Privacy

What this page covers

Bespoke is a platform run from Dubai, United Arab Emirates, that connects clients with architects, engineers and project managers. Everything below concerns the data the platform itself collects and stores.

Accounts and roles

There are three kinds of account: client, talent and staff. Your role decides what you can see and do. Logging in creates a session record that we can revoke, and your email address is confirmed with a six-digit code before the account can be used.

What we collect

Only what the product needs to work:

• Your name and email address, and a phone number if you add one.
• Your CV, if you upload one.
• Portfolio files and a profile photo, if you add them.
• The text of your profile: title, biography, education, languages and the services you offer.
• Your hourly rate, which you set yourself.
• The country and city you work from.
• Anything you write to us through the contact form or the support assistant.

Nothing else is asked for: no identity documents and no bank details.

Applications are read by people

A talent profile becomes visible only after someone on our team has read the application and approved it. A decline comes with a reason. The decision, and who made it, is recorded so the review history stays intact.

Where files are kept

Uploaded files are stored in a private bucket on AWS S3 in the us-east-1 region. Nothing in it is public. When a file has to be shown or downloaded, the platform checks that you are allowed to see it and then issues a link that expires shortly afterwards.

Where OpenAI is used

Two places. The first is drafting a profile from a CV: your document is sent to the model only when you choose that path, and you can fill the form in by hand instead. The second is the support assistant, where what you type is sent to the model to produce an answer. Nothing else is sent.

Email

Transactional email is sent through Resend: verification codes, password resets, decisions on applications, and replies to messages you send us. Each send is recorded so we can tell whether it arrived. There is no marketing email and no mailing list.

Cookies

Three, all of them ours:

• A session cookie that keeps you logged in.
• A language cookie that remembers whether you read the site in English or Arabic.
• A theme cookie that remembers light or dark, so the site opens the way you left it.

There are no advertising cookies and no third-party analytics.

Rate limits and error logs

Requests are counted, by account or by network address, to stop abuse of logging in, uploads and the assistant. Unexpected errors are recorded as a fingerprint and a count. CV contents, message bodies and passwords are never written to a log.

How long we keep it

Account and profile data stay until the account is deleted. Error logs are deleted after 90 days.

Access, correction and deletion

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Write to contact@bespoke-ae.com from the address on the account and say which of the three you want.

What deleting your account does

Deleting an account removes your profile content and the files you uploaded. An audit record of the account and of the decisions staff made about it is kept, so the review history of the platform holds together.

Changes to this page

The date at the top is the date this page last changed. If the product starts collecting something new, this page changes first.