Platform privacy notice
Platform draft · prepared September 2026. These new platform documents require review before commercial launch.
ITWARP LLC, based in Delaware, United States, operates ITWarp. This notice explains the data used by the new platform and supplements the company’s existing privacy policy.
1. Information you provide
Account details, company information, professional profiles, CVs, skills, self-reported English level, availability, consent, messages, agreements, signatures, work records, agreed PTO dates and hours, and billing references support the services you choose. The private payout form collects the holder identity, required bank and address details, or a crypto receiving address and network, or digital wallet provider and receiving identifier, along with currency and instructions. Avoid unnecessary sensitive information in profiles and CVs. Never submit passwords, private keys or recovery phrases.
2. How information is used
Information is used to operate accounts, connect professionals with relevant opportunities, coordinate engagements, maintain work and billing records, respond to inquiries, prevent abuse, and meet applicable obligations. The appropriate legal basis depends on the purpose and jurisdiction, including agreement performance, consent, legal obligations, or legitimate interests where applicable.
3. Visibility and sharing
Professionals choose whether their professional profile is discoverable and consent separately to each opportunity. Payout details are encrypted separately, available only to the professional and authorized ITWarp administrators, and excluded from employer views and AI processing. Access and changes are logged without full receiving details; encrypted previous versions support payment records and applicable retention. Service providers may process data only as configured and required for the service; maintain the provider list before production launch.
4. AI and your data
The configured Ollama model processes the brief submitted to an assistant. Emails and common number patterns are redacted, but automatic redaction cannot guarantee removal of all personal information. CV files and banking documents are not automatically sent to the model. Outputs are recorded with the model and prompt version and require human review. There is no automated final hiring decision.
5. Storage and security
The platform uses authenticated sessions, hashed passwords, scoped access, private file storage, and audit records. MFA secrets are encrypted. Infrastructure encryption, backup protection, retention schedules, and data location are operational settings to be defined for the production VPS. No system can guarantee absolute security.
6. Cookies and communication
Essential cookies keep you signed in and remember interface preferences. This implementation does not install advertising or analytics trackers. Account verification, password recovery, invitations, hiring updates, claim and approval reminders, invoices, payment reminders, overdue alerts and receipts are sent through the configured email provider. Contact inquiries are stored in the private backoffice inbox.
7. Your choices and rights
You can update your profile and visibility. Use support or the contact form to request access, correction, export, deletion, or a review of processing, subject to applicable law and required record retention. Contractual, financial, dispute, and audit records may need to be retained. Rights requests must be verified before disclosure or deletion.
8. Optional LinkedIn and bank connections
If you connect LinkedIn, we receive the basic account information you authorize. Importing your own archive requires review and confirmation; only professional profile files are read, and the original archive is not retained. Authorized ITWarp administrators may connect the receiving bank account through Plaid to read selected account information and transactions for reconciliation. Access tokens are encrypted. LinkedIn and Plaid apply their own terms and privacy policies. You can disconnect these connections; required financial and audit records remain subject to retention rules. Bank transaction feeds are not automatically sent to the AI model.
9. Contact and existing policy
For privacy questions, use the privacy option in our contact form or contact legal@itwarp.com, the address published in ITWarp’s existing privacy policy. The published policy includes jurisdiction-specific information and was last marked updated February 8, 2024. Review that policy alongside this platform notice.
10. Onboarding evidence and external approvers
Automatic company onboarding stores domain, mail-record and public website evidence, check times and retry status. Private professional onboarding reports distinguish declared information from email confirmation. The configured model may summarize supplied public website text and declared profile fields; PDF attachment metadata does not imply extraction of its contents. Designated approval contacts receive limited financial summaries by secure invitation. Their email, confirmed name, consent, decision, timestamp, summary hash and any comments are retained in the financial history, even without a platform account. Tokens expire and are invalidated after use or replacement.
11. Operational mailbox
ITWarp uses its authorized Google Workspace mailbox to send account messages, invoices and reminders, and to receive service inquiries. Incoming sender, subject, date and plain-text content are retained privately for authorized ITWarp administrators, with internal and grouped email alerts. The locally hosted AI model may summarize correspondence to assist those administrators; it does not train on mailbox data, reply, confirm a payment or change receiving details. Attachments and remote tracking images are not imported automatically. Google access is limited to sending and read-only mailbox access, with the offline credential encrypted; authorization can be revoked through the Google account. Google API data is used only for these user-facing operational features, in accordance with the Google API Services User Data Policy, including Limited Use requirements.