Privacy Policy

1. Who We Are

Edelvor operates the Edelvor platform at edelvor.com (the “Platform”). Edelvor is an Australian business (ABN 61 267 830 638) operated by Haimi Jordaan. Edelvor is subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In this policy, “we”, “us”, and “our” refer to Edelvor. “You” refers to any individual who uses the Platform, whether as an engineer, a firm administrator, or a visitor.

2. Information We Collect

2.1 Information you provide directly

• Account information: name, email address, password (hashed), phone number
• Professional profile information: job title, disciplines, sectors, qualifications, registrations (e.g. RPEQ, CPEng), years of experience, biography, software competencies, and standards worked to
• Project history: project names, descriptions, roles held, client names, involvement levels, and dates
• Firm affiliation: the firm or firms you claim to be associated with
• Project-request information: when you use the “Find an engineer” intake, the details of who you are looking for (description, project details, discipline, location, timeframe, budget) together with your name, email, and company
• Project documents: any PDFs you attach to a request. They are stored securely, used to match your request, may be shared with the engineers and firms we approach about your request (the request form says so where you attach them), and retained for up to 12 months before automatic deletion
• Awards: awards recorded on your profile
• Reviews: structured reviews collected on completed engagements. See Section 3.1 for how we handle them.

2.2 Information collected automatically

• Device and browser information: IP address, browser type, operating system, device identifiers
• Usage data: pages visited, queries typed into the request intake, time on site, referral sources
• Cookies and similar technologies: session cookies for authentication. Our host (Vercel) counts aggregate page views via a cookieless, first-party script with no individual tracking. Accepting analytics in the cookie banner turns on additional cookieless enhanced analytics on top of that. We also use Google Ads conversion cookies to measure our advertising. See Section 11.

2.3 Information from third parties

• Firm administrators may add your name and basic professional details to the Platform as part of their employee listing
• Authentication providers (e.g. Google, LinkedIn) if you choose to sign in via a third-party service

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing the service: Creating and maintaining your account, and displaying your public professional profile and putting it forward when we match client requests.
• Public professional profiles: If you choose a public profile, your professional information (name, title, qualifications, project history, firm, disciplines, sectors) is displayed publicly so Edelvor and clients can find and engage the right engineers.
• Search and matching: We index your profile data (including through semantic and AI-powered processing) so Edelvor can match client requests to relevant engineers.
• Matching and outreach: When you submit a “Find an engineer” request, we use it to identify and approach engineers and firms who may match your requirement. The need you describe is shared with potential matches in a sanitised form. Your contact details are released to a firm only after they join Edelvor.
• Verification and trust: Verifying firm-user affiliations, reviewing engineers’ records for Edelvor Verified, and displaying status and verified badges.
• Communication: Sending you notifications about your requests, profile updates, and important platform changes.
• Improvement and analytics: Understanding how the Platform is used, improving matching quality, and developing new features using aggregated, de-identified data.
• Legal compliance: Complying with legal obligations, responding to lawful requests from authorities, and protecting our rights and the safety of users.

3.1 Reviews

Any authenticated user may submit a review of an engineer. Reviews are sent to the reviewed engineer for approval before appearing publicly. Reviews are kept private to the reviewed engineer and platform administrators until Edelvor enables aggregate public display, and the timing of that rollout is at our discretion. Until then, reviews inform ranking signals and administrative decisions (for example, Endorsed and Edelvor Verified grants) and appear on the reviewed engineer’s own dashboard.

4. The Public Nature of Your Profile

The following information is publicly visible by default when a profile is created:

• Full name and professional title
• Firm affiliation and verification status
• Disciplines, sectors, and areas of expertise
• Qualifications and professional registrations
• Project history (project names, roles, and descriptions)
• Status (Endorsed, if your firm endorses you), Edelvor Verified badge if granted, and any awards received
• Biography and summary of experience

The following information is never publicly displayed:

• Email address (visible only to you and your firm administrator)
• Phone number (visible only to you and your firm administrator)
• Password
• IP address or device information

You have control over certain visibility settings through your Privacy Settings. However, while your profile is public, some core profile information must remain visible for your public profile to be discoverable.

