Privacy Policy

This draft describes how Corpshore Solutions Corporation intends to handle personal data on Corpshore Work. It has not yet been reviewed by counsel in any jurisdiction and should not be treated as a final, binding, or legally sufficient statement of our privacy practices. Do not rely on this draft for compliance purposes until it has been reviewed and approved by qualified legal counsel.

Who controls your data

Corpshore Solutions Corporation (Corpshore Work) is the data controller for personal data collected through the platform, unless stated otherwise in a specific engagement agreement (for example, where a separate employer-of-record entity is the employer of record for payroll and statutory purposes in a given country). Our registered address is [registered address — to add]. You can reach us about privacy matters at support@corpshore.work, which currently serves as our interim privacy contact point pending appointment of a dedicated data protection contact where required by law.

Who this policy covers

This policy applies to three groups: candidates who create a profile or apply to roles, employer-side contacts who represent a hiring organisation on the platform, and visitors who browse Corpshore Work without creating an account, across the 170+ countries the platform operates in. What we collect and why differs by group, and the sections below note where that matters.

Data residency

Identity documents, verification artefacts and candidate profiles are stored in one of four regional databases, matching the region tied to your country of residence (Americas, Europe, Middle East & Africa, or Asia-Pacific), and are not transferred globally by default. Matching between candidates and roles runs on anonymised vectors that contain no names, documents or contact details, so the matching process itself does not require moving personal data between regions.

What we collect

• Account details: name, email, phone, locale
• Profile data you provide: work history, skills, languages, pay expectations
• Identity verification artefacts: government ID, liveness selfie, where required
• Employment and engagement data: contract terms, timesheets, invoices and payout records, for engagements run through Corpshore's employer-of-record or contractor-of-record services
• Employer-side account data: company details, billing contact, team member roles
• Usage data: how you interact with the platform, for security and product improvement
• Communications: messages sent through the platform's messaging and support tools

Legal bases for processing

Where applicable law requires a legal basis for processing (including the EU/UK GDPR), we rely on one or more of the following, depending on the activity: performing a contract with you (running your profile, application, or engagement), our legitimate interests (platform security, fraud prevention, product improvement, pursued in a way that does not override your own rights), your consent (for example, before using personal data to train a model, or for optional marketing communications), and compliance with a legal obligation (tax, employment, and anti-money-laundering rules in the countries where we operate).

How we use it

To operate the matching and hiring platform, run compliant payroll and contracts where you engage through employer-of-record or contractor-of-record services, screen and verify identity, process payments, and communicate with you about your account and applications. Candidate personal data is not used to train machine learning models without your explicit consent.

Cookies and tracking

We use a limited set of cookies and similar technologies, grouped into two categories: essential cookies needed to keep you signed in and the platform functioning, and analytics cookies used to understand how the platform is used so we can improve it. We do not currently use third-party advertising trackers. Where a jurisdiction requires consent before setting non-essential cookies, we will present a consent mechanism before this policy is finalised.

Who we share data with

We share personal data with service providers who help us run the platform, under contractual obligations that limit their use of your data to the services they provide us: identity verification and liveness-detection providers, payment and payout processors, cloud hosting and database providers, and email delivery providers. We do not sell personal data. Where Corpshore acts as a contractor-of-record or routes an engagement through a partner employer-of-record entity, the data needed to run that engagement (contract terms, payroll data) is shared with that partner under the same compliance standards.

International transfers

Where personal data needs to move between regions, for example because you apply to a role based in a different region from where your profile data is stored, we use appropriate safeguards such as standard contractual clauses or an equivalent mechanism recognised under applicable law. The regional-database architecture described above is designed to minimise how often this is necessary.

Data retention

We keep personal data only for as long as needed for the purpose it was collected for: for example, for the life of your account plus a limited period afterwards to meet legal, tax or dispute-resolution obligations, and for identity verification artefacts, for the period required by applicable know-your-customer or anti-money- laundering rules. Specific retention periods per data category will be published once this policy is finalised.

Children's privacy

Corpshore Work is not directed at, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Your rights

If you are in the EU, UK or a jurisdiction with an equivalent regime, you have the right to access, rectify, erase, restrict or port your personal data, and to object to certain processing, including profiling. See our dedicated GDPR page for more detail on how these rights work. If you are in a jurisdiction with its own privacy law, such as a US state privacy law, you have equivalent rights under that law, which we honour in the same way without listing every applicable statute here. To exercise any of these rights, contact us at the address above; deletion and access requests are actioned within the timeframe required by applicable law.

Automated decisions

We use automated tools to screen and match candidates to roles. No automated decision results in a final rejection without the option of human review. Every such decision records which reviewer, if any, examined it.

Data breach notification

If a security incident results in a breach of personal data that creates a risk to you, we will notify affected individuals and, where required, the relevant regulator, within the timeframe required by applicable law.

Changes to this policy

We may update this policy as Corpshore Work and its compliance obligations evolve. Once this draft is finalised, we will post the effective date here and, for material changes, notify account holders directly.

Contact

Questions about this policy, or requests to exercise your privacy rights, can be sent to support@corpshore.work.