Privacy Policy

Date of Last Revision: May 28, 2025

1. Introduction

Flexable Technologies Private Limited (“Flexable,” “we,” “us,” or “our”), a company duly incorporated under the laws of India with its registered office in Karnataka, Bengaluru, operates the website https://flexable.work/ and related digital platforms (collectively, the “Platforms”). Our Platforms facilitate a global freelance marketplace, connecting highly skilled independent professionals (“Freelancers”) with businesses seeking specialized expertise (“Clients”) through our proprietary services (collectively, the “Services”). These Services include, but are not limited to, talent sourcing, project matching, and collaboration tools such as our time-tracking application, SphereTrack.

At Flexable, we are steadfast in our commitment to protecting your privacy and ensuring the security of your personal data. This Privacy Policy (“Policy”) articulates our practices concerning the collection, use, storage, disclosure, and protection of personal data (“Personal Data”) in strict compliance with applicable data protection laws, including India’s Digital Personal Data Protection Act, 2023 (DPDPA), the European Union’s General Data Protection Regulation (GDPR), the United Kingdom’s Data Protection Act 2018 (UK GDPR), and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”). We affirm that we do not engage in the sale of your Personal Data, and we undertake our obligations as data fiduciaries and controllers with the utmost diligence.

This Policy is designed to provide transparency regarding our data practices and your rights, ensuring you are fully informed about how your Personal Data is handled when you interact with our Platforms and Services.

2. Scope

This Policy governs the collection, processing, storage, and disclosure of Personal Data from all individuals interacting with our Platforms and Services, including Freelancers, Clients, prospective Clients, Website visitors, and other stakeholders, as applicable. It applies to Personal Data collected through our Website, Services, third-party integrations, and events, except as expressly excluded in Section 10. This Policy complies with global data protection frameworks and provides region-specific information where required.

3. Collection and Use of Personal Data

The nature of the Personal Data we collect and the purposes for which we process it vary depending on your relationship with Flexable. Below, we delineate our data practices for each category of data subject: Freelancers, Clients, and Website Visitors.

a) Freelancers

i) Information We Collect
  1. Information Voluntarily Provided
    When you apply to join our freelance network or engage with our Services as a Freelancer, we collect the following Personal Data to evaluate your qualifications and facilitate project engagements: 

    • Full name and contact information. 
    • Residential or professional address and geographic location.
    • Professional qualifications, including work experience, education, certifications, and references.
    • Government-issued identification.
    • Payment information. 
    • Biometric data. 
    • Audio and video recordings of interviews or Client interactions. 
    • Social media profiles or professional networking data. 
    • We may record audio or video calls during the screening process or project engagements for quality assurance, training, or Client matching purposes, subject to your consent, which you may withdraw at any time. 
  2. Biometric Data and Identity Verification
    To ensure the integrity of our network and comply with anti-fraud regulations, we may require identity verification through a secure mobile or web-based application. You may be asked to submit a photograph of yourself and a government-issued ID (“Verification Data”). This data is processed by our third-party identity verification provider, which employs facial recognition technology to generate biometric identifiers (“Biometric Data”) to authenticate your identity. The provider validates the legitimacy of your ID and sends us only the verification results and ID details for record-keeping and fraud prevention.

    Biometric Data is not retained by Flexable. Our provider securely deletes Biometric Data within 24 hours of verification or, at most, within three years of your last interaction with us, unless required otherwise by law. Flexable retains Verification Data for the duration of your active account and as necessary to comply with legal obligations, prevent fraud, or resolve disputes. For example, we may retain ID details to comply with India’s Know Your Customer (KYC) requirements or international sanctions regulations. 
  3. Third-Party Data Sources
    We may supplement the data you provide with information from third-party sources, such as professional networking platforms (e.g., LinkedIn), job boards, or public databases, to verify your qualifications or assess your suitability for our network. 
  4. Automatically Collected Data
    When you interact with our Platforms, we collect data automatically via cookies, web beacons, and similar technologies. See Section 3(c) for details. 
ii) How We Use Your Information

We process Freelancer Personal Data for the following purposes, grounded in lawful bases under applicable data protection laws:

  • Contractual Necessity: To evaluate your application, onboard you into our network, administer contracts, facilitate Client engagements, and process payments.
  • Legitimate Interests:
    • To conduct analytics on Platform usage to enhance service delivery and user experience.
    • To maintain the integrity and security of our network, including fraud prevention and sanctions compliance.
    • To promote our Services by showcasing Freelancer profiles (with consent) to prospective Clients.
    • To send administrative communications.
    • To comply with legal obligations, such as tax reporting or responding to regulatory inquiries.
  • Consent: For specific activities, such as recording interviews, processing Biometric Data, or sending marketing communications. You may withdraw consent at any time without affecting prior processing.

