Privacy Policy

Protecting your data matters to us. This policy explains, in line with the GDPR and the Swiss FADP, how personal data is processed on Castashoot, operated by Timeless Duodu (owner: Timon Duodu).

1. Controller

Timon Duodu, Timeless Duodu
Libellenstrasse 15, 6004 Lucerne, Switzerland
Email: support@tim3l3ss.co

2. Data we process

• Account data: name, email, password (hashed), role, 18+ confirmation.
• Profile data: portfolio images, bio, skills, location, rates, social links.
• Usage data: listings, applications, messages, reviews.
• Payment data: processed via Stripe for subscriptions (we store no card data).
• Technical data: strictly necessary cookies for login/session.

3. Purposes & legal bases

We process data to provide the platform (performance of contract, Art. 6(1)(b) GDPR), for security/moderation (legitimate interest, (f)) and for billing ((b)). Where required, we obtain consent ((a)).

4. Processors

• Supabase (hosting, database, auth, storage) — EU region.
• Vercel (web app hosting).
• Stripe (payment processing).
• Resend (transactional email).

5. Retention

We retain data while your account exists and delete it after account deletion, unless legal retention obligations apply.

6. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. You can trigger a data export and account deletion directly in settings, or contact us.

7. Cookies

We use only strictly necessary cookies (login/session). There is no third-party advertising tracking.

Template — please have it reviewed by a lawyer before going live.