Crowtado Privacy Policy

This Policy applies to contributors, applicants, website visitors, support contacts, and other people whose personal information Crowtado handles through the Platform. It does not replace a task-specific notice, consent form, or customer notice. A more specific notice controls for the processing it describes.

Crowtado generally acts as the controller of contributor accounts, Platform operations, fraud prevention, contributor payments, and Crowtado's own analytics and marketing. For a customer-directed project, Crowtado may instead act as a processor or service provider under the customer's instructions. Contact us if you need to know which role applies to a particular task.

We collect personal information directly from you, automatically from your browser or device, from other people included in a submission, and from service providers, customers, referral partners, identity and payment providers, and fraud-prevention partners. The information depends on how you use the Platform and which tasks you choose.

• Account and contact information, including name, email address, telephone number, country, preferred language, profile information, account identifiers, and communications preferences.
• Identity, eligibility, and compliance information, including age and location attestations, identity-document and liveness results when required, sanctions or fraud-screening results, consent records, and account-verification status.
• Payment and tax information, including payout method, tokenized or masked payment details, payout destination, transaction history, tax forms, taxpayer identifiers, withholding information, and payment-provider status. Payment providers may collect information directly from you that Crowtado does not receive in full.
• Submissions and task content, including audio, video, photographs, images, annotations, text responses, uploaded files, recordings, consent materials, and any people, voices, likenesses, places, objects, or other information appearing in that content.
• Submission and device metadata, including capture time, task and session identifiers, duration, file properties, device type, operating system, browser, IP address, network information, coarse or precise location when a task requires it, and technical events associated with an upload or recording.
• Security and fraud information, including device or browser fingerprint identifiers, hashed network signals, similarity or duplicate indicators, confidence scores, abuse reports, account-linkage signals, authentication events, and the evidence used to review a security decision.
• Usage, analytics, and advertising information, including pages and features used, clicks, referral URLs, campaign and advertising identifiers, cookies and similar technologies, session or interaction recordings where enabled, and diagnostic or crash information.
• Derived information, including transcripts, quality scores, authenticity and diversity assessments, review outcomes, estimated or accepted work amounts, fraud-risk indicators, eligibility inferences, and other conclusions produced from account activity or Submissions.

We use personal information to create and secure accounts; present and administer tasks; receive, review, license, and deliver Submissions; verify identity, eligibility, location, and consent; prevent fraud and abuse; provide support; calculate and deliver payments; satisfy tax, accounting, sanctions, and legal obligations; operate and improve the Platform; measure campaigns; communicate with you; establish or defend legal claims; and protect contributors, customers, Crowtado, and the public.

We also use Submissions and related metadata to create, validate, license, and deliver datasets and to train, evaluate, test, benchmark, and improve machine-learning and artificial-intelligence systems when the applicable task terms or consent materials permit those uses.

Where the GDPR, UK GDPR, or a similar law applies, our legal basis depends on the purpose: performance of a contract, compliance with law, consent when consent is required, and our or a third party's legitimate interests in operating, securing, improving, and evaluating the Platform and its services. We do not rely on consent when another legal basis applies. Withdrawing consent does not affect processing that was lawful before withdrawal or processing based on another legal basis.

Crowtado's service includes licensing Submissions and related metadata to enterprise customers, research organizations, AI developers, and other customers for the purposes disclosed in the applicable task terms, consent materials, and contributor agreement. Those transfers may be made for money or other value.

We may separate direct account identifiers from delivered materials and use contributor or recording identifiers instead, but pseudonymized content is not necessarily anonymous. A voice, face, location, background, or other part of a Submission may identify a person. Do not submit content unless every required participant understands the disclosed uses and has provided any required permission.

Customer contracts may restrict re-identification, unlawful use, and redistribution of raw data. Copies already delivered, incorporated into a dataset, used to produce an analysis, or used to train or evaluate a model may not be technically reversible. Any deletion, objection, or revocation right remains subject to applicable law, the task-specific notice, and the limits explained when the request is processed.

