Content Privacy & Confidentiality

1. What this policy covers

This Content Privacy & Confidentiality Policy applies to listings, profiles, proposals, messages, attachments, project files, task or service deliverables, portfolio material, reviews and other content submitted to Anyfor. It supplements the Terms of Service and Privacy Policy.

2. Public, account-only and private content

• Public content may include profile details, portfolio items, reviews and public listings. It can be viewed, copied, indexed by search engines or shared outside the Platform. Do not publish confidential or sensitive information.
• Account-only content is shown to signed-in users or selected marketplace participants, but should not be treated as secret unless the parties agree to confidentiality.
• Private workspace content includes direct messages, proposals, order files and deliverables shown only to relevant users and authorised Platform personnel or service providers as needed to operate, secure or support the service.

Visibility controls reduce access but cannot prevent an authorised recipient from downloading, copying or disclosing content. Share on a need-to-know basis.

3. How Anyfor handles content

You retain your ownership rights. You grant Anyfor a limited, worldwide licence to host, store, reproduce, transform for technical delivery, transmit, scan and display content only as reasonably necessary to operate, secure, moderate, support and improve the Platform, comply with law, and enforce agreements. This licence does not permit Anyfor to sell your confidential project files as standalone content.

Authorised personnel and vetted providers may access content when needed for support, security, fraud prevention, legal compliance or technical operation, subject to access controls and confidentiality obligations.

4. User confidentiality duties

When another user identifies information as confidential—or when its nature or context reasonably indicates confidentiality—you must:

• use it only to evaluate, perform or administer the agreed work;
• limit access to people who need it and are bound by equivalent obligations;
• apply reasonable security and follow any agreed handling instructions;
• not publish it in a portfolio, review, AI tool or external service without permission;
• return or delete it when reasonably requested, subject to legal retention and secure backup limitations;
• promptly report suspected loss, unauthorised access or disclosure.

These duties do not cover information that the recipient can document was already lawfully known, becomes public without breach, is independently developed, is lawfully received without restriction, or must be disclosed by law. Where lawful, give advance notice of compelled disclosure.

5. Restricted and high-risk information

Do not upload or exchange the following unless a designated secure workflow expressly permits it and all parties have a lawful need:

• passwords, private keys, authentication codes or unrestricted system credentials;
• full payment-card data or bank login credentials;
• government identity documents outside an approved verification channel;
• health, biometric, children’s, criminal-record or other highly sensitive personal data;
• export-controlled information, classified material, trade secrets or regulated client data without suitable contractual and security measures.

Use test accounts, redacted samples, least-privilege access and secure secret-sharing tools whenever possible.

6. Prohibited content and services

Content must be lawful and must not facilitate fraud, exploitation, harassment, hate, violence, illegal surveillance, malicious hacking, forged official documents, academic misconduct, intellectual-property infringement or non-consensual intimate or deceptive media. Personal data may not be scraped, bought, sold or used for spam or profiling without a lawful basis and appropriate notice.

Anyfor may remove, restrict, preserve or disclose content where reasonably necessary for safety, legal compliance or policy enforcement.

7. AI and external tools

Do not submit another party’s confidential content or personal data to a generative-AI service, translation system, code assistant, cloud drive or other external processor unless the party has authorised that use and appropriate privacy, security and contractual safeguards are in place.

Users remain responsible for reviewing AI-generated material, checking provenance and licences, protecting personal data, and disclosing material AI assistance where the agreement, law or professional standard requires it. Platform AI features may send submitted data to configured providers as described at the point of use and in the Privacy Policy.

8. Secure collaboration practices

• Keep project scope, approvals, files and material decisions in the Platform where practical.
• Use unique passwords and multi-factor authentication where available.
• Grant the minimum access needed and remove access when work ends.
• Scan files, keep software updated and verify unusual payment or access requests through a second channel.
• Do not bypass Platform protections or ask another user to disable security controls.

9. Retention, deletion and account closure

Users may delete eligible content or request account closure, but removal may not erase copies already received by another user. Anyfor may retain content for transaction records, fraud prevention, dispute resolution, legal obligations, safety and enforcement. Deleted material may remain temporarily in access-restricted backups before routine expiry.

Before closing an account, users should download content they are entitled to keep. Anyfor does not promise indefinite storage and may apply file, size or retention limits.

10. Intellectual-property and privacy reports

If you believe content infringes your copyright, trademark, privacy, publicity or other legal rights, submit a report through the Platform’s support or contact channel. Include the relevant URL or account, a clear description of the protected work or right, the reason for the complaint, your contact details and a good-faith confirmation that the report is accurate.

We may ask for additional information, notify the affected user and permit a response. False or abusive reports may lead to account restrictions and legal responsibility.

11. Incidents, enforcement and contact

Immediately report suspected unauthorised access, accidental disclosure, malicious files or misuse through the support channel. Preserve relevant evidence without redistributing harmful content. We may investigate, restrict access, reset credentials, preserve records, notify affected parties or authorities, and take other proportionate action.

Questions or appeals should be submitted through the support or contact channel shown on Anyfor.com or in your dashboard, with the relevant transaction or content reference. Do not send passwords or full payment-card information.