DRAFT - NOT LEGAL ADVICE - requires lawyer review before launch. BORRADOR - NO ES ASESORÍA LEGAL - requiere revisión de un abogado antes del lanzamiento. Version / Versión: 2026-10-16-draft. Placeholders in [BRACKETS] and items marked [[OPEN]] are undecided.

ConnectorIQ Privacy Policy

Effective date: [EFFECTIVE DATE]

English version first. Versión en español abajo.

This Privacy Policy explains how [LEGAL ENTITY] ("ConnectorIQ," "we," "us") handles personal information about developers who apply through ConnectorIQ and clients who use ConnectorIQ to hire them.

1. Who we are

ConnectorIQ is a matchmaking platform that introduces software developers to clients in the United States. Questions about privacy: hello@connectoriq.com. Mailing address: [MAILING ADDRESS].

2. What we collect

From developers:

• Profile: name, surname, email, phone, location, skills, experience, rate band, availability, and links you provide (such as GitHub or LinkedIn).
• Résumé.
• Assessment answers.
• Video and transcript: a recorded video of you and a text transcript of it.
• ID verification: handled by Stripe Identity. Stripe collects your ID document and a selfie and tells us the result. [[OPEN]] Confirm exactly which Stripe Identity fields ConnectorIQ stores.
• Scores: scores and notes produced from your assessment and video, including AI-assisted scores.
• Platform activity: availability confirmations, interview scheduling, and messages sent through the platform.

From clients:

• Account information: name, company, email, and the hiring needs you describe.
• Payment information: processed by Stripe. We do not store full card numbers.
• Platform activity: which profiles we showed you (our send ledger), interviews, hires, and start dates.

From everyone: technical data such as IP address, device and browser information, and error logs.

3. How we use it

• To review developer applications and verify identity.
• To score assessments and videos, including with AI (Claude, by Anthropic). A person at ConnectorIQ reviews results before a developer is approved. [[OPEN]] Confirm human review is part of the process.
• To match developers with clients and show developer profiles, videos, and scores to prospective clients.
• To schedule interviews and unlock contact details after a client pays.
• To process client payments and handle disputes, including chargebacks.
• To enforce our agreements, including non-circumvention, using our send ledger.
• To send service emails, such as weekly availability checks.
• To keep the platform secure and fix errors.
• To meet legal obligations.

4. What clients see

Before a client pays, a client can see a developer's first name, profile, skills, video, transcript, and scores. Before payment, clients do not see the developer's surname, email, phone, current employer, or GitHub or LinkedIn links. After a client pays the placement fee for a developer, that developer's contact details are unlocked for that client. [[OPEN]] Confirm exactly which fields are shown before payment.

5. Service providers (processors)

We use these companies to run ConnectorIQ. They process personal information on our behalf.

Provider	Purpose
Supabase	Database, authentication, file storage
Vercel	Website and application hosting
Mux	Video upload, storage, and playback
Stripe	Client payments and developer ID verification (Stripe Identity)
Resend	Sending email
Anthropic	AI scoring of assessments and videos (Claude)
Sentry	Error monitoring
Google Workspace	Company email and documents

[[OPEN]] Confirm data processing agreements with each provider and their data locations.

We do not sell personal information. [[OPEN]] Confirm this statement and whether any use counts as "sharing" for targeted advertising under US state law.

6. Cross-border transfer (Dominican Republic to the United States)

Many developers live in the Dominican Republic. Our clients and most of our service providers are in the United States. When you apply as a developer, your information is transferred to and stored in the United States, and shown to prospective clients there. We ask for your consent to this transfer before you record your video. You may withdraw consent as described in Section 9.

7. Dominican Republic Law 172-13

If you are in the Dominican Republic, Law 172-13 on the comprehensive protection of personal data applies. We process your data based on your consent and to provide the service you asked for. You have the rights to access, correct, delete, and object to the processing of your personal data, and other rights under that law. [[OPEN]] Lawyer to confirm the legal bases, any registration duties, and the cross-border transfer requirements under Law 172-13.

8. US state privacy laws

Several US states give residents privacy rights. Depending on where you live, you may have the right to know what personal information we have about you, to get a copy, to correct it, to delete it, and to opt out of the sale or sharing of personal information or certain profiling. We will not treat you differently for using these rights. [[OPEN]] Lawyer to confirm which state laws apply based on ConnectorIQ's size and activities.

9. Your rights and how to use them

Email hello@connectoriq.com to:

• see or get a copy of your data;
• correct it;
• delete it or close your account;
• object to or limit how we use it;
• withdraw consent for video recording, AI scoring, or sharing with clients.

We will verify your identity before acting on a request and reply within [NUMBER] days. If you withdraw consent, we will stop showing your video and scores to new clients. Clients who already received your information before you withdrew may still have it. [[OPEN]] Confirm response time and withdrawal process.

10. How long we keep data

[[OPEN]] Retention periods are undecided. Proposed placeholders:

• Developer profile, video, transcript, and scores: while the profile is active, plus [PERIOD].
• Rejected applications: [PERIOD] (at least 90 days, to apply the reapply rule).
• Stripe Identity results: [PERIOD].
• Send ledger: [PERIOD]. It is append-only and is kept at least 12 months after the last send, to support the non-circumvention clause.
• Client payment and dispute records: [PERIOD], as required for tax and accounting.

11. Security

We use access controls, encryption in transit, and row-level security on our database. No system is perfectly secure. If a breach affects your data, we will notify you as the law requires.

12. Children

ConnectorIQ is not for anyone under 18.

13. Changes

We will post changes here and tell you about material changes by email.

14. Contact

[LEGAL ENTITY] [MAILING ADDRESS] hello@connectoriq.com