Privacy Policy

1. How we use and share personal information

We limit the collection and processing of personal information to what we or our customers need for our business purposes, as explained in the table below and the following text.

In addition to the uses of personal information set forth in the table above, we may use personal information we obtain for the purposes of analyzing how our Services are used as well as for the improvement, security, maintenance and administration of the Services.

We use Stripe to facilitate remittance of payments from Companies for setting up requested connections. We also use Gusto and Tremendous to allow Connectors to claim any earnings associated with facilitating connections. These third parties process your personal information using their own services and have their own independent relationship with you. Accordingly, we recommend you review their privacy policies to understand how they process your personal information.

2. Disclosure and sharing

In addition to the sharing with the third parties described in the table above, we and our customers may also share your personal information with:

• Service providers. We share your personal information with third parties that provide services to us, such as billing, data storage, quality assurance, web hosting, text messaging, security, fraud prevention, website analytics, and marketing. We engage these kinds of third parties with contracts that require them to use your personal information only to deliver the services for which we have engaged the third party and as required by law.
• Legal compliance recipients. We disclose personal information to the courts, the government, law enforcement agencies, litigants, and similar recipients when required by law.
• Successors. We may disclose personal information associated with a part of our business to a buyer, potential buyer, or other successor to our business.

We may also disclose personal information to third parties with your consent or at your direction.

3. Security, quality, and retention

We use reasonable administrative, technical, and physical safeguards to protect personal information in our possession from misuse, interference, loss, unauthorized access, unauthorized modification, or unauthorized disclosure. While we make every reasonable effort to help ensure the integrity and security of our network and systems, you should understand that no data storage system or data transmission over the internet or any other public network can be guaranteed to be completely secure, accurate, complete, or current.

We also take reasonable steps to ensure that the personal information we collect is sufficiently accurate, up-to-date, and complete for the purposes for which we process it.

We retain personal information for as long as necessary for the purposes we use it, or for the time required by law. What is necessary depends on the context and purpose of processing. We generally consider the following factors when we determine how long to retain personal information:

• retention periods established under applicable law;
• industry best practices;
• whether the purpose of processing is reasonably likely to justify further processing;
• risks to individual privacy in continued processing;
• applicable data protection impact assessment;
• information systems design considerations/limitations; and
• the costs associated with continued processing, retention, and deletion.

With regard to the personal information we process on behalf of our customers (i.e., in our role as a "service provider" or "processor,"), we recognize our responsibility to maintain appropriate security and privacy safeguards to comply with the privacy laws and regulations that may apply to us or our customers. If you have questions about any of our customers' processing of personal information, please contact them directly.

Please also note that, because we do not engage in behavioral targeting or the selling of personal information, our Services do not process the "Do Not Track" browser signal or any universal opt-out mechanisms, such as the Global Privacy Control. You can, however, request to exercise your privacy rights as set forth section 6 below.

4. International users

Please be aware that your personal information will be stored and processed in the United States. If we transfer personal information to the United States from another jurisdiction, we will do so in a way that complies with applicable legal requirements.

5. Children's privacy

Our Services are not directed at children and we do not knowingly process any personal information from those under the age of 18.

6. Your privacy rights

Depending on the law in your legal jurisdiction, you may have certain rights regarding your personal information under the law. To exercise your rights, please submit a request by contacting us through any of the means outlined in section 7, below.

Your rights may include the following:

• the right to opt out of the use of personal information for targeted advertising, personal information sales, or profiling resulting in significant consequences;
• the right to confirm whether we process your personal information and to access a copy (from which we may, for security purposes, exclude certain personal information), including a copy that is in a portable data format;
• the right to the correction of inaccurate personal information;
• the right to the deletion of your personal information;
• the right not to be discriminated against for exercising any of these rights; and
• the right to appeal the action we take in response to any request to exercise these rights.

Although you may also have certain rights relating to our processing of your sensitive personal information, please note that we do not process the kinds of personal information that are generally considered to be sensitive personal information.

Only you or someone legally authorized to act on your behalf may make a request related to your personal information. We will verify that any requests from persons other than you have your legal authorization. You may also make a request on behalf of your child.

Your request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or a legally authorized representative; and
• Describe your request with sufficient detail so that we can understand, evaluate, and respond to it appropriately.

You may also appeal our decision on your request using the contact information below. When you contact us to appeal, please tell us why you believe we erred in responding to your request. We will respond to your appeal in accordance with the timelines set forth in applicable law.

7. Contacting Us

To exercise your rights or for other privacy-related inquiries, please contact us at: