Privacy Policy

AfterJob ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our freelance marketplace platform. This policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws. By using AfterJob, you consent to the data practices described in this policy.

We collect information that you provide directly to us, including: **Account Information:** • Full name, email address, and password • Phone number (optional) • Profile picture • Professional title and bio • Skills and expertise areas **Identity Verification:** • Government-issued ID (for payment processing) • Business registration documents (for business accounts) **Financial Information:** • Bank account details (for payments) • Stripe Connect account information • PayPal account information • Transaction history **Communication Data:** • Messages exchanged through our platform • Support tickets and inquiries • Feedback and reviews **Automatically Collected Information:** • IP address and device information • Browser type and version • Pages visited and time spent • Referral sources • Location data (city/country level)

We use your personal information for the following purposes: **Service Delivery:** • Creating and managing your account • Facilitating connections between clients and freelancers • Processing payments and escrow transactions • Sending service-related notifications **Platform Improvement:** • Analyzing usage patterns to improve our services • Developing new features and functionality • Conducting research and analytics **Security & Compliance:** • Detecting and preventing fraud • Verifying user identities • Complying with legal obligations • Enforcing our Terms of Service **Communication:** • Responding to your inquiries • Sending important updates about your account • Marketing communications (with your consent)

We may share your information in the following circumstances: **With Other Users:** • Your public profile information is visible to other users • Clients can see freelancer profiles, skills, and reviews • Freelancers can see job postings and client profiles **With Service Providers:** • Payment processors (Stripe, PayPal) • Cloud hosting providers (AWS) • Email service providers • Analytics providers **For Legal Reasons:** • To comply with legal obligations • To respond to lawful requests from authorities • To protect our rights and safety • To prevent fraud or illegal activities **Business Transfers:** • In connection with a merger, acquisition, or sale of assets We do NOT sell your personal information to third parties.

We retain your personal information for as long as necessary to: **Active Accounts:** • Account data is retained while your account is active • Transaction records are kept for 7 years (tax/legal requirements) • Messages are retained for 3 years after the last activity **Inactive Accounts:** • Accounts inactive for 2 years may be flagged for deletion • You will receive notification before any deletion occurs **After Account Deletion:** • Most personal data is deleted within 30 days • Some data may be retained for legal compliance (up to 7 years) • Anonymized data may be retained for analytics **Backup Systems:** • Backup copies are deleted within 90 days of primary deletion

Under PIPEDA, you have the following rights: **Right of Access:** You can request a copy of all personal information we hold about you. We will respond within 30 days. **Right to Rectification:** You can request correction of any inaccurate or incomplete personal information. **Right to Deletion:** You can request deletion of your personal information, subject to legal retention requirements. **Right to Withdraw Consent:** You can withdraw consent for certain data processing activities at any time. **Right to Data Portability:** You can request your data in a machine-readable format. **Right to Complain:** You can file a complaint with the Office of the Privacy Commissioner of Canada. To exercise these rights, contact us at privacy@after-job.com or use the Data Privacy section in your account settings.

We implement robust security measures to protect your information: **Technical Safeguards:** • SSL/TLS encryption for all data in transit • AES-256 encryption for sensitive data at rest • Regular security audits and penetration testing • Multi-factor authentication options • Secure password hashing (bcrypt) **Organizational Safeguards:** • Access controls and role-based permissions • Employee training on data protection • Incident response procedures • Regular security reviews **Infrastructure Security:** • AWS cloud infrastructure with SOC 2 compliance • Regular backups with encryption • DDoS protection • 24/7 monitoring While we strive to protect your information, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and enable two-factor authentication.

We use cookies and similar technologies for: **Essential Cookies:** • Authentication and session management • Security features • Load balancing **Functional Cookies:** • Language preferences • User interface customization • Remember login status **Analytics Cookies:** • Understanding how users interact with our platform • Improving user experience • Measuring feature effectiveness **Managing Cookies:** You can control cookies through your browser settings. Note that disabling certain cookies may affect platform functionality. We do not use third-party advertising cookies.

AfterJob is based in Canada. Your information may be transferred to and processed in: • Canada (primary data center) • United States (AWS infrastructure, payment processors) When we transfer data internationally, we ensure appropriate safeguards are in place: • Standard contractual clauses • Data processing agreements • Compliance with PIPEDA requirements Our service providers are required to protect your information in accordance with this Privacy Policy.

AfterJob is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@after-job.com. If we discover that we have collected personal information from a child under 18, we will delete that information promptly.

We may update this Privacy Policy from time to time. When we make changes: • We will update the "Last Updated" date at the top of this policy • For significant changes, we will notify you via email or platform notification • Continued use of AfterJob after changes constitutes acceptance We encourage you to review this Privacy Policy periodically.

If you have questions about this Privacy Policy or our data practices, contact us: **Privacy Officer:** Email: privacy@after-job.com **General Inquiries:** Email: info@after-job.com **Mailing Address:** AfterJob Inc. Montreal Canada **Office of the Privacy Commissioner of Canada:** If you are not satisfied with our response, you may file a complaint with: Office of the Privacy Commissioner of Canada 30 Victoria Street Gatineau, Quebec K1A 1H3 Website: www.priv.gc.ca