1. What we collect
- Account: name, email, password hash (never the password), sign-in provider IDs.
- Profile you provide: headline, bio, skills, projects, links, location, time zone, availability, optional rate and preferences.
- Activity: posts, comments, bonds, messages, invitations, projects, reports, and notification settings.
- Billing: plan, order and payment references from Razorpay. We do not store card details.
- Technical: IP address for security and rate limiting, and an essential session cookie.
2. Why we use it
To provide the service (profiles, discovery, matching, messaging, projects), keep it safe (spam, abuse, fraud), send OTP codes and notifications you allow, process payments, comply with law and improve reliability. We do not sell personal data and we do not show ads.
3. Who can see what
Your public profile is off by default. If you turn it on, search engines may index it. Signed-in members see the fields you allow (location, rate, availability and links can each be hidden). Messages are visible only to conversation members. Private projects are visible only to their members. Showcase pages are public only if the project owner enables them, and list only members who consented.
4. Service providers
| Provider | Purpose |
|---|---|
| MongoDB Atlas | Database hosting |
| Vercel | Application hosting |
| Resend | Sending one-time codes and notification emails |
| Sign-in with Google, and Gemini API for AI features | |
| GitHub | Sign-in with GitHub and repository ownership checks |
| Razorpay | Payments |
5. What AI receives
When you use the Squad Architect we send the idea text you write (and stage, budget and timeline) to the Gemini API to generate a plan. Matching uses skill and availability data inside our database and does not send other members' profiles to the AI provider. You can opt out of AI-assisted matching in Settings, Privacy.
6. Retention
We keep your data while your account is active. When you delete your account we remove your profile, posts, comments, bonds, notifications and settings, and remove you from conversations and projects. We keep minimal payment records as required by tax law and short-lived security logs, and backups expire on their normal schedule.
7. Your rights
You can access, correct, export (Settings, Data and account) and delete your data, withdraw consent for optional processing, and complain to the relevant data protection authority. For requests we cannot self-serve, write to support@vigotech.in. We respond within 30 days.
8. Security and children
We use encryption in transit, hashed passwords, rate limiting, access controls and audit logging for sensitive actions. No system is perfectly secure; see our security page. Skilion is for people aged 18 and over.
9. Changes and contact
We will post changes here and notify you of material ones. Contact: support@vigotech.in.