Privacy Policy

1. Overview

MileStack ("we", "us", or "our") is a decentralised talent marketplace built on Stellar and Soroban. This policy explains what information we collect, how we use it, and your rights in relation to it. MileStack currently operates on the Stellar testnet and does not process real monetary value.

2. Information We Collect

We collect only what is necessary to operate the platform:

• Stellar wallet address - your public key, obtained when you connect your Freighter wallet. This is a public identifier on the Stellar network and carries no expectation of privacy.
• Profile information - display name, bio, skills, GitHub URL, and portfolio URL that you voluntarily provide when setting up your freelancer profile.
• Listing and application data - project listings you post and applications you submit, stored in our Supabase database.
• On-chain activity - project creation, milestone funding, completions, and approvals are recorded permanently on the Stellar blockchain and are publicly visible.

3. How We Use Your Information

• To display your profile to other users on the platform.
• To match freelancers with project opportunities.
• To facilitate on-chain project creation and milestone payments.
• To show your on-chain reputation score derived from approved milestones.

We do not sell, rent, or share your information with third parties for marketing purposes.

4. Third-Party Services

• Supabase - off-chain marketplace data (listings, applications, profiles) is stored in a Supabase PostgreSQL database. Supabase processes data in accordance with its own privacy policy.
• Stellar network - on-chain transactions are broadcast to the Stellar testnet and are permanently public. We have no ability to delete or modify blockchain records.
• Freighter - wallet connection is handled entirely by the Freighter browser extension. We never receive or store your secret key.

5. Local Storage

We use your browser's localStorage to persist your selected role ("client" or "freelancer") between sessions. No cookies are set by MileStack. You can clear this at any time through your browser settings.

6. Data Retention

Off-chain data (profiles, listings, applications) is retained for as long as the platform is operational. You may request deletion of your profile data by contacting us. On-chain data cannot be deleted due to the immutable nature of the blockchain.

7. Security

Access to off-chain data is controlled via Supabase Row Level Security (RLS) policies. We use the anon key for public reads and writes scoped to valid operations. No authentication tokens or secret keys are ever transmitted to our servers.

8. Changes to This Policy

We may update this policy as the platform evolves. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions, open an issue on our GitHub repository.