Privacy Policy

Draft notice. This policy is a transparent description of what DiverHire actually does with your data today. A formally-reviewed version is in progress. For privacy questions or data requests, email [email protected].

Last updated: 27 September 2026

Who we are

DiverHire ("we", "us") operates the marketplace at diverhire.com connecting commercial divers with clients seeking underwater services. This policy explains how we handle the personal data of both sides of that marketplace.

What we collect

Account data

• Email address, first name, last name (required to register)
• How other members see you: a display name you choose, or your full name
• Account type (diver or client)
• Optional: phone number, city, state, country
• For divers: certification details (type, organisation, dates) you choose to add
• Hashed password (never the plaintext)

Activity data

• Jobs you post, bids you submit, messages you send within the platform
• Login timestamps and last-active dates
• Pages you view, features you use (via privacy-respecting analytics)

Technical data

• IP address, browser type, device type — collected by Cloudflare for fraud prevention and analytics
• Cookies and localStorage for keeping you signed in (a JWT token) and remembering preferences

How we use your data

• To run the marketplace: match divers with relevant jobs, deliver messages, process job postings
• To send transactional emails: account confirmation, password reset, job notifications
• To improve the product: aggregate analytics on which features are used
• To prevent fraud and abuse, including an automatic spam and scam check on messages and bids
• To comply with legal obligations

Spam screening of messages

• An automatic check looks at messages (with their subjects and attachment links), invitations to bid and bids when they are sent, to spot spam and scams, for example links through URL shorteners, requests for gift cards or cryptocurrency, or the same message sent to many people who haven't been in touch.
• The check never blocks, hides, changes or deletes a message and never suspends an account. It only puts suspected spam on a list for DiverHire staff.
• You can report a message or bid you received. We don't tell the sender.
• DiverHire staff may read a flagged or reported message and the messages around it in that conversation. They don't read other conversations for this.
• Flags and reports are kept with the message.

What other people can see

Your name

• When you sign up you choose how other members see you: a display name you pick, or your full name. You can change this any time in Settings.
• If you use a display name, your full name stays hidden. Your profile, jobs, search results, reviews and messages show only your display name, and searching the diver directory for your real name does not find you.
• Divers: when you bid on a job, that job's client sees your full name, on your bid and wherever they see you afterwards (your profile, messages and reviews), even if you later withdraw the bid. Other divers and visitors still see only your display name.
• Clients: the diver you hire sees your full name. Divers who only bid on your job, and everyone else, see only your display name.
• If you choose to show your full name, everyone sees it, including search engines.
• DiverHire staff can always see your full name.
• Members who joined before this choice existed keep the name they showed before (divers their full name, clients their first name and last initial) until they choose.
• After a change, link previews and search engines can take up to a day to catch up. Messages, emails and notifications already sent keep the name they were sent with.

Your profile and jobs

• Clients: your home city is not shown.
• Divers: your city and profile (certifications, experience, services and reviews) are public, so clients can find you. Diver profiles can appear in search engines, under the name you chose.
• A diver's service-area address is private. Others see only the city or region and the radius you cover.
• Jobs show their title, description, city and budget to people browsing jobs. A job's street address is shown only to the client and the diver they hire.
• Your email address and phone number are not shown on your public profile.

Third-party services we use

The following service providers process some of your data on our behalf:

• Cloudflare — hosts the website (Pages), API (Workers), and database (D1). Sees IP addresses and request metadata.
• Cloudflare Web Analytics — privacy-friendly site analytics (no cookies, no fingerprinting).
• Cloudflare Turnstile — bot protection on registration forms.
• Cloudflare R2 — stores the files you upload: certification, insurance and identity documents, gallery photos, job photos and message attachments.
• Google Maps — powers the optional search for bodies of water in a diver's service areas, when it is available. When you use it, Google receives what you type into that search and your IP address.
• OpenStreetMap Nominatim — turns the addresses and place names you enter into map coordinates. It receives the text you typed and, for lookups made from your browser, your IP address.
• Resend — sends transactional email (password resets, bid and message notifications, digests). Sees your email address and the message content.
• Stripe — processes payments for paid extras such as featured job listings and Diver Pro, and optional identity checks, when those features are switched on and you use them. You enter card details on Stripe's own page; we never see or store your full card number.

We do not sell your personal data. We do not share it with advertising networks.

Cookies and local storage

We use localStorage to keep you signed in (storing a JWT token) and remember preferences like dark mode. We do not use third-party tracking cookies for advertising. Cloudflare may set its own cookies for security; see Cloudflare's privacy policy.

How we store and protect your data

• Data is stored in Cloudflare D1 (a globally-distributed SQLite database).
• Passwords are hashed with bcrypt; we never store or transmit plaintext passwords.
• All connections use TLS / HTTPS.
• Authentication tokens are short-lived JWTs.

No system is perfectly secure. If we discover a breach affecting your data, we'll notify you promptly via email.

Your rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data (most fields are editable from your profile)
• Delete your account and personal data
• Export your data in a portable format
• Object to specific processing
• Withdraw consent for marketing emails (unsubscribe link in every email)

To exercise any of these rights, email [email protected]. We respond within 30 days as required by GDPR / CCPA.

Children's privacy

DiverHire is not intended for users under 18. We do not knowingly collect data from minors. If you believe we have, email us and we'll delete it.

Changes to this policy

We'll update this page when our practices change and update the "last updated" date above. Material changes will also be communicated via email to registered users.

Contact

Privacy questions, data requests, or complaints: [email protected].