Privacy Policy

We believe your data belongs to you. We collect only what is necessary to run Expatraders—connecting seekers with providers, processing jobs, and keeping you signed in. We do not use your data for advertising, profiling, or anything beyond the service you signed up for.

We do not sell, rent, or trade your personal information to anyone. Ever. Your email, name, messages, and profile details stay with us and are used solely to deliver the Expatraders service. No third-party data brokers, no marketing lists, no exceptions.

Account: email, name, password (stored hashed), and language preference. Provider profiles: business name, description, contact details, location, categories, portfolio—only if you choose to become a provider. Job posts: title, description, location, budget—to match you with providers. Messages: in-app messages between seekers and providers, linked to jobs. Payments: Stripe processes payments; we store transaction records (amounts, status) for accounting and support. Card details never touch our servers.

We use only essential cookies to keep you signed in: session and security tokens. No analytics cookies, no tracking cookies, no marketing cookies. You do not need to accept a cookie banner—everything we use is strictly necessary for the service to work. Sign-in sessions: When you log in, we set an encrypted session cookie so you stay authenticated. If you select “Keep me signed in on this device,” that session may last up to 30 days. If you do not select it, we use a shorter session (typically up to 24 hours, extended while you actively use the site). Do not use “keep me signed in” on shared or public computers. You can end your session at any time by signing out.

Account data: until you delete your account or request deletion. Job posts and proposals: retained while active; archived after completion for legal and support purposes. Messages: retained for the life of your account. Transaction records: retained for legal and tax obligations (typically 7 years where required). You can request deletion of your account and associated data at any time.

Under GDPR and similar laws, you have the right to: • Access your data—we will provide a copy of what we hold. • Rectify inaccuracies—update your profile or contact us to correct data. • Erasure—delete your account and data on request. • Portability—receive your data in a machine-readable format. • Object—to processing where applicable. • Withdraw consent—where we rely on consent. Contact us at admin@expatraders.com for any of these requests. We will respond within 30 days.

All traffic is encrypted (HTTPS). Passwords are hashed with bcrypt. Session tokens are secure and HttpOnly. Our database and infrastructure are hosted in the EU. We follow security best practices and do not store payment card details—Stripe handles that.

For privacy questions, data requests, or concerns: admin@expatraders.com. We take every request seriously and will respond promptly.