Jwumasay joo-maJwumasay joo-maWhat personal data Corpshore holds about contributors, why, where it lives and how long it is kept.
Terakhir diperbarui 31 August 2026
Singkatnya: Corpshore Solutions is the controller. The entity in your country handles your employment data.
Corpshore Solutions Corporation is the data controller for personal data processed through Jwuma. The Corpshore entity registered in your country of residence acts as controller for data relating to your engagement and payment.
Contact us at info@corpshore.ai for anything relating to your personal data.
Tautan ke bagian iniSingkatnya: Your identity and contact details, what you tell us about your skills, the work you do and how you are paid.
Identity and contact: your name, email address, country of residence and nationality and a contributor ID we generate.
Application information: the languages you work in, areas of expertise, availability, professional profile links and anything you write in your application.
Assessment: your answers to interview questions, and where a recorded interview is used, the video and audio recording and its transcript.
Work: the tasks you complete, quality outcomes, review decisions and the reasons attached to them.
Payment: your payout method details and a record of payments made to you.
Technical: sign-in records and the IP address a session came from, kept for security.
Identity verification: an image of a government-issued identity document, and a short camera clip of your face recorded to confirm you are a real person present at the camera (a liveness check). The clip is compared, by an automated system, against the face on your document to confirm they are the same person. Where enabled, a mathematical representation of your face from this check (not the clip or photo itself) may also be compared against the same kind of representation from other accounts, solely to detect whether the same person is operating more than one account. See "What we deliberately do not collect" for what this comparison is not used for.
Tautan ke bagian iniSingkatnya: No personality profiling, no expression or emotion analysis, no tracking of you outside the platform. Face comparison is used narrowly, for identity verification and, where enabled, duplicate-account detection — never anything broader.
We do not build personality or behavioural profiles. We record what your work is like, never inferences about what you are like.
We do not perform expression analysis or emotion detection, and we do not analyse a recorded interview's video with any automated system — it is retained so a person can verify identity if needed, nothing more.
We do perform one specific, narrow kind of facial comparison, described in "What we collect" above: checking that the face in your liveness clip matches the face on your identity document, and, where enabled, checking whether that same face appears on another account. Neither comparison is used to recognise you against any list, database or purpose beyond those two, is never shared with a client, and is never used to infer anything about you beyond whether two images are likely the same person.
We do not track your activity on other websites, and we do not sell personal data to anyone, ever.
Tautan ke bagian iniSingkatnya: Mostly to run your contract with us and to pay you. Some for legal duties, some with your consent.
To perform our contract with you: assigning work, reviewing it and paying you.
To comply with legal obligations: tax and financial records, sanctions screening and employment law duties in your country.
With your explicit consent: the identity document and liveness check described in "What we collect" above, and the face comparisons made from them, because this is biometric data and several of the laws listed in "Which law applies to you" (data-rights document) treat it as a special, more sensitive category. You are asked for this consent separately from the rest of signup, and can decline it, though we cannot verify your identity or pay you without it. Recorded interviews, and optional email such as the weekly summary of new work, are also consent-based. You can withdraw consent for any of these at any time, though withdrawing identity-verification consent after the fact means we can no longer confirm your account and it may be restricted.
For our legitimate interests: keeping the platform secure, detecting the same person operating more than one account by non-biometric means (a confirmed phone number, a payout account, an email address, a device or network signal, or matching CV text) and improving quality processes. Where we rely on this we have considered your interests and you may object.
Tautan ke bagian iniSingkatnya: Logically separated by region for access control and compliance handling, so different rules can apply to different regions. Physically, all regions are hosted in the United States today.
The platform partitions personal data across five logical regional databases: Europe, the Americas, Africa, Central Asia and Asia Pacific with the Middle East. Which one holds your data follows your country of residence, and that partition controls who inside Corpshore can access it and which region's rules apply to it. A country we have not explicitly mapped defaults to the European region, which applies the strictest protections of the five.
This is a logical separation, not a geographic one, and it is enforced in the software rather than promised in a policy alone: all five regional databases currently run on infrastructure physically located in the United States, whichever region your data is assigned to.
