ordinance
• Delete or return your data upon contract termination

4.2 Your Rights

If automated decision-making has a significant impact on you, you have the right to:

• Human Intervention: Request our staff to conduct manual review
• Express Views: Express your views on automated decisions to us
• Request Explanation: Obtain clear explanation of decision logic and reasoning
• Raise Objection: Lodge a formal objection against automated decisions affecting your rights

To exercise the above rights, please contact privacy@slashhub.space. We will respond within 30 days with clear explanation or remedies.

5. Data Sharing

We do not sell your personal data. We may share your data in the following circumstances:

5.1 Service Providers

We share data with the following categories of service providers:

• Payment Processing: Stripe Connect, PayMe, FPS (Faster Payment System)
• Cloud Services: Google Cloud, Firebase (for data storage and analysis)
• AI Services: Multiple artificial intelligence service providers (for AI assistant features)
• Communication Services: Service providers for sending emails and push notifications
• Security Services: Fraud detection and prevention services

We enter into data processing agreements with all service providers to ensure they:

• Only process personal data according to our instructions
• Implement appropriate technical and organizational security measures
• Assist us in responding to data subject rights requests
• Delete or return data upon contract termination

5.2 Data Sharing Between Users

To facilitate collaboration, the following data may be shared with project-related parties:

• Your public profile (username, skills, reviews, portfolio summary)
• Project-related communication and delivery records
• Project progress and status updates
• AI analysis and suggestions (for collaborative decision-making)

5.3 Legal Requirements and Rights Protection

In the following circumstances, we may disclose your data:

• When required by law, regulation, or court order
• To cooperate with government or law enforcement investigations
• To protect our or others' rights, property, or safety
• To enforce our Terms of Service or other agreements
• To investigate or prevent fraud, abuse, or illegal activities
• In response to valid subpoenas or legal processes

6. Data Security

6.1 Security Measures

We employ the following security measures to protect your data:

• Transmission Encryption: All data transmission uses TLS/SSL encryption
• Storage Encryption: Sensitive data uses AES-256 encryption
• Access Control: Strict access rights management, only necessary personnel can access data
• Two-Factor Authentication: 2FA option available to enhance account security
• Regular Audits: Regular security audits and penetration testing
• Data Backup: Regular backups, disaster recovery plans
• Staff Training: Regular data protection and security training

6.2 Security Disclaimer (Important)

While we strive to protect your data, internet transmission or electronic storage is not 100% secure. We cannot guarantee absolute security.

We assume NO responsibility for:

• Any data breaches, loss, or theft
• Any unauthorized access or use
• Any data damage caused by third parties (including hackers)
• Any data loss due to technical failures or internet issues
• Data breaches due to your failure to properly safeguard passwords or personal devices
• Data breaches due to clicking phishing links or malware-infected devices

6.3 Your Security Responsibilities

Protecting your data security includes:

• Using strong passwords and changing them regularly
• Enabling two-factor authentication (2FA)
• Properly safeguarding your login credentials
• Avoiding logging in on public devices or networks
• Promptly reporting any suspicious activities
• Bearing full responsibility for any data breach resulting from your failure to fulfill the above responsibilities

7. Data Incident Notification

In the event of a data incident, we will notify you in accordance with the requirements of the Personal Data (Privacy) Ordinance (Cap. 486):

• Notification Time: We will report to the Privacy Commissioner for Personal Data within 72 hours of becoming aware of the incident
• User Notification: If the incident may pose a high risk to your rights and freedoms, we will notify you as soon as reasonably practicable
• Notification Content: Nature of the incident, types and numbers of data that may be affected, remedies we have taken or will take
• Remedial Measures: We will take reasonable measures to reduce damage and restore data integrity

For more information or to report a data incident, please contact our Data Protection Officer: privacy@slashhub.space

8. Cookie Policy

We use cookies and similar technologies. Please refer to our Cookie Policy for more details.

In brief, we use:

• Necessary Cookies: Providing basic functions such as login and security assurance
• Functional Cookies: Remembering your preference settings
• Analytics Cookies: Understanding how users interact with our services
• Marketing Cookies: For displaying relevant advertisements (requires your explicit consent)

9. Data Retention

We retain your data for the following periods:

• During Account Validity: Retained until you delete your account
• Project Records: Retained for at least 7 years after project completion (legal and financial requirements)
• Payment Records: Retained for at least 7 years (tax and financial requirements)
• Communication Records: Retained for up to 5 years (service improvement and dispute resolution)
• AI Analysis Data: Retained for up to 2 years (for improving services after anonymization)
• Security Logs: Retained for up to 2 years

Regarding Deletion:

• After account deletion, we may retain data for a reasonable period to fulfill legal obligations
• Some data may not be completely deletable due to technical limitations
• We will take reasonable measures to protect your privacy
• Anonymized data may continue to be used for statistics and analysis

10. Your Rights

Under the Privacy Ordinance, you have the following rights:

10.1 Right of Access

You have the right to request a copy of your personal data we hold. We will respond to your request within 40 days.

10.2 Right of Correction

You have the right to correct inaccurate or incomplete data. You can update your personal data in account settings at any time.

10.3 Right of Deletion

You have the right to request deletion of your personal data, subject to the following exceptions:

• Legal obligations requiring us to retain data
• For instituting or defending legal claims
• For preventing fraud or abuse
• Where data is still necessary for our core functions

10.4 Right to Restrict Processing

You have the right to request restriction of processing of your data (under certain circumstances).

10.5 Right to Data Portability

You have the right to request your data (in a common format). We will respond to your request within 40 days.

10.6 Right to Object

You have the right to object to specific types of processing, including direct marketing.

10.7 Right to Complain

You have the right to complain to the Privacy Commissioner:

• Privacy Commissioner's Office: 54/F, Hopewell Centre, 183 Queen's Road East, Wanchai, Hong Kong
• Email: communi@pcpd.org.hk
• Phone: 2827 2827

10.8 Exercising Rights

To exercise any rights, please contact privacy@slashhub.space. We will respond within 30 days.

11. Cross-Border Data Transfers

Your data may be transferred to servers outside the Hong Kong Special Administrative Region for processing, including regions where our service providers are located. We take the following measures to ensure adequate protection of your data:

• Contractual Safeguards: Entering into contracts with appropriate data protection clauses with third-party service providers
• Appropriate Safeguards: Ensuring any data transfers comply with the Personal Data (Privacy) Ordinance (Cap. 486)
• Data Minimization: Only transferring data necessary for providing services
• Security Measures: Ensuring recipients implement data protection standards comparable to Hong Kong

12. Third-Party Links

Our services may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We recommend that you read the third party's privacy policy when leaving our platform.

13. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from individuals under 18.

14. Marketing Communications

If you choose to receive marketing communications, you expressly consent to receive such messages in accordance with the Unsolicited Electronic Messages Ordinance (Cap. 593).

You may opt out at any time:

• Click the "unsubscribe" link in any marketing email
• Turn off marketing notifications in account settings
• Contact privacy@slashhub.space to request removal

We will process your opt-out request within 10 business days.

15. Policy Updates

We may update this Privacy Policy from time to time. Any material changes will be notified before they take effect by:

• Posting update notices on our website
• Sending email notifications to your registered email
• Displaying prominent notices on the platform

We recommend that you review this policy regularly for the latest information.

16. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@slashhub.space
• Address: Hong Kong