Privacy Policy

Kariaa ("Kariaa," "we," "us," or "our") is an AI assistant, job search and messaging tool, marketplace, and data-task program that helps people discover opportunities, build profiles, submit applications, practice interviews, get things done by chatting with an AI, and complete DataHouse tasks for external companies, hosts, employers, clients, and reviewers.

This Privacy Policy explains how we collect, use, disclose, license, sell, retain, and protect information when you use Kariaa websites, applications, message channels, DataHouse workflows, AI-assisted tools, and related services. It is written broadly because the platform handles employment, contractor, applicant, task, media, and AI/ML data.

This Policy is a notice about data practices. It does not make Kariaa your employer, agent, fiduciary, recruiter of record, escrow agent, payroll provider, staffing agency, or guarantor of any opportunity, submission, payment, host, employer, review, task, or outcome. Those limitations are also addressed in our Terms.

• Account and contact information: name, email, username, password credentials, phone number, messaging handle, channel identifiers, profile photo, and communication preferences.
• Identity and verification information: legal name, date of birth, age, citizenship, address, location, work authorization, verification status, and related records you provide or that we infer from your interactions.
• Professional profile information: occupation, skills, interests, education, school or company, work experience, LinkedIn, GitHub, portfolio links, websites, resumes, documents, desired salary, work preferences, availability, and profile summary.
• Opportunity and application information: interest signals, access codes, application notes, desired compensation, availability, comments, interview answers, transcripts, recordings, links, submissions, status, review notes, and employer or host feedback.
• DataHouse and task output: samples and work you submit (text responses, labels, ratings, images, audio, video, documents, files), which may show your face, voice, handwriting, surroundings, and other identifying features, plus your answers to task questions, preferred rate, metadata, timestamps, review results, and earned amount records.
• Message channel information: everything you send to and receive from Kariaa on WhatsApp, Telegram, Discord, Slack, Messenger, Instagram, Reddit, the website, and other channels, including messages in group chats where Kariaa is present, attachments, voice notes and their transcripts, button taps, provider message IDs, delivery metadata, and AI response identifiers.
• AI assistant information: what the assistant saves about you from your messages (profile details, preferences, notes it keeps, a running summary of your conversation), files you send, documents and files it makes for you, searches, reminders, follow-ups, tasks, and the actions it takes for you.
• Connected account information: if you connect an email, calendar, file, spreadsheet, scheduling, accounting, or payments account, the content the assistant reads or writes there when you ask or your settings allow (for example emails, threads, contacts, events, files, and records), and the connection details. Your sign-in and access tokens are held by our integration provider, Composio, not by Kariaa.
• API key information: a fingerprint of each key you create (never the key itself after it is shown to you), its label, and its usage.
• Technical and usage information: IP address, browser, device, operating system, pages viewed, links clicked, session activity, language preference, local storage, cookies, analytics events, logs, diagnostics, and security events.
• Information from third parties: external companies, opportunity hosts, scouts, referrers, messaging providers, email providers, analytics providers, AI providers, cloud infrastructure, storage providers, and other service providers or partners.
• Inferences and derived data: conclusions, predictions, scores, rankings, match scores, fraud-risk scores, trust-and-safety ratings, profile summaries, and other inferences we generate about you from your account data, behavior, messages, submissions, and interactions with the Platform.

We collect information directly from you, automatically from your device and interactions, from message channels and uploaded files, from external companies and opportunity hosts, from admins and scouts, from service providers, from public or user-provided links, and from inferences or outputs generated by platform and AI-assisted tools.

When you provide information about another person or include another person in a file, message, recording, dataset, or submission, you represent that you have the authority and rights needed to provide it to Kariaa and to allow the uses described in this Policy and the Terms.

Some information we collect may be sensitive under privacy laws or may be especially private in an employment context, including government or citizenship details, birth date, address, salary preferences, work authorization, resumes, interview content, voice or video recordings, profile photos, and fraud or trust-and-safety review signals.

We use this information to operate the marketplace, verify users, support applications, route submissions to external companies, evaluate platform trust and safety, improve matching, administer DataHouse tasks, and comply with law and contractual obligations. We may also use and disclose it as described in this Policy, including for AI, analytics, licensing, resale, and commercial product development where permitted by law.

Where a law gives you the right to limit certain uses of sensitive personal information, you may make that request at info@kariaa.com. We may still use sensitive information for services you request, security, fraud prevention, legal compliance, transaction records, quality review, and other uses permitted by law. Limiting sensitive data may make some marketplace, verification, DataHouse, or application features unavailable.

