Privacy Policy

Last updated 1 September 2026

Draft pending review. This policy accurately describes what the platform does today, but it has not been reviewed by a lawyer and the operator details below are unfilled. It should not be treated as final until both are resolved.

Who we are

Coweb Hub (“we”, “us”) operates cowebhub.com. We are the data controller for the information described here.

[Registered legal entity name] · [Registered address] · [Contact email for privacy requests]

What we collect

We only collect what a feature actually needs. In practice that is:

Account details — your name, email address and password. Passwords are hashed with bcrypt and the plain text is never stored or logged.
Inquiries — if you use the inquiry form: your name, email, company, which service you are asking about, and whatever you write in the message.
Project briefs — the project description, what a finished result looks like, timeline, budget band, existing assets and who signs off.
Applications to sell, teach or freelance — display name, headline, professional background, skills, years of experience, links to your portfolio and any public work, optional certifications, an optional video link, and a profile photo if you upload one.

We do not ask for payment card details anywhere, because payments are not processed on this site.

Why we hold it, and on what basis

To provide the service you asked for — creating your account, answering your inquiry, quoting your project. This is necessary to perform our agreement with you.
To verify applicants — we review portfolios and delivered work before anyone can teach, sell or be listed. This is our legitimate interest in keeping the platform trustworthy, and it is the whole point of applying.
To operate and secure the platform — keeping you signed in, preventing abuse.

Cookies

We do not use analytics, advertising or tracking cookies. There is no Google Analytics, no advertising pixel and no third-party tracking script anywhere on this site. We set two cookies, both strictly necessary:

coweb_session — keeps you signed in. Expires after 30 days. HTTP-only, SameSite=Lax.
coweb_admin — staff only, for the internal admin area. Expires after 12 hours.

Third parties

The only third-party content on the site is YouTube video embeds on tutor and freelancer profiles. We load these through youtube-nocookie.com, which does not set tracking cookies on page load. If you press play, YouTube may then set cookies and receive your IP address under Google's own privacy policy.

We do not sell your information, and we do not share it with advertisers or data brokers. Ever.

How it is stored

Data is held in a server-side database that is not publicly reachable.
Passwords are bcrypt hashed.
Session tokens are stored only as SHA-256 hashes, so even a database leak would not hand over live sessions.
Uploaded profile photos are stored outside the public web root and served through an access-controlled route, not as directly guessable public files.

How long we keep it

Account data is kept while your account exists. Deleting your account removes your profile, applications, listings and enrolment records along with it. Inquiries and briefs are kept while they are active and for a reasonable period afterwards for business records. Expired sessions are removed automatically.

Your rights

Wherever you are, you can ask us to give you a copy of your data, correct it, delete it, or stop using it in a particular way. If you are in the UK or EU, the GDPR gives you these rights explicitly, including the right to data portability and the right to complain to your local supervisory authority. If you are in Nigeria, the Nigeria Data Protection Act gives you comparable rights.

To exercise any of them, contact us at the address above. We will not charge you and we will not make it difficult.

International transfers

We operate globally, so your information may be processed on servers outside your country. Where that happens we rely on appropriate safeguards for the transfer.

[Confirm hosting region and transfer mechanism once the production host is chosen.]

Children

This platform is not intended for anyone under 16, and we do not knowingly collect information from children.

Changes

If we change how we handle your information, we will update this page and change the date at the top. Material changes will be communicated to account holders directly.