Where data must move between regions, for example to a client receiving delivered work, we use appropriate transfer safeguards including standard contractual clauses.
Tautan ke bagian iniSingkatnya: Account data while you are active plus a period after. Financial records longer, because tax law requires it.
Account and profile data: for as long as your account is open, and for a period afterwards to handle any queries about work already done.
Interview recordings: retained while the application is live and for a limited period after a decision, then deleted.
Identity document images and liveness clips: retained for as long as needed to keep your account verified, and where enabled, a mathematical representation of your face used only for duplicate-account comparison is retained for the same purpose. What happens to these on an erasure request is described in "Deleting your data, and what is kept" in the data-rights document.
Work and quality records: retained for the life of the client engagement they belong to.
Financial records: retained for the period required by tax law in the relevant country, typically six to seven years. This is the one category we cannot delete on request, and we will tell you exactly what is retained if you ask.
Tautan ke bagian iniSingkatnya: Some of it we need to contract with you or to obey the law. The rest is optional and saying no costs you nothing.
Required to work with us: your name, email, country of residence, nationality and payout details. Without these we cannot contract with you, pay you or meet our sanctions screening and tax obligations. If you do not provide them we cannot open an account.
Required for a specific project: the languages and skills a project screens on. Not providing them does not close your account, it only means you are not matched to that work.
Optional, and refusing has no consequence: your motivation for applying, portfolio links beyond the required professional profile, optional demographic information where a project ever asks for it, and consent to a recorded interview.
We tell you at the point of collection which of these a field is, rather than leaving you to guess.
Tautan ke bagian iniSingkatnya: One address for everything about your data, and named authorities you can complain to.
For any question or request about your personal data, write to info@corpshore.ai. Requests are handled by our data protection function and answered within thirty days.
Corpshore Solutions Corporation is the controller for platform data. The Corpshore entity registered in your country of residence is the controller for data relating to your engagement and payment, and either address reaches the right team.
Where a data protection officer or an Article 27 representative is required for a market we operate in, their contact details are published here. If this sentence still reads as a general statement rather than naming a person, the appointment has not been completed and we would rather say that than imply otherwise.
Tautan ke bagian iniSingkatnya: A short list of suppliers, each under contract, each for a stated purpose.
Hosting and databases, for running the platform and storing your account and work data in your region.
Email delivery, for sign-in links and notifications.
Speech to text, for transcribing recorded interview answers. The provider receives the audio and returns text.
AI assessment, for scoring interview transcripts against a rubric. The provider receives the transcript, never the video and never your identity.
Payment rails, for paying you. Each receives only what it needs to make the payment.
Bot protection, for distinguishing people from automated submissions on public forms.
Each is bound by a written processing agreement, may act only on our instructions and may not use your data for its own purposes. We will name the current suppliers on request, and we will tell you before adding a new category of processor.
Tautan ke bagian iniSingkatnya: Reasonable technical measures, and we tell you if something goes wrong.
Access to personal data is limited to staff whose role requires it, controlled by the role system described in the terms, and every consequential action is logged with the actor.
There are no passwords to steal: sign-in is by single-use emailed link.
Data is partitioned by region, so a problem in one region does not expose another.
If a breach occurs that is likely to result in a risk to your rights, we notify the relevant supervisory authority within 72 hours of becoming aware, and we tell you directly where the risk to you is high. We will tell you what happened and what it means for you, not only that something happened.
Tautan ke bagian iniSingkatnya: You can get a copy, correct it, delete it, object or complain to a regulator.
You have the right to access the personal data we hold about you and receive a copy in a portable format.
You have the right to have inaccurate data corrected.
You have the right to erasure, subject to the financial record retention described above.
You have the right to restrict or object to processing based on legitimate interests, and to withdraw consent where consent is the basis.
You have the right to a human review of any decision involving automated assessment, and to an explanation of it.
You have the right to complain to your local data protection authority. In the EU that is your national authority; in the UK, the Information Commissioner's Office.
We respond to requests within thirty days and usually much sooner.
Tautan ke bagian iniTanya seseorang. Kami lebih suka menjelaskannya daripada biarkan Anda menebak.
Hubungi kami