Privacy notice

ManyTek International LLC, Virginia, USA. This notice describes what the live platform processes and how you exercise access, deletion, correction, or restriction. It is not a counsel signature pack; additional contracts may apply.

Who processes data

ManyTek International LLC is the operator of Workforce Cloud. Questions: privacy@manytekintl.com. Where an institution (tenant) uses the platform for its own workforce programmes, that institution may also be a controller of records it submits or reviews.

What we process

Account identity (name, email, role, tenant), authentication events, Passport and identity-link records, evidence submissions and review decisions, verified capability assertions, opportunity applications, consent grants, marketplace enrollment requests, onboarding applications, invitations, community posts, and optional AI prompts/responses used for advisory analysis.

We do not sell personal data. We do not operate an unrestricted employer talent search over Passports.

Why we process it

To provide the service you signed up for: identity, evidence, capability, matching with consent, institutional operations, security, and auditability. Legal bases, where GDPR or similar law applies, include contract, legitimate interests in a secure governed platform, and consent for purpose-scoped employer visibility.

Sharing and access control

Row-level security scopes reads to tenant and role. Employers see capability labels only through an application you submitted or a consent grant you created. Infrastructure processors include Supabase (database/auth), Vercel (app hosting), Resend (transactional email), and Anthropic/Voyage when you use Sophia. Card processors are not used while Stripe commerce is off.

Retention and deletion

Workforce truth is append-only by design. A deletion request does not silently wipe Passports or evidence. You file a request in Settings → Data rights. Staff review it. Completion is recorded on the request; any erasure or restriction is a governed action, not an automatic purge.

Your rights

Depending on applicable law you may request access/export, deletion, correction, or restriction. Use the in-app Data rights desk (signed in) or email privacy@manytekintl.com. You may also revoke consent grants at any time from Consents.

Security

Access is authenticated. Privileged roles can enroll MFA. Secrets are not placed in the browser. Audit of material actions is recorded in the operational feed. A live Django event ledger remains on a separate Founder cutover and is not required for these notices to apply.

Signed-in users file requests at Data rights. Questions: privacy@manytekintl.com