Privacy Policy

1. Information We Collect

We may collect the following categories of information:

• Identity information: full name and any profile details you provide in applications or communications.
• Contact information: email address, phone number (if provided), and other contact details submitted through forms.
• Professional and language information: primary language, bilingual skills, weekly availability, work preferences, and any background details included in your application or message.
• Technical information: IP address, browser type, device data, referral source, and basic usage or security logs.
• Communication information: messages, support requests, and correspondence sent to us by email or through site forms.

2. Data Controller

The data controller for personal data processed under this Privacy Policy is Review Firefly, contactable at [email protected] and reviewfirefly.com.

3. How We Use Personal Data

We use personal data to:

• review and process contributor applications;
• assess language skills, availability, and project fit;
• respond to inquiries, support requests, and partnership requests;
• communicate about onboarding, project access, and program updates;
• operate, maintain, and improve our website and services;
• maintain security, prevent abuse, and comply with legal obligations.

4. Legal Bases for Processing (GDPR)

Where applicable, we process data based on:

• your consent, including when you submit forms or contact us;
• steps taken at your request before entering a contributor agreement;
• our legitimate interests in operating and improving the program;
• compliance with legal obligations.

5. Data Sharing

We do not sell personal data. We may share data only when needed with:

• hosting, email, analytics, and other trusted service providers;
• project partners or clients involved in contributor onboarding, where relevant and permitted;
• legal, regulatory, or law enforcement authorities when required by law.

Service providers process data on our behalf under appropriate confidentiality and data-processing arrangements.

6. Data Retention

We keep personal data only for as long as necessary to fulfill the purposes described in this policy, manage applications, maintain business records, resolve disputes, and meet legal requirements.

Typical retention periods may include: contact inquiries (up to 12 months), application records (while active and for a reasonable period after closure), and legally required records (as required by law).

7. Cookies and Analytics

We may use cookies and similar technologies to improve user experience, remember preferences, analyze traffic, and support website functionality. You can manage cookie preferences through your browser settings.

Cookie categories may include strictly necessary, functional, and analytics cookies. We do not use non-essential cookies without a valid legal basis where required.

8. International Data Transfers

If personal data is transferred outside your country or the European Economic Area, we implement appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions where applicable.

9. Your Rights

Depending on your jurisdiction, you may have rights to:

• access personal data we hold about you;
• request correction or deletion of your data;
• object to or restrict processing in specific cases;
• request data portability;
• withdraw consent when processing is consent-based.

To exercise your rights, contact us via the details in Section 14. We may request identity verification and aim to respond within 30 days where legally required.

10. Data Security

We apply reasonable technical and organizational safeguards to protect personal data against unauthorized access, disclosure, alteration, or destruction. No online transmission or storage method is completely secure, and we cannot guarantee absolute security.

11. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those sites. Please review their policies before providing personal data.

12. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a minor has provided data, please contact us so we can take appropriate action.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material updates will be reflected on this page with a revised effective date. Continued use of the website after changes means you accept the updated policy, where permitted by law.

14. Contact

For privacy-related questions or requests, contact us at:

• Email: [email protected]

You may also have the right to lodge a complaint with your local data protection authority if you believe your personal data has been processed unlawfully.