Privacy Policy

Kariaa ("Kariaa," "we," "us," or "our") operates a marketplace and workflow platform that helps people discover opportunities, build profiles, submit applications, complete interviews, message our hiring helper, and complete DataHouse tasks for external companies, hosts, employers, customers, and reviewers.

This Privacy Policy explains how we collect, use, disclose, license, sell, retain, and protect information when you use Kariaa websites, applications, message channels, DataHouse workflows, AI-assisted tools, and related services. It is written broadly because the platform handles employment, contractor, applicant, task, media, and AI/ML data.

This Policy is a notice about data practices. It does not make Kariaa your employer, agent, fiduciary, recruiter of record, escrow agent, payroll provider, staffing agency, or guarantor of any opportunity, submission, payment, host, employer, review, task, or outcome. Those limitations are also addressed in our Terms.

• Account and contact information: name, email, username, password credentials, phone number, messaging handle, channel identifiers, profile photo, and communication preferences.
• Identity and verification information: legal name, date of birth, age, citizenship, address, location, work authorization, verification status, and related records you provide or that we infer from your interactions.
• Professional profile information: occupation, skills, interests, education, school or company, work experience, LinkedIn, GitHub, portfolio links, websites, resumes, documents, desired salary, work preferences, availability, and profile summary.
• Opportunity and application information: interest signals, access codes, application notes, desired compensation, availability, comments, interview answers, transcripts, recordings, links, submissions, status, review notes, and employer or host feedback.
• DataHouse and task output: text responses, labels, datasets, images, audio, video, documents, files, metadata, timestamps, review results, earned amount records, and any other work product you submit.
• Message channel information: inbound and outbound texts, WhatsApp messages, Telegram messages, and other enabled message channel records, attachments, provider message IDs, delivery metadata, and AI response identifiers.
• Technical and usage information: IP address, browser, device, operating system, pages viewed, links clicked, session activity, language preference, local storage, cookies, analytics events, logs, diagnostics, and security events.
• Information from third parties: external companies, opportunity hosts, scouts, referrers, messaging providers, email providers, analytics providers, AI providers, cloud infrastructure, storage providers, and other service providers or partners.
• Inferences and derived data: conclusions, predictions, scores, rankings, match scores, fraud-risk scores, trust-and-safety ratings, profile summaries, and other inferences we generate about you from your account data, behavior, messages, submissions, and interactions with the Platform.

We collect information directly from you, automatically from your device and interactions, from message channels and uploaded files, from external companies and opportunity hosts, from admins and scouts, from service providers, from public or user-provided links, and from inferences or outputs generated by platform and AI-assisted tools.

When you provide information about another person or include another person in a file, message, recording, dataset, or submission, you represent that you have the authority and rights needed to provide it to Kariaa and to allow the uses described in this Policy and the Terms.

Some information we collect may be sensitive under privacy laws or may be especially private in an employment context, including government or citizenship details, birth date, address, salary preferences, work authorization, resumes, interview content, voice or video recordings, profile photos, and fraud or trust-and-safety review signals.

We use this information to operate the marketplace, verify users, support applications, route submissions to external companies, evaluate platform trust and safety, improve matching, administer DataHouse tasks, and comply with law and contractual obligations. We may also use and disclose it as described in this Policy, including for AI, analytics, licensing, resale, and commercial product development where permitted by law.

Where a law gives you the right to limit certain uses of sensitive personal information, you may make that request at info@kariaa.com. We may still use sensitive information for services you request, security, fraud prevention, legal compliance, transaction records, quality review, and other uses permitted by law. Limiting sensitive data may make some marketplace, verification, DataHouse, or application features unavailable.

We may collect, generate, and retain fraud-risk signals, trust-and-safety scores, investigation records, abuse flags, chargeback history, duplicate-account indicators, bot-detection results, and related signals. This information may be used to evaluate your account, withhold or approve payments, restrict or terminate access, and share with fraud-prevention services, financial institutions, law enforcement, or hosts and buyers where appropriate.