5. Firm-Added Employee Listings

Firm administrators may add employees to the Platform as part of their workforce listing. When a firm adds your details:

• The firm provides your name, professional title, and basic professional information
• Your listing will appear on the Platform as an unverified profile until you claim it
• You will be notified (where an email address is provided) that a profile has been created on your behalf
• You have the right to claim the profile, request corrections, or request removal

6. How We Share Your Information

We do not sell your personal information to third parties. We share information only in the following circumstances:

• Public display: Your professional profile is displayed publicly as described in Section 4.
• Firm administrators: Your firm administrator can view your full profile and contact details, add or remove you from the firm’s team listing, set your Endorsed status, and manage the firm’s profile and billing. Edelvor Verified, where granted, is awarded by Edelvor after review.
• Client matching: When your profile matches a client’s project, we put it forward by sharing your Edelvor profile with that client. We never share your direct contact details, introductions run through your firm.
• Service providers: We use trusted third-party services for hosting (Supabase/AWS), analytics, and email delivery. These providers process data on our behalf under strict contractual obligations.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or enforceable government request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

7. Data Storage and Security

Your data is stored on servers provided by Supabase, which uses AWS infrastructure in the Tokyo, Japan region. Payment processing is handled by Stripe (United States). The platform is hosted on Vercel (United States). Where data is transferred overseas, we take reasonable steps to ensure it is protected in accordance with the APPs.

We implement technical and organisational security measures including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Hashed password storage (passwords are never stored in plain text)
• Role-based access controls for firm administrators
• Regular security reviews and monitoring
• Row-level security policies on our database

No system is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

8. Your Rights

Under the Australian Privacy Principles, you have the following rights:

• Access: You can request access to the personal information we hold about you. Your profile information is visible to you at all times through your dashboard.
• Correction: You can update or correct your profile information at any time through your dashboard.
• Deletion: You can request deletion of your account and associated personal information. See Section 9 for details.
• Complaint: If you believe we have breached the APPs, you can lodge a complaint with us at admin@edelvor.com. If you are not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
• Opt-out of marketing: You can opt out of marketing communications at any time through your notification settings.

9. Account Deletion and Data Retention

When you request deletion of your account:

• Your profile is immediately removed from public view
• Your personal information is deleted or de-identified within 30 days
• Project history records may be retained in de-identified form to maintain the integrity of project records
• Feedback you have submitted about others may be retained but the reviewer attribution is removed
• Firm administrators will be notified that your profile has been removed
• Data required for legal compliance or dispute resolution may be retained for up to 7 years as required by law

10. Privacy Settings and Controls

You can manage your privacy through the Privacy Settings page in your dashboard. Key settings include:

• Controlling which profile fields are visible to the public vs. restricted to logged-in users
• Opting out of AI-powered search indexing
• Managing notification preferences and email communications
• Controlling whether your profile is included in downloadable firm exports or reports
• Setting contact preferences for enquiries

11. Cookies and Tracking

We use the following types of cookies:

• Essential cookies: Required for the Platform to function (authentication, session management). These cannot be disabled.
• Analytics cookies: Help us understand how the Platform is used. These are only placed with your consent.
• Advertising cookies: We use Google Ads conversion tracking (Google’s gtag.js) to measure how our advertising campaigns perform. It sets first-party Google cookies (for example, _gcl_au) and shares conversion data with Google. These load on all pages and are not controlled by the analytics setting in the cookie banner.

You can manage cookies through your browser settings, change your analytics preference at any time through the cookie banner, and opt out of Google’s advertising personalisation at adssettings.google.com.

12. Children's Privacy

The Platform is designed for professional use and is not intended for individuals under 18 years of age. We do not knowingly collect information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

13. Automated Decision-Making

We use automated processes for the following purposes:

• Matching: your profile is assessed against client requests using algorithms that consider relevance, completeness, verification status, and other factors
• Semantic matching: AI-powered processing of your profile text to match natural-language client requirements

These automated processes affect how often your profile is surfaced to potential clients but do not make decisions that significantly affect your rights or interests. You can opt out of AI-powered indexing through your Privacy Settings.

14. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email and/or a prominent notice on the Platform. The “last updated” date at the top of this policy indicates when it was last revised. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

15. Contact Us

If you have questions or concerns about this policy or our handling of your personal information:

• Email: admin@edelvor.com
• OAIC: If you are unsatisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au or by phone on 1300 363 992.