1. Who is responsible for your data
The controller of personal data collected through nexperity.com is Anatolii Ilnytskyi, a sole proprietor (FOP) registered in Ukraine.
We process data in accordance with the personal data protection law of Ukraine.
Send questions about data processing and your rights to support@nexperity.com.
2. What data we collect
Account data: first name, last name, email address and interface language. If you sign in with Google, we receive your address and name from it. Passwords are not stored in plain text.
A phone number confirmed with a code sent by SMS. It is needed so that one number holds one account, and it is not shown to other users.
A record of your acceptance of the Terms of Use and this Policy: which edition, when, and how you accepted it.
Profile data. A specialist's: public name, description, city or region of work, services with prices, photo, portfolio, and contacts with their visibility settings. A client's: a photo, if you added one, and contacts.
Content you create: orders, requests to specialists and replies to orders, reviews, chat messages and images, and reports.
Uploaded files. We remove metadata, location included, from images. PDF documents are published as you uploaded them, so check their metadata beforehand.
Statistics: how many times an order or a profile was viewed, who the visitors were (guests, clients or specialists), where a profile's visitors came from, and how many times a profile was shown and opened in search. Only the order's author or the profile's owner sees them; publicly, only an order's total view count is shown.
Internal signals of a new review that help spot fake reviews: for instance, how old the author's account is, how long the work lasted, and how many messages it had, without their content. Only our team sees them.
Your Telegram link, if you turned on notifications: your Telegram ID and username, the ID of your chat with our bot, and records of the messages sent to it.
Technical data: IP address, request logs, session data, and data on how the site is used (see the section on cookies).
3. Why we process data and on what legal basis
To provide the service: keep your account and profile, show them in search, deliver requests, messages and notifications, and show reviews. Basis: performance of the contract (the Terms of Use).
To send service emails and SMS: address and phone confirmation, password recovery, notifications about events in your account. Basis: performance of the contract. We do not send marketing mailings.
To keep the service secure and working, prevent abuse, keep reviews honest, and be able to show that you accepted the documents. Basis: our legitimate interest.
To understand how the site is used and improve it. Basis: legitimate interest; you can opt out of collection as described below.
To meet legal requirements. Basis: legal obligation.
4. Cookies and analytics
Essential cookies keep you signed in; sign-in is impossible without them.
Interface settings, such as the theme or the work mode, and short-lived service values, such as the page you started signing up from, are stored in your browser — in a cookie or in its storage.
Our own cookie with a random identifier, kept for up to a year, helps count unique views of orders and profiles and spot fake reviews. If you sign in, we link it to your account for these purposes only; the link is deleted 13 months after your last sign-in.
We use PostHog for analytics and Sentry to detect errors. They receive de-identified events, technical data about failures, and session recordings in which the page's text, the data entered and the images are hidden. PostHog keeps its own visitor identifier in a cookie and in the browser.
We do not ask for separate consent to analytics yet. You can stop collection with a script blocker — the service works without it — or by writing to us.
5. Who we share data with
We engage providers that process data on our behalf: cloud infrastructure and email delivery (Amazon Web Services), SMS delivery (TurboSMS), analytics and error detection (PostHog, Sentry), and text processing for search (Amazon Bedrock, with OpenAI as a fallback). The latter receive only the texts and places of public services and published orders, the start of the profile description and the texts of search queries, without the contacts in your fields; if you write contacts into a description yourself, they go there with the text.
Google, only if you sign in with Google. Telegram, only if you turned on notifications: we then send a new order's details to your chat (category, title, description, payment, format, place, dates and a link), without details of the client.
We do not sell personal data or share it for advertising. Data may be disclosed to public authorities where the law requires it.
6. Transfers of data outside Ukraine
The main data is stored in the European Union (Germany).
Some providers, including the text processing services for search and Telegram, process data in other countries, including the United States. We transfer only the data a feature needs, under agreements with the providers.
7. How long we keep data
Account and profile data, and records of acceptance of the documents, are kept while the account exists.
Unfinished sign-ups whose address was never confirmed are deleted automatically after 7 days; the record of acceptance of the documents from such a sign-up remains, without the address or name.
A published order is shown for 30 days, after which it closes automatically.
Uploaded files are kept until you delete them. Unfinished uploads are deleted automatically within one to two days, and files that fail the checks after 30 days.
Feed notifications are deleted automatically: read ones after 90 days, unread ones after 180.
Chat history is kept with no time limit. If one participant deletes their account, the conversation stays with the other, and the deleted participant is shown in it as “Former user”. The conversation is deleted once both participants' accounts are deleted.
Reports are kept for 12 months from the day they are filed, even if the account of the person who filed one is deleted in that time. A review's internal signals are kept while the review exists.
After an account is deleted, we keep an irreversible fingerprint of its phone number for 12 months, so that the number cannot be used for a new account straight away. Records of sent confirmation codes are deleted after 30 days.
View statistics are kept while the order or profile exists.
A Telegram link lasts until you cancel it. We delete the records of messages the bot sent within 8 days, while the messages themselves remain in your Telegram chat and can only be deleted there.
Logs and analytics data are kept for a limited time.
8. How we protect data
Connections are encrypted, and the database is encrypted and unreachable from the public network. Passwords and session tokens are not stored in plain text.
Only those who need access to the production systems have it.
No system is absolutely secure, so use a unique strong password and do not share it with anyone.
9. Your rights over your data
You have the right to know what data of yours we process and to get a copy; to correct inaccurate data; to request deletion; to restrict processing or object to it; to withdraw consent where processing relies on it.
Most data can be changed yourself in your account: your profile, contacts and their visibility, photo and portfolio.
For anything else, including deleting your account, write to support@nexperity.com. We reply within 30 calendar days and may ask you to confirm your identity, so as not to reveal your data to someone else.
Deleting your account does not erase what stays with other users: your messages in conversations and your reviews — they remain under “Former user” — and correspondence outside the platform.
If you believe we have violated your rights, you can turn to the Ukrainian Parliament Commissioner for Human Rights.
10. Data of minors
The service is intended for adults. We do not knowingly collect data from people under 18. If you learn that a child has created an account, let us know and we will delete that data.
11. Changes to this Policy
We update this Policy when the way we process data changes, for instance when a new provider is added. The edition in force is always available on this page with its effective date.
We will announce material changes in the service or by email before they take effect.
12. How to contact us
Questions about data processing and requests about your rights: support@nexperity.com. Operator: Anatolii Ilnytskyi, sole proprietor (FOP).