1. Who we are
MCRep operates MCRep and is the data controller for the personal data described in this policy. This policy explains what we collect, why, and the choices you have. It is written to meet the requirements of the EU/UK GDPR and Turkey's KVKK (Law No. 6698).
2. Data we collect
- Account data: username, display name, email address, password (stored only as a secure hash), account type.
- Profile data: headline, bio, location, languages, skills, rates, payment-method preferences, social links, avatar and banner images, experience.
- Content: portfolio projects and images, job posts, applications, cover letters, trial-task submissions, reviews, messages and reports.
- Billing data: records of purchases of paid features (plan, amount, status). Card details are handled by our payment provider and are never stored by us.
- Technical data: IP address, browser and device information, timestamps and security logs (for example rate-limiting and fraud prevention).
- Cookies: a strictly necessary session cookie to keep you logged in and protect forms (CSRF). If analytics is enabled by the operator, Google Analytics cookies may be used.
3. How we use your data
- To provide the Platform: profiles, portfolios, job matching, the hiring pipeline, trial tasks, messaging and notifications (performance of a contract).
- To calculate reputation scores and run AI portfolio and candidate analysis (legitimate interest in a trustworthy marketplace).
- To keep the Platform safe: preventing fraud, spam and abuse, and enforcing our Terms (legitimate interest / legal obligation).
- To process payments for paid features and keep accounting records (contract / legal obligation).
- To answer your support requests and send essential service emails.
4. What is public
Your public profile (display name, username, avatar, headline, bio, location, skills, portfolio, reviews, MCRep Score, payment-method preferences and open jobs) is visible to everyone and may be indexed by search engines. Applications, trial tasks, messages, notes, billing records and your email address are private and only visible to the people involved and to our administrators where needed.
6. International transfers
Some providers may process data outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
7. Retention
We keep your data while your account is active. When you delete your account we delete or anonymise your personal data within a reasonable period, except where we must keep it for legal, tax, security or dispute-resolution reasons. Reviews you wrote may remain in anonymised form.
8. Your rights
Depending on where you live you can: access your data, correct it, delete it, export it, restrict or object to processing, and withdraw consent. Under KVKK you may also request information about processing and transfers. Contact us at info@mcrep.net to exercise your rights. You also have the right to complain to your data-protection authority (for example the ICO in the UK or KVKK in Turkey).
9. Security
We use password hashing, CSRF protection, rate limiting, re-encoding of uploaded images (which strips hidden metadata) and access controls. No system is 100% secure; please use a strong, unique password.
10. Children
The Platform is not directed at children under 16. If you believe a child has created an account without appropriate consent, contact us and we will take action.
11. Changes
We may update this policy. Material changes will be announced on the Platform. The date above shows the latest version.
12. Contact
Privacy questions or requests: info@mcrep.net or our contact form.