• Create, secure, verify, support, and administer accounts and profiles.
• Match users with opportunities, show marketplace listings, process access codes, and manage scout or referral workflows.
• Submit applications, DataHouse output, interview responses, files, messages, and related profile data to external hosts, employers, companies, reviewers, scouts, and admins.
• Operate AI-assisted chat, matching, translation, interview, summarization, vetting, fraud-risk, quality review, and productivity tools.
• Evaluate applications, task quality, marketplace integrity, fraud, abuse, security incidents, payment eligibility, and policy compliance.
• Send account, verification, password reset, application, task, status, support, legal, and policy communications.
• Send optional match alerts or opportunity notifications when you ask for them or continue a message conversation with us, subject to your opt-out rights.
• Analyze, improve, train, test, benchmark, commercialize, license, resell, or develop Kariaa products, datasets, models, services, and business relationships.
• Enforce our Terms, preserve evidence, defend legal claims, protect users and partners, respond to legal process, resolve disputes, and comply with applicable law.
• Detect, investigate, and prevent fraud, abuse, spam, bot activity, multiple-account violations, identity misrepresentation, payment manipulation, DataHouse output fraud, and other prohibited conduct.
• Share fraud and abuse signals with hosts, buyers, payment processors, and third-party fraud-prevention services to protect the integrity of the marketplace and its participants.
• Contact you with platform updates, new features, re-engagement messages, and marketing communications where permitted by applicable law and your communication preferences.
• Generate inferences, scores, rankings, and derived data about your suitability for opportunities, task quality, fraud risk, and platform engagement, and use those inferences for matching, review, and commercial purposes.

Kariaa uses AI and automated systems to help with messaging, opportunity search, profile memory, matching, translation, interview prompts, application summaries, requirement fit, fraud-risk indicators, DataHouse workflows, and administrative review. These tools may process personal information, resumes, messages, interview transcripts, task files, and submissions.

AI outputs are tools for marketplace operations and review. External companies, hosts, employers, and admins remain responsible for their own hiring, contracting, payment, review, and selection decisions. If a law gives you rights related to automated decision-making or profiling, you may contact us at info@kariaa.com.

AI-assisted processing may affect ranking, matching, review workflows, summaries, fraud-risk indicators, translation, or what opportunities are shown first. These tools are not promises that any applicant, host, submission, or task is accurate, lawful, safe, qualified, or payable. We may rely on automated and human review together where permitted by law.

• External companies and hosts: we may disclose profile, application, submission, interview, resume, message, task, media, and review information to companies, hosts, employers, reviewers, scouts, and admins connected to an opportunity or task. These parties are independent third parties and may act as separate businesses, controllers, or decision-makers for their own hiring, contracting, review, compliance, payment, and data practices.
• Service providers: we use providers for hosting, database, storage, authentication, email, analytics, translation, AI, security, messaging, support, and operational services, including providers such as Supabase, OpenAI, Resend, Vercel, Google Cloud Translation, Telegram, and WhatsApp-related tooling.
• Commercial partners and customers: we may license, sell, share, transfer, or otherwise commercialize submissions, DataHouse output, media, datasets, messages, profile data, interview materials, annotations, labels, identifiers, inferences, and other information, including information that may identify you, for AI/ML, data, research, hiring, marketplace, analytics, and commercial purposes, subject to applicable law and required opt-out rights.
• DataHouse hosts and buyers: when you submit DataHouse task output, your submitted materials, associated metadata, profile identifiers, verification status, and task performance history may be shared with or transferred to the host, customer, or buyer of that task. These parties may independently retain, use, and commercialize your submissions according to the task agreement and their own policies. Kariaa is not responsible for the downstream use of approved DataHouse output.
• Legal, safety, and compliance: we may disclose information to comply with law, subpoenas, legal process, tax or payment obligations, fraud investigations, platform security, dispute resolution, and enforcement of our agreements.
• Fraud prevention and trust services: we may share account identifiers, fraud signals, abuse flags, device information, and related data with third-party fraud-prevention, identity-verification, and trust-and-safety services to protect the Platform and its users.
• Business transactions: information may be disclosed or transferred in connection with financing, diligence, merger, acquisition, reorganization, sale of assets, bankruptcy, or similar transactions.
• Aggregated or de-identified information: we may use and disclose information that is aggregated, de-identified, or otherwise not reasonably linked to you without restriction, unless applicable law says otherwise.

