What we hold, why, and your choices.

This Privacy Policy explains what personal data WorkSoy Networks, Inc. (“WorkSoy”) collects, why we collect it, how we use it, and the choices you have. We do not sell personal data.

We collect personal data in three ways:

• Information you provide — account details (name, email, role), expert profile content, briefs and proposals, messages and uploaded files, contact-form submissions, and payment details that you share with our payment processor.
• Information from third parties — identity information from Google when you sign in with Google; payment and payout metadata from Stripe.
• Information collected automatically — log data (IP address, browser type, pages viewed), device identifiers, and cookie identifiers used for authentication and analytics.

We use personal data to:

• operate accounts, briefs, proposals, contracts and messaging;
• match clients with appropriate experts;
• process payments and hold milestone funds in escrow;
• provide customer support and resolve disputes;
• monitor for fraud, abuse, and security incidents;
• improve the Services and develop new features;
• send transactional and, with consent, marketing emails;
• comply with legal and regulatory obligations.

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract, our legitimate interests in operating and improving the Services, your consent (where required, for example for marketing emails), and compliance with legal obligations.

We share personal data only as needed to operate the Services:

• Counterparties. Clients see relevant expert profile data; experts see relevant brief and contract data.
• Service providers. Payment processor (Stripe), cloud infrastructure (hosting, database), email and authentication providers, error monitoring. These are bound by data-processing agreements.
• Legal and safety. When required by law, court order, or to protect rights, property, or safety.
• Business transfers. In connection with a merger, acquisition, or asset sale, with notice where required.

We do not sell personal data and do not share it for cross-context behavioural advertising.

We use a small number of first-party cookies for authentication (session token), security, and product analytics. You can control cookies in your browser settings. Disabling required cookies may stop parts of the Services from working.

We retain personal data for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Backups containing personal data are deleted on a rolling schedule.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to processing or withdraw consent. To exercise these rights, email privacy@worksoy.com. You may also lodge a complaint with your local data protection authority.

We are based in the United States and process data there and in locations where our service providers operate. Where required, we rely on Standard Contractual Clauses or other valid transfer mechanisms.

We use industry-standard technical and organisational measures — encryption in transit, scoped access, audit logging, and isolated environments — to protect personal data. No system is perfectly secure; report suspected vulnerabilities to security@worksoy.com.

The Services are not directed to children under 16 and we do not knowingly collect personal data from them. If you believe a child has provided personal data, contact us so we can delete it.

We may update this policy. Material changes will be announced via the Services or by email. The effective date at the top of the page reflects the most recent revision.

Questions or requests? Email privacy@worksoy.com. Postal: WorkSoy Networks, Inc., 1 Broadway, New York, NY.