Privacy Policy

Last updated: 31 July 2026 · Version 2026-07-31

This Privacy Policy explains how [[COMPANY LEGAL NAME]] ("alaru.me", "we", "us"), the controller of your personal data, collects, uses, shares, and protects information when you use alaru.me (the "Service"). By using the Service you agree to this Policy. It should be read together with our Terms of Service and Cookie Policy.

1. Who we are

The data controller is [[COMPANY LEGAL NAME]], [[MAILING ADDRESS]], a Delaware company. Contact: admin@alaru.me. [[EU/UK representative, if required]].

2. Information we collect

Account information from sign-in. When you sign in with Google or Facebook we receive your name, email address, and a provider account identifier. We do not receive your social-network password.
Profile & location. Contractor capabilities, skills, resources, availability, price range, coverage area, and precise geolocation (latitude/longitude) for your base area and for jobs, plus your payout address.
Task data. The tasks you post or perform, including free-text descriptions, precise pickup and drop-off locations, schedules, completion notes, and photos you upload.
Communications. Messages you exchange with the other party, clarifying questions, and your conversation transcripts with our AI intake assistant.
Payment data. To facilitate payments we and our processors handle: Stripe customer and payment-method identifiers and a card display snapshot (brand, last 4 digits, and expiry — never the full card number); crypto (Tron/TRC-20) addresses; withdrawal destination details (which may include bank/payout information you enter); and your wallet balance and transaction ledger.
Blockchain data. On-chain crypto addresses and transactions associated with your deposits and payouts. Blockchain data is public and permanent and cannot be edited or deleted by us or you.
Technical & usage data. IP address, browser/device information, timestamps, log data, and connection/reconnect telemetry, used to operate and secure the Service.
Cookies. Essential cookies only — see our Cookie Policy.

3. How we use information & our legal bases

We use your information to (with the GDPR legal basis in brackets):

Create and secure your account and authenticate you [contract; legitimate interests].
Generate task specifications and price suggestions, match tasks, hold funds in escrow, process completion, payouts, withdrawals, ratings, and disputes [contract].
Send service emails and notifications [contract; legitimate interests].
Prevent fraud and abuse, maintain security, and enforce our Terms [legitimate interests; legal obligation].
Comply with legal, tax, and accounting obligations [legal obligation].

4. AI & automated processing

The text you enter during task intake is processed by our AI provider (Anthropic, "Claude") to clarify tasks, extract a specification, and suggest a price, and to draft non-binding suggestions during disputes. We do not use AI to make decisions producing legal or similarly significant effects about you without human involvement — a human administrator decides disputes. Please do not include sensitive personal information in free-text fields.

5. How we share information (sub-processors)

We share information with providers that process it on our behalf, only as needed to run the Service:

Google and Facebook — authentication.
Stripe — card payments and card-on-file.
NOWPayments — crypto (USDT) deposit processing.
Tron network / TronGrid — on-chain deposits and payouts (a public ledger).
Amazon Web Services — hosting and, via Amazon SES, transactional email.
Anthropic — AI processing as described above.
OpenStreetMap / Nominatim — converting an address you type into map coordinates (the typed address is sent).
Let's Encrypt — TLS certificates.

We may also disclose information to comply with law, enforce our Terms, protect rights and safety, or in connection with a merger or asset sale. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. International transfers

We are based in the United States and use providers located in various countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers of personal data outside your region.

7. Custody & blockchain notice

For crypto deposits we generate a per-user deposit address and hold the corresponding private key encrypted at rest. As noted above, on-chain data is public and permanent; do not treat a blockchain address as private.

8. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service. After account deletion, we retain or anonymize certain records — including tasks, reviews, wallet ledger and transactions, deposits, withdrawals, payout records, messages, and job photos — where needed to meet legal, tax, accounting, dispute-resolution, and anti-fraud obligations, and we delete or anonymize them when no longer required. On-chain records cannot be deleted. See Data Deletion for details.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, port, or object to the processing of your personal data, to withdraw consent, and to lodge a complaint with a supervisory authority (GDPR/UK GDPR). If you are a California resident (CCPA/CPRA), you may request to know, delete, or correct your information, and to opt out of "sale"/"sharing" (which we do not do), without discrimination, and you may use an authorized agent. To exercise any right, contact admin@alaru.me or use in-app account deletion. We may verify your identity before acting.

10. Security

We use reasonable administrative and technical safeguards, including HTTPS in transit and encryption at rest for deposit-address keys. No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal data, we will notify you and regulators as required by law.

11. Children

The Service is intended for users aged 18 and over. We do not knowingly collect data from children.

12. Changes

We may update this Policy. Material changes will be reflected by the version and "Last updated" date above.

13. Contact

[[COMPANY LEGAL NAME]], [[MAILING ADDRESS]]. Questions about privacy? Email admin@alaru.me.