What we store
- Your email address, to sign you in and to tell you about requests and messages on your account.
- For developers and verified clients: your public Roblox user id, username and display name, read from Roblox's public API after you prove the account with a bio code. We never ask for a Roblox password and we don't store the bio code after it matches.
- What you write on Commishy: your profile, portfolio links, packages, requests, messages, deal records and reviews.
- Public Roblox data about work you add: game names, visit counts and thumbnails, fetched from Roblox when shown.
- The waitlist: your email, whether you're hiring or a developer, and an optional Roblox username.
What we don't do
- We don't sell your data or share it with advertisers.
- We don't hold or move money. The deal record on a request is a written note of what you agreed; payment happens between you and the other person by the route you chose.
- We don't read your Roblox account beyond its public profile.
Cookies
- One cookie, for signing you in. It holds your session and nothing else. There are no advertising or tracking cookies.
- Page analytics come from Vercel Web Analytics, which counts visits without cookies and without identifying you.
Who else touches it
- Supabase hosts the database and sign-in. Vercel hosts the site. Resend delivers email. Anthropic processes the text you type into the Brief helper to draft a brief; it isn't used to train models.
- Roblox provides the public account and game data shown on profiles. Commishy isn't affiliated with Roblox Corporation.
What's public
- Developer profiles are public: name, Roblox username, headline, bio, portfolio, packages, reviews, jobs done and rehire rate.
- Requests, messages and deal records are private to the two people on them.
- Reviews you write appear on the developer's public profile with your name.
Deleting your account
- You can delete your account from your dashboard at any time. It removes your profile, portfolio, packages, requests, messages and reviews. Reviews you wrote about other people are removed too.
- Waitlist emails can be removed by writing to hello@commishy.app.
How long we keep it
- As long as your account exists. Delete the account and it goes, apart from server logs, which roll off within 30 days, and records we must keep by law.
- We note when you agreed to the terms, and which version, so we can show it if there's ever a dispute.
Children
- Commishy is for people 13 and over. Under 18, a parent or guardian agrees to the terms for you and should be involved before you take or pay for a job. If we learn an account belongs to someone under 13, we remove it.
Contact
- hello@commishy.app. The person running Commishy is based in Thailand.