We may collect, generate, and retain fraud-risk signals, trust-and-safety scores, investigation records, abuse flags, chargeback history, duplicate-account indicators, bot-detection results, and related signals. This information may be used to evaluate your account, withhold or approve payments, restrict or terminate access, and share with fraud-prevention services, financial institutions, law enforcement, or hosts and buyers where appropriate.

• Create, secure, verify, support, and administer accounts and profiles.
• Match users with opportunities, show marketplace listings, process access codes, and manage scout or referral workflows.
• Submit applications, DataHouse output, interview responses, files, messages, and related profile data to external hosts, employers, companies, reviewers, scouts, and admins.
• Operate AI-assisted chat, matching, translation, interview, summarization, vetting, fraud-risk, quality review, and productivity tools.
• Evaluate applications, task quality, marketplace integrity, fraud, abuse, security incidents, payment eligibility, and policy compliance.
• Send account, verification, password reset, application, task, status, support, legal, and policy communications.
• Send optional match alerts or opportunity notifications when you ask for them or continue a message conversation with us, subject to your opt-out rights.
• Analyze, improve, train, test, benchmark, commercialize, license, resell, or develop Kariaa products, datasets, models, services, and business relationships.
• Enforce our Terms, preserve evidence, defend legal claims, protect users and partners, respond to legal process, resolve disputes, and comply with applicable law.
• Detect, investigate, and prevent fraud, abuse, spam, bot activity, multiple-account violations, identity misrepresentation, payment manipulation, DataHouse output fraud, and other prohibited conduct.
• Share fraud and abuse signals with hosts, buyers, payment processors, and third-party fraud-prevention services to protect the integrity of the marketplace and its participants.
• Contact you with platform updates, new features, re-engagement messages, and marketing communications where permitted by applicable law and your communication preferences.
• Generate inferences, scores, rankings, and derived data about your suitability for opportunities, task quality, fraud risk, and platform engagement, and use those inferences for matching, review, and commercial purposes.

Kariaa uses AI and automated systems to help with messaging, opportunity search, profile memory, matching, translation, interview prompts, application summaries, requirement fit, fraud-risk indicators, DataHouse workflows, and administrative review. These tools may process personal information, resumes, messages, interview transcripts, task files, and submissions.

To answer you, the content of your messages, files, profile, and connected-account data relevant to a request is sent to our AI model providers, which process it to produce replies and actions and may keep it under their own terms and retention periods. Some requests are answered with third-party tools and data services (plug-ins, job boards, search, translation), which receive what the request needs, such as the question, a city, or an occupation. AI outputs can be wrong; see the Terms.

AI outputs are tools for marketplace operations and review. External companies, hosts, employers, and admins remain responsible for their own hiring, contracting, payment, review, and selection decisions. If a law gives you rights related to automated decision-making or profiling, you may contact us at info@kariaa.com.

AI-assisted processing may affect ranking, matching, review workflows, summaries, fraud-risk indicators, translation, or what opportunities are shown first. These tools are not promises that any applicant, host, submission, or task is accurate, lawful, safe, qualified, or payable. We may rely on automated and human review together where permitted by law.

• External companies and hosts: we may disclose profile, application, submission, interview, resume, message, task, media, and review information to companies, hosts, employers, reviewers, scouts, and admins connected to an opportunity or task. These parties are independent third parties and may act as separate businesses, controllers, or decision-makers for their own hiring, contracting, review, compliance, payment, and data practices.
• Service providers: we use providers for hosting, database, storage, authentication, email, analytics, AI, search, security, messaging, payouts, support, and operational services, including OpenAI (AI models and transcription), Supabase (database and file storage), Microsoft Azure (the assistant's servers), Vercel (website hosting, Analytics, and Speed Insights), Resend (email and newsletter), Meta (WhatsApp, Messenger, and Instagram), Telegram, Discord, Slack, Reddit, Composio (sign-in and access for accounts you connect), Firecrawl and other web and search tools, job boards and job data sources, third-party plug-in tools the assistant calls for a request, and the payout methods you choose (such as PayPal, Venmo, or gift cards). This list may change.
• Commercial partners and customers: we may license, sell, share, transfer, or otherwise commercialize submissions, DataHouse output, media, datasets, messages, profile data, interview materials, annotations, labels, identifiers, inferences, and other information, including information that may identify you, for AI/ML, data, research, hiring, marketplace, analytics, and commercial purposes, subject to applicable law and required opt-out rights.
• DataHouse hosts, clients, and buyers: when you submit DataHouse samples or work, your submitted materials, associated metadata, profile identifiers, verification status, and task history may be shared with or transferred to hosts, clients, employers, reviewers, partners, and prospective clients and buyers, to evaluate your fit for this or other work, as examples and demonstrations, for AI and robotics training and evaluation, and for the other purposes in the Terms. These parties may independently retain, use, and commercialize your submissions according to the task agreement and their own policies. Kariaa is not responsible for the downstream use of approved DataHouse output.
• Legal, safety, and compliance: we may disclose information to comply with law, subpoenas, legal process, tax or payment obligations, fraud investigations, platform security, dispute resolution, and enforcement of our agreements.
• Fraud prevention and trust services: we may share account identifiers, fraud signals, abuse flags, device information, and related data with third-party fraud-prevention, identity-verification, and trust-and-safety services to protect the Platform and its users.
• Business transactions: information may be disclosed or transferred in connection with financing, diligence, merger, acquisition, reorganization, sale of assets, bankruptcy, or similar transactions.
• Aggregated or de-identified information: we may use and disclose information that is aggregated, de-identified, or otherwise not reasonably linked to you without restriction, unless applicable law says otherwise.