We are not responsible for the privacy, security, legal compliance, hiring practices, payment practices, or other actions of external companies, hosts, employers, customers, scouts, reviewers, admins, or other third parties once information is disclosed to them as permitted by this Policy, the Terms, or your instructions.

We use cookies, local storage, session storage, and similar technologies for authentication, language preferences, access code handling, referrals, navigation, security, analytics, and product improvement. We use Vercel Analytics and may use similar tools to understand page views, traffic, performance, and usage patterns.

You can adjust browser settings to limit cookies or clear local storage, but some platform features may not work properly without them.

Our Platform does not currently respond to browser Do Not Track (DNT) signals. We treat all users consistently regardless of DNT settings. If a legally recognized opt-out mechanism applies in your jurisdiction, you may exercise it as described in Section 12 (California Notice and Privacy Choices) or by contacting info@kariaa.com.

If you send Kariaa a text, WhatsApp, Telegram, or similar message, you authorize us to respond on that channel, process the contents and attachments, store the conversation, and use it to operate your profile, applications, tasks, and match alerts. Message and data rates may apply depending on your provider.

You can ask us to stop optional alerts or change notification preferences at any time. For text-style channels, reply STOP, UNSUBSCRIBE, or a similar opt-out request, or contact info@kariaa.com. We may still send transactional, security, application, legal, or account-related messages where permitted.

Message and conversation records may be retained indefinitely for the purposes described in this Policy. You may request deletion by emailing info@kariaa.com, subject to the limitations described in Section 10 (Retention).

Opportunity listings surfaced through the Platform are provided by external companies, job boards, and hosts. When you apply to or are matched with an opportunity, your information may be shared with those third parties as described in Section 7. Kariaa is not responsible for how those parties handle your data after it is shared.

Messages and attachments you send may be used to train, evaluate, and improve AI and machine-learning systems, as described in this Policy and the Terms.

We retain information for as long as needed for the purposes described in this Policy, including marketplace operations, DataHouse review, payments, tax and accounting records, fraud prevention, security, disputes, legal compliance, backups, analytics, AI/ML development, licensing, and business records.

If you request deletion, we may delete or de-identify account, profile, contact, and certain personal information where required by law. We may retain submissions, DataHouse outputs, interview materials, messages, audit logs, anti-fraud records, payment records, backups, and data already licensed, sold, transferred, used in AI/ML systems, or needed for legal or legitimate business purposes.

Deletion or account closure does not revoke the licenses granted in the Terms, undo past disclosures, require us to retrieve data already shared with third parties, or require removal of information from backups, audit trails, fraud systems, model artifacts, aggregate datasets, or de-identified materials where retention is permitted by law.

Your profile, verification status, and application history may be visible to scouts and referrers connected to the Platform even if you have not explicitly applied to a specific opportunity they are associated with, as part of the Platform's talent discovery and referral features.

If you delete your account, we may retain your email address and contact information to prevent re-registration under prohibited circumstances, comply with legal obligations, or send legally permitted communications. We will not use retained contact information to re-engage you for marketing purposes unless applicable law permits and you have not opted out.

• We collect and use behavioral signals, device data, submission metadata, message patterns, account history, and third-party fraud-risk data to detect and prevent fraud, abuse, manipulation, fake identity, spam, bot activity, duplicate accounts, payment fraud, and DataHouse output fraud.
• If we detect or reasonably suspect prohibited conduct, we may take immediate action including account suspension, payment holds, payment forfeiture, content removal, access restrictions, account termination, and referral to law enforcement or other authorities.
• We may retain fraud and abuse records, investigation notes, device fingerprints, and related data indefinitely for fraud prevention, legal compliance, and protection of the Platform and its participants, even after account deletion.
• We may share fraud signals, abuse flags, and investigation findings with hosts, buyers, payment processors, financial institutions, and law enforcement where we believe it is necessary to protect the Platform, prevent harm, or comply with law.
• We will not disclose details of fraud investigations to users except as required by law or our own policies.

