Privacy notice

This notice explains what personal information Canonset, Inc. ("Canonset", "we") collects through canonset.com and our platform, why, who we share it with, and the choices you have. It covers visitors to our site, people who apply to work with us and the experts we engage ("experts"), people at companies that use our services ("client users"), and people who ask us about a pilot. Questions: privacy@canonset.com, or Canonset, Inc., 10239 Northeast 26th Street, Bellevue, WA 98004.

In short: we collect what we need to vet experts, run projects, pay people and keep the platform secure. We don't sell personal information, we don't use it for advertising, and we don't use your personal information to train AI models. Our site uses no analytics or tracking cookies. A person, not an algorithm, makes every decision about an application or an account.

What we collect

Account. Your name, your email address, and how you sign in (we store sign-in codes only in hashed form; passkeys and authenticator apps leave us public keys or encrypted secrets, never passwords, because we have none).

If you apply as an expert:

• The confirmations you give at sign-up (that you live and will work in the United States, and that you accept our original-work policy).
• Your profile: headline, years of experience, fields, skills, US state, hours per week, LinkedIn address and expected rate.
• Your screening-test answers and score, your paid trial work, and our reviewers' assessments.
• Identity check: with your separate written consent, you photograph both sides of your US driver's license or state ID, and your camera takes three pictures of your face as you turn your head. Our own software, on our servers, reads the ID's barcode and the printed words on its front, and compares your face with the ID's photo; when it can't settle the check, a person on our team looks at the pictures. The face measurements are never stored, and the pictures are deleted once the check is decided (within 7 days at most). We keep the date, the result, how it was checked, the name on the ID, its type, state and expiry date, whether you're 18 or over, the check's scores, what the front showed of the barcode's details, and a one-way code made from the ID's number that stops one ID being used for two accounts; never the number itself, your date of birth or your address. Our biometric data policy (canonset.com/policies/biometric-data) has the details, and Washington residents our consumer health data privacy policy (canonset.com/policies/washington-health-data). You can verify on a short video call instead: you show a government ID and a person on our team compares it with you and your profile, with nothing recorded and no face matching; we keep the date, who checked, the type of ID, the name on it and the result.
• Interview, if we offer one: an AI interviewer asks questions by voice or in writing. We keep a written transcript, never audio. You can choose a typed interview or a call with a person instead.
• Background check, only for projects whose clients require one: run by a consumer reporting agency after a separate disclosure and your written authorization.
• Conflict-of-interest and eligibility statements you give when you join a project.

When you work on projects: your answers and other work; the time you spend on each task, measured on the platform; review decisions, scores and notes; your quality score; and signals about the work itself, such as how much text was pasted rather than typed, similarity to other answers, and patterns typical of AI writing. We don't record your screen, keystrokes, camera, microphone or location.

Payments. What you've earned and been paid. To pay you, our payment provider (Stripe) collects your identity, bank details and tax information (such as your taxpayer ID for Form 1099) directly; we see the account's status, not your bank or tax numbers.

Referrals. Who referred whom, and the referral link you followed.

People we write to about work. If we contact you about working with us because of something you posted publicly (for example a profile or an open-source project), we keep your name, the public link, the date and why we wrote, and the emails we exchange. If you don't apply, we delete this after 1 year, or sooner if you ask; any reply asking us to stop ends our messages.

Client users and pilot requests. Your name, work email, company and role; messages you send us; and, for client users, the projects, files and settings your company manages on the platform. Files your company uploads are your company's data, handled under its contract with us.

From your device. Your IP address, browser and device type, the pages and actions you request, and errors your browser reports, kept in our server logs to run and protect the service (for example, to limit repeated sign-in attempts).

Cookies. Only cookies the service needs: a session cookie that keeps you signed in, cookies that remember a step of signing in, and a referral cookie that lasts 30 days when you follow a referral link. No analytics, advertising or tracking cookies.

How we use it

• To run the platform: accounts, sign-in, projects, reviews, exports and support.
• To decide applications and match experts to projects: test scores, trial work, interviews and, where required, background checks.
• To verify identities and prevent fraud before paid work, as the AI labs we work with require. Automated checks and, where enabled, AI tools help our reviewers, but a person decides every application, removal and pay question.
• To keep quality high and enforce our original-work policy.
• To pay experts, issue tax forms and keep financial records.
• To keep the service secure and prevent fraud, including restricted-party screening.
• To send you emails about your account, applications, work and payments. You can switch off emails about new work.
• To meet legal obligations and to establish or defend legal claims.

We don't use your personal information to train AI models. Work that experts create for clients is delivered to those clients, who may use it to train or evaluate AI models: that is the purpose of the work. Clients receive it under a per-project pseudonym, not your name, unless a client's security terms require named staffing, which we tell you before you join that project.

Who we share it with

We share personal information only as needed, with:

We may also share information when the law requires it, to protect people's safety or our rights, or as part of a merger or sale of our business (the buyer would keep this notice's commitments). We don't sell personal information or share it for cross-context behavioral advertising.

How long we keep it

• Applicants we don't engage: up to 2 years after your last activity, so we can consider you again, then deleted.
• Experts: while your account is open and up to 2 years after your last activity. Payment and tax records: 7 years, as tax law requires.
• Interview transcripts: up to 1 year after the decision on your application.
• Identity check pictures: deleted once the check is decided, and within 7 days at most; the face measurements made from them are never stored.
• Client project data, including experts' answers: until 30 days after the project ends, or 7 days after the client asks us to delete it, unless the client's contract says otherwise.
• Logs of emails we send: 90 days. Security audit logs: at least 1 year. Backups: 7 days.

Your choices and rights

You can see and correct most of your information on the platform. You can also ask us, at privacy@canonset.com, to give you a copy of your personal information, correct it, delete it, or stop a particular use of it. We answer within 30 days. We may need to confirm your identity first, and we may keep what the law requires us to keep (such as tax records). Someone you authorize may ask on your behalf. If we decline a request, you may ask us to reconsider by replying to our answer. We honor these requests for everyone, whichever US state you live in, and we won't treat you differently for making one.

Security

Data is stored in the United States on Amazon Web Services and encrypted in transit and at rest. Access is limited by role, and staff actions are recorded in an audit log. Details: canonset.com/security.

Children

Our service is not for anyone under 18, and we don't knowingly collect their information.

Changes

If we change this notice in a way that matters, we'll tell you by email or on the site before the change applies.

Questions or requests: privacy@canonset.com.