We are not responsible for the privacy, security, legal compliance, hiring practices, payment practices, or other actions of external companies, hosts, employers, customers, scouts, reviewers, admins, or other third parties once information is disclosed to them as permitted by this Policy, the Terms, or your instructions.

We use cookies, local storage, session storage, and similar technologies for authentication, language preferences, access code handling, referrals, navigation, security, analytics, and product improvement, including a first-visit attribution cookie kept for about 90 days. We use Vercel Analytics and Vercel Speed Insights and may use similar tools to understand page views, traffic, performance, and usage patterns.

You can adjust browser settings to limit cookies or clear local storage, but some platform features may not work properly without them.

Our Platform does not currently respond to browser Do Not Track (DNT) signals. We treat all users consistently regardless of DNT settings. If a legally recognized opt-out mechanism applies in your jurisdiction, you may exercise it as described in Section 12 (California Notice and Privacy Choices) or by contacting info@kariaa.com.

If you message Kariaa on WhatsApp, Telegram, Discord, Slack, Messenger, Instagram, the website, or a similar channel, you authorize us to respond on that channel, process the contents and attachments, store the conversation, and use it to operate your profile, applications, tasks, reminders, and match alerts. In a group chat, what you post to Kariaa and its replies are visible to the group, and the group's conversation with Kariaa is stored like any other. Message and data rates may apply depending on your provider.

You can ask us to stop optional alerts or change notification preferences at any time. For text-style channels, reply STOP, UNSUBSCRIBE, or a similar opt-out request, or contact info@kariaa.com. We may still send transactional, security, application, legal, or account-related messages where permitted.

Message and conversation records may be retained indefinitely for the purposes described in this Policy. You may request deletion by emailing info@kariaa.com, subject to the limitations described in Section 10 (Retention).

Opportunity listings surfaced through the Platform are provided by external companies, job boards, and hosts. When you apply to or are matched with an opportunity, your information may be shared with those third parties as described in Section 7. Kariaa is not responsible for how those parties handle your data after it is shared.

Messages and attachments you send may be used to train, evaluate, and improve AI and machine-learning systems, as described in this Policy and the Terms.

We retain information for as long as needed for the purposes described in this Policy, including marketplace operations, DataHouse review, payments, tax and accounting records, fraud prevention, security, disputes, legal compliance, backups, analytics, AI/ML development, licensing, and business records.

You can delete your account yourself at any time on the web (Profile → Preferences), or as described at kariaa.com/account-deletion. If you only use Kariaa in chat, email info@kariaa.com from or naming the phone number or account you chat with. Deleting an account disconnects connected accounts, deletes your stored files (resumes, photos, files sent in chat, and sample files), your chat profile, and your conversations from our active systems, and de-identifies application and DataHouse records that employers, hosts, or our own records still need. To leave the newsletter, use its unsubscribe link or ask us.

If you request deletion, we may delete or de-identify account, profile, contact, and certain personal information where required by law. We may retain submissions, DataHouse outputs, interview materials, messages, audit logs, anti-fraud records, payment records, backups, and data already licensed, sold, transferred, used in AI/ML systems, or needed for legal or legitimate business purposes.

Deletion or account closure does not revoke the licenses granted in the Terms, undo past disclosures, require us to retrieve data already shared with third parties, or require removal of information from backups, audit trails, fraud systems, model artifacts, aggregate datasets, or de-identified materials where retention is permitted by law.

Your profile, verification status, and application history may be visible to scouts and referrers connected to the Platform even if you have not explicitly applied to a specific opportunity they are associated with, as part of the Platform's talent discovery and referral features.

If you delete your account, we may retain your email address and contact information to prevent re-registration under prohibited circumstances, comply with legal obligations, or send legally permitted communications. We will not use retained contact information to re-engage you for marketing purposes unless applicable law permits and you have not opted out.

