Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign up using Google OAuth, we receive your name, email, and profile picture from Google. Passwords are securely hashed by Firebase Authentication — we never store or have access to your plaintext password.

Profile Information

Depending on your role (Jockey or Client), you may provide additional information including a bio, skills, hourly rate, portfolio items with descriptions and images, company name, company website, avatar photo, and location.

Identity Verification

If you choose to verify your identity, you may be asked to provide a government-issued ID and a selfie photograph. This verification is processed by Stripe Identity. ModelJockey does not directly store your identity documents — they are processed and retained by Stripe in accordance with their privacy policy.

Payment Information

Payment card details and banking information are collected and processed by Stripe. ModelJockey does not store full card numbers or bank account details. We retain Stripe customer and account identifiers, transaction records, and payout history for platform operations and record-keeping.

Usage Data

We automatically collect information about how you interact with the Platform, including pages visited, features used, search queries, timestamps, device type, operating system, browser type, and IP address.

Communications

We store messages exchanged between users on the Platform, forum posts and replies, reviews, and support communications. Message content is analyzed for contact information patterns to enforce our anti-circumvention policy.

Files

You may upload files to the Platform including avatar images, portfolio images, and chat file attachments. These files are stored in our cloud storage infrastructure.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform and its features.
• Process payments, escrow transactions, and payouts between Jockeys and Clients.
• Verify user identity to maintain trust and safety on the Platform.
• Match Jockeys with relevant job opportunities based on skills and preferences.
• Send notifications, including in-app, email, and push notifications, based on your notification preferences.
• Detect and prevent fraud, abuse, and violations of our Terms of Service.
• Enforce anti-circumvention policies by analyzing messages for contact information patterns.
• Calculate tier rankings, badges, and skill verifications.
• Generate aggregate, anonymized analytics to understand platform usage and improve our services.
• Respond to support requests and communications.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your personal data for third-party advertising.

3. Information We Share

With Other Users

Your profile information, portfolio, reviews, and forum posts are visible to other Platform users. Jockey profiles are publicly searchable. Information you share in messages is visible to the recipients of those messages.

Service Providers

We share information with third-party service providers that help us operate the Platform:

• Stripe: Payment processing, escrow management, Connect payouts, and identity verification.
• Firebase (Google Cloud): Authentication services and session management.
• Supabase: Database hosting and real-time data infrastructure.
• Resend: Transactional email delivery. Receives recipient email addresses and notification content.

Each of these providers processes data in accordance with their own privacy policies.

Legal Requirements

We may disclose your information if required to do so by law, in response to valid legal process (such as a court order or subpoena), or when we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, or to investigate fraud.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using HTTPS/TLS.
• Row-level security policies in our database to ensure users can only access data they are authorized to view.
• HttpOnly session cookies that cannot be accessed by client-side scripts.
• Webhook signature verification to prevent unauthorized data modification.
• Input sanitization to protect against injection attacks and cross-site scripting.
• Rate limiting on authentication and sensitive endpoints.

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security issues that arise.

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy:

• Account data: Retained while your account is active and for a reasonable period after closure.
• Contract and payment records: Retained for at least 7 years for legal and tax compliance purposes.
• Forum posts and reviews: Persist on the Platform unless removed by moderation.
• Deleted accounts: Profile data is removed, but transaction records and reviews may be retained in anonymized form for compliance and platform integrity.
• Chat messages: Deleted when both conversation participants have deleted their accounts.

6. Your Rights & Choices

You have the following rights regarding your personal information:

• Access: View your data through your dashboard and account settings at any time.
• Correction: Update your profile information, skills, and other personal details at any time.
• Deletion: Request deletion of your account and personal data, subject to our retention requirements for financial and legal records.
• Notification preferences: Control which in-app, email, and push notifications you receive on a per-type basis through your settings.
• Push notifications: Opt in or out of push notifications at any time through your browser settings or Platform preferences.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us using the information in the Contact section below.

7. Cookies & Tracking

We use a minimal set of cookies and local storage mechanisms to operate the Platform:

• Session cookie (__session): An HttpOnly cookie used for Firebase authentication with a 5-day expiry. This is essential for keeping you signed in.
• Service worker: Used for Progressive Web App (PWA) functionality, including offline access and asset caching.
• Local storage: Used to store UI preferences such as install prompt dismissal and other non-sensitive settings.

We do not use third-party advertising cookies or tracking pixels. We do not participate in cross-site advertising networks.

8. Children's Privacy

ModelJockey is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.

9. International Users

ModelJockey is currently available only to users in the United States. All data is stored and processed in the United States. By using the Platform, you consent to the transfer and processing of your information in the United States.

If we expand to additional regions in the future, this Privacy Policy will be updated to reflect applicable data protection requirements, including GDPR compliance for European users.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Material changes will be communicated via email notification or prominent notice on the Platform.

The "Last updated" date at the top of this page indicates when the most recent revisions were made. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us at:

Email: privacy@modeljockey.ai

Address: Model Jockey, Inc.
25 Mountainview Blvd.
Basking Ridge, NJ 07920

We will respond to all privacy-related inquiries within 30 days.