If you request data deletion and we are obligated to comply, we may retain minimal data (e.g., name, email) to prevent fraud or ensure compliance with legal requirements.

b) Clients

i) Information We Collect
  1. Information Voluntarily Provided
    When you engage with our Services as a Client or prospective Client, we collect: 

    • Full name and contact information.
    • Company details.
    • Payment information.
    • Audio or video recordings of Freelancer interviews or project discussions.
  2. Third-Party Data Sources
    We may collect additional data about you or your organization from public sources (e.g., company websites, business registries) or third-party providers to verify your identity, assess project needs, or enhance our matching process. 
  3. Automatically Collected Data
    See Section 3(c) for details on data collected via cookies and tracking technologies. 
ii) How We Use Your Information

We process Client Personal Data for the following purposes:

  • Contractual Necessity: To match you with Freelancers, process payments, manage your account, and deliver Services.
  • Legitimate Interests:
    • To send administrative notices.
    • To analyze usage patterns to improve our Services and personalize your experience.
    • To prevent fraud, ensure network security, and comply with legal obligations (e.g., sanctions screening).
    • To market our Services, with clear opt-out mechanisms for marketing communications.
  • Consent: For activities like recording calls or sending promotional materials.

Non-marketing communications, such as billing or service notifications, are mandatory and cannot be opted out of while using our Services.

c) Website Visitors

i) Information We Collect

When you visit our Website, we automatically collect:

  • Log Data: IP address (revealing your approximate location), browser type, device details, and access times.
  • Usage Data: Pages visited, time spent, and interactions with our Website, collected via cookies, web beacons, and analytics tools.

For details on cookies, see our Cookie Policy.

ii) How We Use Your Information

We process Website Visitor data for our legitimate interests, including:

  • Ensuring the security and functionality of our Platforms.
  • Analyzing usage trends to optimize Website performance and user experience.
  • Complying with legal obligations, such as logging access for security audits.

4. Disclosure of Personal Data

Flexable does not sell Personal Data. However, we may disclose Personal Data to third parties under the following circumstances:

  1. Service Providers
    We engage trusted third parties to perform functions essential to our Services, including: 

    • Payment Processors: Stripe processes payment information in accordance with its Privacy Policy.
    • Cloud Hosting: Amazon Web Services (AWS) provides secure data storage and hosting.
    • Analytics Providers: Tools like Google Analytics help us understand usage patterns.
    • Identity Verification: Third-party providers process Verification Data and Biometric Data for Freelancer screening.
  2. These providers are bound by contractual obligations to safeguard your data and use it solely for the purposes we specify. 
  3. Business Transfers
    In the event of a merger, acquisition, reorganization, or asset sale, Personal Data may be transferred to the acquiring entity, subject to appropriate safeguards. 
  4. Legal Obligations
    We may disclose Personal Data if required by law, such as to comply with sanctions, respond to court orders, or protect the rights, safety, or property of Flexable, our users, or the public. 
  5. With Consent
    We may share your data for additional purposes if you provide explicit consent, such as displaying Freelancer profiles in marketing materials. 

International Data Transfers

As an Indian company, we may transfer Personal Data to servers in the United States or other jurisdictions to deliver our Services. For EU/UK residents, we implement Standard Contractual Clauses (SCCs) and other safeguards to ensure compliance with GDPR and UK GDPR. We assess the adequacy of data protection in recipient countries and apply additional measures as required by law.

5. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes outlined in this Policy or to comply with legal obligations. Retention periods are determined based on:

  • The duration of your active account or engagement with our Services.
  • The nature and sensitivity of the data 
  • Legal, regulatory, or tax requirements 
  • The need to prevent fraud or resolve disputes.

For example:

  • Active Accounts: Personal Data is retained while your account is active to provide Services.
  • Marketing: Contact details for marketing are kept until you opt out.
  • Verification Data: ID details are retained for the duration of your account or as required by law. 
  • Biometric Data: Not retained by Flexable; third-party providers delete it within 24 hours or as legally required.

When Personal Data is no longer needed, we securely delete or anonymize it to prevent identification.

