Provendor.net (“Platform,” “We,” “Us,” or “Our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard the data of our Clients, Consultants, and all other Platform users (“Users”).
1. Information We Collect
We collect information to operate our marketplace, connect Clients and Consultants, and manage payments. The information we collect falls into three main categories:
1.1. Information You Provide to Us
| User Type | Data Collected | Purpose |
| All Users | Name, Email Address, Password, Communication History. | Account setup, communication, customer support. |
| Clients | Company Name, Billing Address, Payment Information (via processor), Project Descriptions. | Billing, payment processing, project matching. |
| Consultants | Professional Background, Certifications, CV/Resume, Portfolio/Case Studies, Banking Details, Tax Information. | Vetting, payment, compliance, and marketing your services. |
1.2. Information Collected Automatically
- Usage Data: IP address, browser type, device identifiers, pages viewed, time spent on the Platform, and referring website URLs.
- Cookie Data: Information collected through cookies and similar tracking technologies to enhance user experience, track activity, and analyze trends.
1.3. Information Collected During SCaaS Projects (High Sensitivity)
Note: The Platform does not routinely access, monitor, or store the specific, highly sensitive data exchanged between a Client and a Consultant (e.g., network diagrams, penetration test targets, vulnerability findings). This data is exchanged directly between the parties, and the protection thereof is governed by the Project contract and NDA.
However, we may temporarily access project data:
- For Dispute Resolution: If a refund or quality dispute requires reviewing the work product.
- For Security Monitoring: To detect fraudulent or illegal activity on the Platform.
2. How We Use Your Information
We use your information for the following purposes:
- Service Provision: To operate and maintain the Platform, process transactions, and facilitate communication between Clients and Consultants.
- Vetting and Quality Control: To verify the identity and credentials of Consultants and maintain a high standard of expertise on the marketplace.
- Payment and Billing: To process Service Fees and transfer Project funds to Consultants.
- Improvement: To monitor and analyze usage and activity trends to improve the Platform’s functionality and user experience.
- Communication: To send technical notices, updates, security alerts, and support messages.
- Legal Compliance: To comply with legal obligations, enforce our Terms and Conditions, and prevent fraudulent or illegal activities.
3. Sharing and Disclosure of Information
We will not sell your personal information. We share your information only in the following limited circumstances:
- With Other Users: When a Client posts a Project, certain information (Company name, Project description) is shared with Consultants. When a Consultant applies, their public profile and credentials are shared with the Client.
- Service Providers: We share data with third-party vendors and service providers (e.g., payment processors, cloud hosting providers, email services) necessary to operate the Platform. These providers are bound by confidentiality obligations.
- For Legal Reasons: If required by law, subpoena, or governmental request, or to protect our rights, property, or safety, or the rights, property, or safety of our Users or the public.
- Business Transfers: In connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business.
4. Data Security and Retention
4.1. Data Security
Given the sensitive nature of our business, we take security seriously:
- We use industry-standard security measures, including encryption (TLS/SSL) and secure servers, to protect the transmission and storage of your personal data.
- Access to User data is strictly limited to necessary personnel.
- Payment information is handled by a PCI-compliant third-party payment processor.
4.2. Data Retention
We retain personal information for as long as your account is active or as needed to provide you with services, comply with legal obligations, resolve disputes, and enforce our agreements.
5. Your Choices and Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: The right to request copies of your personal data we hold.
- Correction: The right to request that we correct any information you believe is inaccurate or incomplete.
- Deletion (Right to be Forgotten): The right to request that we delete your personal data, subject to certain legal exceptions (e.g., ongoing legal obligations).
- Opt-Out: The right to opt-out of marketing communications at any time via the unsubscribe link in the email or by updating your account preferences.
To exercise any of these rights, please contact us using the details in Section 7. We may require proof of identity before fulfilling requests.
6. Confidential Project Data (Disclaimer)
USERS MUST BE AWARE:
The Platform is designed to facilitate connections, not to serve as a high-security repository for sensitive Project data (e.g., vulnerability scans, network credentials).
- Do Not Upload Sensitive PII: Clients should avoid uploading sensitive personally identifiable information (PII) or classified data to the Platform’s messaging or file-sharing features unless absolutely necessary and encrypted.
- Third-Party Tools: We highly recommend that Clients and Consultants utilize secure, end-to-end encrypted third-party tools (agreed upon mutually) for the exchange of the most sensitive Project data, minimizing the data traversing the Platform.
- Project NDAs: The confidentiality and security of the specific Project-related data are primarily governed by the separate Non-Disclosure Agreement (NDA) and contract executed between the Client and the Consultant.
7. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at: Provendor.net@gmail.com