If California privacy law applies to Kariaa, this section is our Notice at Collection and privacy choices notice. We may collect the categories described above, including identifiers, contact details, professional or employment information, education information, commercial information, internet or network activity, approximate location, audio/visual/sensory information, inferences, account credentials, message contents, citizenship/work authorization details, and other sensitive personal information.

We collect, use, retain, disclose, sell, share, and license these categories for the business and commercial purposes described in this Policy and the Terms. Categories that may be sold, shared, licensed, or otherwise commercially disclosed include identifiers, profile data, professional data, application data, messages, resumes, interviews, submissions, DataHouse output, media, metadata, inferences, and sensitive information where permitted.

To opt out of sale or sharing, request deletion, request correction, request access, limit sensitive personal information where available, or use an authorized agent, contact info@kariaa.com with "Privacy Choices" in the subject line. If your browser or device sends a legally valid opt-out preference signal and the law requires us to honor it, we will process it as required for that browser or device.

Opt-outs and deletion requests do not apply to every disclosure or use. They do not prevent disclosures to service providers, contractors, external companies or hosts needed for services you request, legal or security uses, previously completed transactions, information already disclosed or licensed where reversal is not required by law, or aggregated, de-identified, or non-personal information.

Where GDPR-style laws apply, we may process personal data based on one or more legal bases, including performance of a contract, steps taken at your request before a contract, legitimate interests, consent, legal obligations, establishment or defense of legal claims, and substantial public-interest or employment-related grounds where applicable. Our legitimate interests include operating and improving the marketplace, routing applications, preventing fraud, securing the Platform, developing data and AI/ML products, commercializing licensed data, communicating with users, and enforcing our rights.

Where we rely on consent, you may withdraw it as required by law, but withdrawal does not affect processing that occurred before withdrawal or processing based on other legal grounds. Where we rely on legitimate interests, you may object as required by law, and we may continue processing where we have compelling legitimate grounds or need the information for legal claims.

Depending on where you live, you may have rights to access, correct, delete, port, restrict, object to, or opt out of certain processing, sale, sharing, targeted advertising, or automated decision-making. These rights may be limited by law, fraud prevention, legal obligations, marketplace records, active contracts, completed transactions, or data that is no longer reasonably linkable to you.

California residents may request access, correction, deletion, and opt out of sale or sharing of personal information where the CCPA/CPRA applies. EU, UK, and similar-region users may have GDPR-style rights and may object to certain processing or request human review where automated decision-making rights apply.

To make a request, contact info@kariaa.com with enough information for us to verify and process it. We will not discriminate against you for exercising privacy rights, but some features may require data that you ask us not to process.

We may deny or limit requests when permitted by law, including where we cannot verify you, where the request conflicts with legal obligations, security, fraud prevention, free-expression rights, contractual rights, intellectual property rights, completed transactions, business records, or the rights and freedoms of others.

We use administrative, technical, and organizational safeguards that we consider reasonable for the nature of the Platform. These may include access controls, private storage for certain media, signed URLs for some files, rate limits, security headers, and service-role restrictions. No system is perfectly secure, and we do not guarantee that information will never be accessed, disclosed, altered, lost, or destroyed.

We and our providers may process information in the United States and other countries. Privacy laws in those places may differ from those in your location. Where legally required, we use appropriate transfer mechanisms or rely on permitted exceptions.

Kariaa is intended for users who are at least 18 years old. We do not knowingly collect personal information from children under 18. If you believe a minor has provided information to us, contact info@kariaa.com.

We may update this Policy from time to time. Material changes may be posted on the platform, sent by email, or communicated through other reasonable means. Continued use of Kariaa after an update means the updated Policy applies to your use going forward.

For privacy, deletion, opt-out, legal, or support requests, contact us at:

Email: info@kariaa.com