6. Region-Specific Rights and Obligations

Your rights regarding your Personal Data depend on your jurisdiction. Below, we outline region-specific provisions.

a) EU and UK Individuals

i) Scope

This section applies to individuals in the European Union (including Iceland, Liechtenstein, Norway, and Switzerland) and the United Kingdom, pursuant to GDPR and UK GDPR.

ii) Data Controller

Flexable Technologies Private Limited is the data controller responsible for your Personal Data. For inquiries, contact udhay@flexable.work. Our EU/UK representative for GDPR purposes is reachable at compliance@flexable.work.

iii) Legal Bases

We process Personal Data based on:

  • Contractual Necessity: To fulfill our obligations under agreements with Freelancers and Clients.
  • Legitimate Interests: To maintain service quality, prevent fraud, and improve our Platforms, provided our interests do not override your rights.
  • Consent: For optional activities like marketing or call recordings.
  • Legal Obligations: To comply with regulations, such as sanctions or tax laws.
iv) Your Rights

You have the following rights, subject to applicable law:

  • Access: Obtain a copy of your Personal Data and details of our processing.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion, except where we have overriding legal grounds to retain data.
  • Restriction: Limit processing in specific circumstances.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests, including for direct marketing.
  • Automated Decision-Making: Request human review of automated decisions (e.g., sanctions screening).
  • Withdraw Consent: Revoke consent without affecting prior processing.
  • Lodge a Complaint: Contact your local data protection authority (e.g., ICO in the UK).

To exercise these rights, contact compliance@flexable.work. We may charge a reasonable fee for additional copies of your data.

b) California Residents (CCPA)

i) Scope

This section applies to California residents under the CCPA. Over the past 12 months, we collected the following categories of Personal Data: identifiers (e.g., name, email, IP address), biometric information (e.g., verification photos), professional information (e.g., work history), and internet activity (e.g., Website usage). We have not sold Personal Data.

ii) Your Rights

You have the right to:

  • Know: Access details about your Personal Data, including categories, sources, and recipients.
  • Delete: Request deletion, subject to exceptions (e.g., legal obligations).
  • Correct: Amend inaccurate data.
  • Opt Out: Prevent sharing for cross-context behavioral advertising (see our Cookie Policy).
  • Non-Discrimination: Exercise rights without retaliation.

To opt out of behavioral advertising, email udhay@flexable.work and disable analytics/advertising cookies per our Cookie Policy.

iii) Shine the Light

You may request a list of Personal Data disclosed to third parties for direct marketing in the prior calendar year, if any. Contact udhay@flexable.work.

c) India Residents (DPDPA)

Under India’s DPDPA, you have rights to:

  • Access and obtain a summary of your Personal Data.
  • Correct or update inaccurate data.
  • Erase data, subject to legal exemptions.
  • Nominate a representative to act on your behalf.
  • Lodge complaints with the Data Protection Board of India.

Contact udhay@flexable.work to exercise these rights.

7. Cookies and Tracking Technologies

Our Platforms use cookies, web beacons, and similar technologies for functionality, analytics, and targeted advertising. You can manage preferences via our Cookie Policy. Disabling cookies may limit functionality, and clearing cookies may require re-selecting preferences.

8. Special Features and Practices

  1. SphereTrack and Collaboration Tools
    Our proprietary tool, SphereTrack, facilitates time tracking and project collaboration. We collect account data and usage statistics to ensure functionality, troubleshoot issues, and enhance user experience. Third-party providers assist with authentication and cloud storage. 
  2. Events
    At webinars, trade shows, or other events, we may collect contact details to foster business relationships. Marketing communications include opt-out instructions, as required by law. 
  3. Recordings
    We may record audio or video calls (with consent) for quality assurance, training, or Client-Freelancer matching. Participants may see your display name or profile details during calls. Third-party platforms used for recordings have their own privacy policies. 
  4. Background Checks
    For Freelancers, we may conduct background checks via third-party providers, with your consent, to verify qualifications or ensure compliance with legal standards. 

9. Security Measures

We employ robust technical and organizational measures, including encryption, secure socket layer (SSL) protocols, access controls, and regular security audits, to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction. However, no digital transmission is entirely secure, and we encourage you to exercise caution when sharing sensitive information.

10. Exclusions

This Policy does not apply to:

  • Personal Data collected outside our Platforms or Services 
  • Information posted in public areas of our Platforms which is deemed non-confidential.
  • Unsolicited ideas or suggestions, which we may use without restriction.

11. Children’s Data

Our Services are not directed to individuals under 16. We do not knowingly collect Personal Data from children under 16. If we discover such data, we will promptly delete it. Contact udhay@flexable.work to report concerns.

12. Third-Party Links

Our Platforms may link to third-party websites not controlled by Flexable. These sites have separate privacy policies, and we are not liable for their practices. Review their policies before sharing data.

13. Terms of Service

Your use of our Platforms and Services is governed by our Terms of Service.

14. Changes to This Policy

We may amend this Policy to reflect changes in our practices, Services, or legal requirements. Significant updates will be communicated via email or Website notices. Your continued use of our Platforms after revisions constitutes acceptance, subject to your legal rights.

15. Contacting Flexable

For inquiries about this Policy, your Personal Data, or your rights, please contact:


Flexable Technologies Private Limited
Email: udhay@flexable.work
Address: Karnataka, Bengaluru, India 

For EU/UK residents:
GDPR Representative
Email: compliance@flexable.work