Privacy Policy & Data Protection Notice

YouHire, LLC ("YouHire", "we", "us", or "our") is committed to protecting your privacy and upholding institutional data security. This Privacy Policy explains how we collect, store, process, and safeguard your personal information when you use our marketplace, escrow infrastructure, and communication tools. Our Core Commitments: 1. Zero Data Brokering: We never sell, rent, lease, or trade personal data, contact information, or behavioral histories to third-party data brokers or advertisers. 2. Deliverable Confidentiality: Source code, production designs, raw architectural diagrams, and project communications remain strictly confidential between the Buyer and Seller. 3. Cryptographic Storage: All sensitive records, payment credentials, and escrow logs are encrypted using TLS 1.3 in transit and AES-256 at rest. 4. Regulatory Alignment: We maintain strict operational compliance with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended (CCPA/CPRA), and international privacy frameworks.

We collect only the information strictly necessary to provide marketplace services, facilitate escrow settlements, prevent fraud, and comply with legal requirements: 1. Identity & Account Credentials: Legal name, username, verified email address, hashed password, professional portfolio links, and biographical details. 2. Verification & Compliance Data (KYC): Government-issued identification, tax identification (W-9 / W-8BEN), corporate entity registration documents, and proof of address when required by anti-money laundering regulations. 3. Financial & Escrow Records: Payout destination details (ACH routing/account numbers, IBAN, SWIFT, PayPal identifiers), transaction histories, escrow milestone funding records, and fee ledgers. (Note: Credit card numbers are handled via PCI-DSS Level 1 tokenized vaults; YouHire never stores raw card details). 4. Communications & Project Artifacts: Order requirements, milestone deliverable files, chat messages, screen captures, code repositories, and dispute filings exchanged on the Platform. 5. Technical Telemetry: IP address, device fingerprints, operating system, browser type, session access timestamps, and security anomaly logs.

We process your data under legitimate legal bases recognized by global data protection laws: 1. Contractual Performance (Art. 6(1)(b) GDPR): To execute bilateral service agreements between Buyers and Sellers, fund and release escrow milestones, authenticate logins, and transmit notifications. 2. Legal & Regulatory Compliance (Art. 6(1)(c) GDPR): To prevent financial crime, combat fraud, satisfy statutory tax reporting, verify contractor eligibility, and enforce anti-money laundering (AML) controls. 3. Legitimate Interests (Art. 6(1)(f) GDPR): To harden infrastructure security, detect malicious bots, enforce community ethical standards, resolve bilateral disputes, and improve platform performance. 4. Consent (Art. 6(1)(a) GDPR): When you explicitly opt-in to optional marketing alerts or promotional broadcasts.

We share personal information strictly on a need-to-know basis with vetted enterprise subprocessors bound by comprehensive Data Processing Agreements (DPAs): 1. Counterparty Disclosure: When an order is confirmed, your public profile (username, badge level, review history, and portfolio) is visible to your counterparty. Private email and financial details remain masked. 2. Payment Infrastructure & Banking Partners: Stripe, Plaid, and FDIC-insured custodial banking partners to process ACH, SEPA, card payments, and escrow custody. 3. Cloud Hosting & Security Infrastructure: Enterprise cloud providers (Google Cloud Platform / Cloud Run, Cloudflare) with automated DDoS mitigation, web application firewalls, and ISO 27001 certifications. 4. Legal & Regulatory Mandates: We disclose data to law enforcement or courts only when required by valid subpoena, court order, or binding statutory mandate.

Regardless of your physical location, YouHire extends global privacy rights to all registered users: 1. Right to Access & Portability: You may request a machine-readable export (JSON/CSV) of all personal information and transaction logs associated with your account. 2. Right to Rectification: You may update or correct inaccurate profile details directly via your Settings dashboard or by contacting Support. 3. Right to Erasure ("Right to be Forgotten"): You may request complete account deletion. We will purge personal identifiers and profile data within 30 days, retaining only records required by statutory tax and financial audit obligations. 4. Right to Restrict or Object to Processing: You may restrict certain processing activities, including automated algorithmic profiling or promotional communications. 5. Non-Discrimination: We will never deny services, charge different prices, or degrade service quality because you exercised your statutory privacy rights.

We retain data only as long as necessary to fulfill the purposes for which it was collected: 1. Active Accounts: Profile and project histories remain accessible while your account is in good standing. 2. Financial & Escrow Records: Retained for seven (7) years following transaction closure to comply with federal tax laws, AML statutes, and banking regulations. 3. Dispute & Moderation Logs: Retained for three (3) years to enforce the platform 3-Strike Disciplinary System and protect users against fraudulent repeat offenders. 4. Ephemeral Logs & Transient Artifacts: Security audit logs, IP telemetry, and session cookies are purged on a rolling 90-day cycle.

YouHire operates secure infrastructure in the United States and globally distributed edge points. If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, your data is transferred internationally under Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by technical safeguards including end-to-end encryption and strict data minimization.

If you have questions regarding this Privacy Policy, wish to submit a data subject access request (DSAR), or want to contact our Data Protection Officer: YouHire Data Protection & Privacy Office Email: privacy@youhire.io • dpo@youhire.io Physical Address: 100 Enterprise Way, Suite 400, Wilmington, DE 19801, USA Response SLA: All verified privacy requests are acknowledged within 24 hours and completed within statutory timeframes (30 days maximum).