Skip to content
EarnVera
Sign inCreate account

Legal

Privacy policy

What we collect, why, how long we keep it, and what you can ask us to do with it.

Version 2026-09-09-draft

This is a draft, not a reviewed legal document. It was written by the product team to describe how the platform actually behaves. It has not been reviewed by qualified counsel, it is not legal advice, and it is not in force. EarnVera is not accepting registrations against it.

What we collect, and why

Account details — email, country, language — because they determine what work you are eligible for and how you can be paid.

Work history and quality outcomes, because they determine what you are offered next and your trust band.

Payout details, encrypted, because we cannot pay you otherwise. Only the payout service can decrypt them.

Device and connection signals, hashed, because platforms like this are farmed and multi-accounting is the main way money is stolen from real workers.

What we deliberately do not do

We store IP addresses as a one-way hash. We can tell that two accounts share an origin; we cannot tell where you live.

We do not send your behaviour to third-party analytics. Analytics on a platform that holds your money is first-party only.

We do not sell your personal data, and we do not share it for advertising.

How long we keep it

Financial records are kept for as long as the law requires, because a ledger you can delete from is not a ledger.

Fraud signals are kept while they are useful and then aged out.

Everything else is deleted when you close your account, subject to what we have to retain.

Your rights

You can export everything we hold on you, in a machine-readable format.

You can ask us to correct anything that is wrong.

You can delete your account. Where a financial or legal obligation means we must retain a record, we will tell you which record and why rather than silently keeping it.

What specifically needs a lawyer

Published rather than hidden, because knowing what has not been checked is more useful than a document that looks finished.

  • The lawful basis for each processing purpose under GDPR and equivalent regimes, which is asserted here but not established.
  • Cross-border transfer mechanisms for a platform operating between the EU, the UK, Pakistan, India and elsewhere.
  • Retention periods, which are described in principle and need specific durations per jurisdiction.
  • Whether device-signal collection for fraud prevention meets the necessity test in each market.

Trust & Security centre