Freelance services marketplace · Privacy summary guide
Keep IDs, tax forms and contracts out of Fiverr messages: files shared there were publicly reachable in April 2026. Sellers face an ID and selfie check kept for 60 days, and Fiverr offers no setting to opt out of AI training on your work. [1] [4] [7]
Add Omnitwine as a preferred source on Google| What | Why | Who sees it | How long it's kept |
|---|---|---|---|
| Government ID and a selfie (sellers) | Identity check before selling | Fiverr and its verification process; not other users | ID copy and selfie for 60 days, then only basic details (name, date of birth, hashed ID number)[4] |
| Biometric data from the selfie | Matching your face to your ID | Fiverr | Not stated[3] |
| Messages and files shared in orders | Running the order | You, the other party, and Fiverr | Not stated[1] |
| Profile, gigs and reviews | Your public presence | Everyone | Removed when the account is deleted[5] |
| Payment and payout details | Paying and getting paid | Fiverr and payment providers | Kept for legal and fraud reasons after deletion[5] |
In April 2026, files that users had shared in Fiverr messages were found sitting at public, permanent web links, and some had been picked up by Google: tax forms, ID documents, contracts, invoices and credentials. Fiverr said it was "not a cyber incident", that users had shared the files as work samples, and that takedowns are handled promptly. Users who checked afterwards found some links removed and others still live, and Fiverr has published no follow-up report. [1] [2]
Whatever the cause, the lesson is simple: don't send IDs, tax forms, contracts or logins through Fiverr messages. Share them another way, or not at all. [2]
Before your first gig goes live, Fiverr checks your identity with a government ID and a selfie; its own filings say this involves collecting biometric data. Fiverr's help pages say the ID copy and selfie are kept for 60 days, after which only basic details remain: your name, date of birth, gender, a scrambled version of your ID number, and the document type and country (an older 2021 help page said 30 days). Fiverr says your ID isn't used for marketing or shown to other users. Some new sellers also pay a one-time verification fee; Fiverr doesn't publish the amount. [3] [4] [6]
Fiverr gives sellers no setting to stop their work being used to train AI. By default, sellers can use AI in their work unless the buyer writes "no AI" in the requirements. Sources disagree about Fiverr Go, its AI model tool: one legal review says past contracts were used for training with no clear way to opt out, while another review says Fiverr committed not to train its own models on freelancer data. If this matters to you, it's the biggest open question about Fiverr's privacy. [7] [8]
Fiverr says full deletion takes 30 days and that it keeps some records for security, fraud and legal reasons. Deletion is permanent: your reviews go with the account and can't be moved to a new one. [5]
Fiverr's privacy basics are standard for a marketplace: an ID check for sellers, limited retention and a deletion route. The weak spots are file sharing, after the April 2026 exposure, and AI training, where sellers have little control. Treat Fiverr messages as semi-public and you'll avoid the worst of it.
Bibliography
