Privacy notice

Who is responsible for your data

In short: Corpshore Solutions is the controller. The entity in your country handles your employment data.

Corpshore Solutions Corporation is the data controller for personal data processed through Jwuma. The Corpshore entity registered in your country of residence acts as controller for data relating to your engagement and payment.

Contact us at info@corpshore.ai for anything relating to your personal data.

What we collect

In short: Your identity and contact details, what you tell us about your skills, the work you do and how you are paid.

Identity and contact: your name, email address, country of residence and nationality and a contributor ID we generate.

Application information: the languages you work in, areas of expertise, availability, professional profile links and anything you write in your application.

Assessment: your answers to interview questions, and where a recorded interview is used, the video and audio recording and its transcript.

Work: the tasks you complete, quality outcomes, review decisions and the reasons attached to them.

Payment: your payout method details and a record of payments made to you.

Technical: sign-in records and the IP address a session came from, kept for security.

What we deliberately do not collect

In short: No personality profiling, no biometric analysis, no tracking of you outside the platform.

We do not build personality or behavioural profiles. We record what your work is like, never inferences about what you are like.

We do not perform facial recognition, expression analysis or emotion detection. Where an interview is recorded on video, the recording is retained so a person can verify identity if needed and is not analysed by any automated system.

We do not track your activity on other websites, and we do not sell personal data to anyone, ever.

Why we process it, and on what basis

In short: Mostly to run your contract with us and to pay you. Some for legal duties, some with your consent.

To perform our contract with you: assigning work, reviewing it and paying you.

To comply with legal obligations: tax and financial records, sanctions screening and employment law duties in your country.

With your consent: recorded interviews, and optional email such as the weekly summary of new work. You can withdraw consent for these at any time.

For our legitimate interests: keeping the platform secure, preventing fraud and improving quality processes. Where we rely on this we have considered your interests and you may object.

Where your data lives

In short: Logically separated by region for access control and compliance handling, so different rules can apply to different regions. Physically, all regions are hosted in the United States today.

The platform partitions personal data across five logical regional databases: Europe, the Americas, Africa, Central Asia and Asia Pacific with the Middle East. Which one holds your data follows your country of residence, and that partition controls who inside Corpshore can access it and which region's rules apply to it. A country we have not explicitly mapped defaults to the European region, which applies the strictest protections of the five.

This is a logical separation, not a geographic one, and it is enforced in the software rather than promised in a policy alone: all five regional databases currently run on infrastructure physically located in the United States, whichever region your data is assigned to.

Where data must move between regions, for example to a client receiving delivered work, we use appropriate transfer safeguards including standard contractual clauses.

Who we share it with

In short: Clients never see who you are. A small number of suppliers process data for us under contract.

Clients receive delivered work. They never receive contributor identities or pay rates. That separation is structural rather than a setting.

Service providers who process data on our behalf under contract: our hosting and database providers, our email provider, our speech-to-text provider for recorded interviews, our AI provider for assessment scoring and our payment rails.

Authorities, where we are legally required to disclose.

We do not share your data for anyone else's marketing.

How long we keep it

In short: Account data while you are active plus a period after. Financial records longer, because tax law requires it.

Account and profile data: for as long as your account is open, and for a period afterwards to handle any queries about work already done.

Interview recordings: retained while the application is live and for a limited period after a decision, then deleted.

Work and quality records: retained for the life of the client engagement they belong to.

Financial records: retained for the period required by tax law in the relevant country, typically six to seven years. This is the one category we cannot delete on request, and we will tell you exactly what is retained if you ask.

Whether you have to give us this

In short: Some of it we need to contract with you or to obey the law. The rest is optional and saying no costs you nothing.

Required to work with us: your name, email, country of residence, nationality and payout details. Without these we cannot contract with you, pay you or meet our sanctions screening and tax obligations. If you do not provide them we cannot open an account.

Required for a specific project: the languages and skills a project screens on. Not providing them does not close your account, it only means you are not matched to that work.

Optional, and refusing has no consequence: your motivation for applying, portfolio links beyond the required professional profile, optional demographic information where a project ever asks for it, and consent to a recorded interview.

We tell you at the point of collection which of these a field is, rather than leaving you to guess.

Who to contact, and where we are established

In short: One address for everything about your data, and named authorities you can complain to.

For any question or request about your personal data, write to info@corpshore.ai. Requests are handled by our data protection function and answered within thirty days.

Corpshore Solutions Corporation is the controller for platform data. The Corpshore entity registered in your country of residence is the controller for data relating to your engagement and payment, and either address reaches the right team.

Where a data protection officer or an Article 27 representative is required for a market we operate in, their contact details are published here. If this sentence still reads as a general statement rather than naming a person, the appointment has not been completed and we would rather say that than imply otherwise.

Who processes data on our behalf

In short: A short list of suppliers, each under contract, each for a stated purpose.

Hosting and databases, for running the platform and storing your account and work data in your region.

Email delivery, for sign-in links and notifications.

Speech to text, for transcribing recorded interview answers. The provider receives the audio and returns text.

AI assessment, for scoring interview transcripts against a rubric. The provider receives the transcript, never the video and never your identity.

Payment rails, for paying you. Each receives only what it needs to make the payment.

Bot protection, for distinguishing people from automated submissions on public forms.

Each is bound by a written processing agreement, may act only on our instructions and may not use your data for its own purposes. We will name the current suppliers on request, and we will tell you before adding a new category of processor.

Security and what happens if we get breached

In short: Reasonable technical measures, and we tell you if something goes wrong.

Access to personal data is limited to staff whose role requires it, controlled by the role system described in the terms, and every consequential action is logged with the actor.

There are no passwords to steal: sign-in is by single-use emailed link.

Data is partitioned by region, so a problem in one region does not expose another.

If a breach occurs that is likely to result in a risk to your rights, we notify the relevant supervisory authority within 72 hours of becoming aware, and we tell you directly where the risk to you is high. We will tell you what happened and what it means for you, not only that something happened.

Your rights

In short: You can get a copy, correct it, delete it, object or complain to a regulator.

You have the right to access the personal data we hold about you and receive a copy in a portable format.

You have the right to have inaccurate data corrected.

You have the right to erasure, subject to the financial record retention described above.

You have the right to restrict or object to processing based on legitimate interests, and to withdraw consent where consent is the basis.

You have the right to a human review of any decision involving automated assessment, and to an explanation of it.

You have the right to complain to your local data protection authority. In the EU that is your national authority; in the UK, the Information Commissioner's Office.

We respond to requests within thirty days and usually much sooner.