• We collect and use behavioral signals, device data, submission metadata, message patterns, account history, and third-party fraud-risk data to detect and prevent fraud, abuse, manipulation, fake identity, spam, bot activity, duplicate accounts, payment fraud, and DataHouse output fraud.
• If we detect or reasonably suspect prohibited conduct, we may take immediate action including account suspension, payment holds, payment forfeiture, content removal, access restrictions, account termination, and referral to law enforcement or other authorities.
• We may retain fraud and abuse records, investigation notes, device fingerprints, and related data indefinitely for fraud prevention, legal compliance, and protection of the Platform and its participants, even after account deletion.
• We may share fraud signals, abuse flags, and investigation findings with hosts, buyers, payment processors, financial institutions, and law enforcement where we believe it is necessary to protect the Platform, prevent harm, or comply with law.
• We will not disclose details of fraud investigations to users except as required by law or our own policies.

If California privacy law applies to Kariaa, this section is our Notice at Collection and privacy choices notice. We may collect the categories described above, including identifiers, contact details, professional or employment information, education information, commercial information, internet or network activity, approximate location, audio/visual/sensory information, inferences, account credentials, message contents, citizenship/work authorization details, and other sensitive personal information.

We collect, use, retain, disclose, sell, share, and license these categories for the business and commercial purposes described in this Policy and the Terms. Categories that may be sold, shared, licensed, or otherwise commercially disclosed include identifiers, profile data, professional data, application data, messages, resumes, interviews, submissions, DataHouse output, media, metadata, inferences, and sensitive information where permitted.

To opt out of sale or sharing, request deletion, request correction, request access, limit sensitive personal information where available, or use an authorized agent, contact info@kariaa.com with "Privacy Choices" in the subject line. If your browser or device sends a legally valid opt-out preference signal and the law requires us to honor it, we will process it as required for that browser or device.

Opt-outs and deletion requests do not apply to every disclosure or use. They do not prevent disclosures to service providers, contractors, external companies or hosts needed for services you request, legal or security uses, previously completed transactions, information already disclosed or licensed where reversal is not required by law, or aggregated, de-identified, or non-personal information.

Where GDPR-style laws apply, we may process personal data based on one or more legal bases, including performance of a contract, steps taken at your request before a contract, legitimate interests, consent, legal obligations, establishment or defense of legal claims, and substantial public-interest or employment-related grounds where applicable. Our legitimate interests include operating and improving the marketplace, routing applications, preventing fraud, securing the Platform, developing data and AI/ML products, commercializing licensed data, communicating with users, and enforcing our rights.

Where we rely on consent, you may withdraw it as required by law, but withdrawal does not affect processing that occurred before withdrawal or processing based on other legal grounds. Where we rely on legitimate interests, you may object as required by law, and we may continue processing where we have compelling legitimate grounds or need the information for legal claims.

Depending on where you live, you may have rights to access, correct, delete, port, restrict, object to, or opt out of certain processing, sale, sharing, targeted advertising, or automated decision-making. These rights may be limited by law, fraud prevention, legal obligations, marketplace records, active contracts, completed transactions, or data that is no longer reasonably linkable to you.

California residents may request access, correction, deletion, and opt out of sale or sharing of personal information where the CCPA/CPRA applies. EU, UK, and similar-region users may have GDPR-style rights and may object to certain processing or request human review where automated decision-making rights apply.

To make a request, contact info@kariaa.com with enough information for us to verify and process it. We will not discriminate against you for exercising privacy rights, but some features may require data that you ask us not to process.

We may deny or limit requests when permitted by law, including where we cannot verify you, where the request conflicts with legal obligations, security, fraud prevention, free-expression rights, contractual rights, intellectual property rights, completed transactions, business records, or the rights and freedoms of others.

We use administrative, technical, and organizational safeguards that we consider reasonable for the nature of the Platform. These may include access controls, private storage for certain media, signed URLs for some files, rate limits, security headers, and service-role restrictions. No system is perfectly secure, and we do not guarantee that information will never be accessed, disclosed, altered, lost, or destroyed.

We and our providers may process information in the United States and other countries. Privacy laws in those places may differ from those in your location. Where legally required, we use appropriate transfer mechanisms or rely on permitted exceptions.

Kariaa is intended for users who are at least 18 years old. We do not knowingly collect personal information from children under 18. If you believe a minor has provided information to us, contact info@kariaa.com.

We may update this Policy from time to time. Material changes may be posted on the platform, sent by email, or communicated through other reasonable means. Continued use of Kariaa after an update means the updated Policy applies to your use going forward.

For privacy, deletion, opt-out, legal, or support requests, contact us at:

Email: info@kariaa.com