We disclose personal information only for the purposes described in this Policy, a task-specific notice, or with your direction. Recipients may include:

• Customers and their authorized service providers that license, evaluate, or receive Submissions and associated metadata.
• Account, hosting, database, storage, content-delivery, security, communications, and support providers, including providers such as Clerk, Cloudflare, Amazon Web Services, and Sentry where configured.
• Payment, payout, tax, and compliance providers, including Dots, Stripe, PayPal, Wise, Venmo, M-Pesa, banks, and local payment partners where available.
• Analytics, attribution, and advertising providers, including PostHog, Google, Meta, Reddit, TikTok, and X where configured.
• Identity, device-intelligence, and fraud-prevention providers, including Fingerprint and identity-verification providers used for a particular country or task.
• AI, transcription, speech, and quality-review providers, which may include OpenAI, Anthropic or Amazon Bedrock, Google Gemini, Deepgram, and ElevenLabs depending on the task and current configuration.
• Professional advisers, auditors, insurers, regulators, courts, law enforcement, tax authorities, and other parties when disclosure is required or reasonably necessary to comply with law, protect rights and safety, investigate misuse, or handle a dispute.
• A buyer, investor, lender, affiliate, or successor in connection with a proposed or completed financing, merger, acquisition, reorganization, or transfer of all or part of our business, subject to appropriate confidentiality protections.

Crowtado does not provide the contents of contributor Submissions, tax information, or payout information to advertising partners for personalized advertising. We do license Submissions and metadata to customers as part of the service described above.

Our advertising and analytics technologies may disclose online identifiers, device information, and Platform interaction data to advertising or analytics partners. Depending on the law and the relationship involved, a customer license or an advertising disclosure may be defined as a "sale," "sharing," or use for targeted advertising even when no money is exchanged for a particular person's information.

Where applicable law gives you an opt-out right, use the "Do Not Sell or Share My Personal Information" page linked from the site footer or email privacy@crowtado.com. We do not knowingly sell or share personal information of people under 16, and the contributor Platform is limited to adults.

The Platform uses cookies, pixels, local storage, software development kits, and similar technologies for authentication, security, preferences, diagnostics, analytics, attribution, and advertising. Some technologies are set by the providers named above and may recognize a browser or device across services.

You can use browser or device controls to delete or block some technologies and can use the privacy-request page for applicable sale, sharing, or targeted-advertising choices. Blocking required technologies may prevent account or recording features from working.

Browser "Do Not Track" signals do not have a uniform legal or technical meaning, and Crowtado does not treat a Do Not Track signal as a separate privacy request. Other legally recognized opt-out preference signals may carry different obligations. You may always communicate an opt-out request through the methods described in Section 12.

Crowtado uses automated systems and service providers to transcribe and analyze Submissions, assess technical and content quality, identify duplicate or synthetic material, detect possible fraud or account misuse, support eligibility checks, prioritize review, and recommend or make approval, rejection, suspension, or payment-related decisions.

Relevant factors may include task criteria, recording quality, duration, consent evidence, similarity to other material, device and network signals, location consistency, account history, and human-review findings. Automated results can be incomplete or wrong. You may contact support to ask for an explanation or reconsideration, and you may request human review where applicable law provides that right.

Crowtado is operated from the United States. We and the recipients described above may process or store personal information in the United States and other countries that may have different privacy laws from your country. Data is not necessarily stored in the country or region where it was collected.

Where applicable law requires a transfer mechanism or additional safeguard for international transfers, we use a legally recognized mechanism appropriate to the transfer, such as an adequacy decision, contractual protections, or another authorized safeguard. Contact privacy@crowtado.com for information about a mechanism relevant to you.

We retain each category of personal information only for as long as reasonably necessary for the purposes described in this Policy, the applicable task terms and consent materials, customer commitments, dispute and fraud-prevention needs, and legal, tax, accounting, audit, and recordkeeping obligations. Retention periods therefore vary by record and country.

• Account and profile records are generally retained while the account is active and afterward for the period needed to handle support, fraud, disputes, legal claims, and required records.
• Submission retention follows the task terms, consent materials, customer agreements, dataset lifecycle, and applicable law. Delivered copies and information incorporated into analyses or trained systems may persist as described in Section 4.
• Payment and tax records are generally retained for five to seven years, or longer when local law, an audit, a dispute, or an enforcement hold requires it.
• Security, analytics, advertising, support, and privacy-request records are retained according to operational need, provider settings, legal requirements, and applicable limitation periods.

When information is no longer required, we delete it, de-identify it, or restrict its use as appropriate. Residual copies may remain temporarily in backups or logs until they are overwritten, unless a legal hold requires longer retention.

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, logging, encryption where appropriate, vendor review, and incident-response procedures. No storage or transmission method is completely secure, so we cannot guarantee absolute security.

Protect your sign-in credentials and notify support@crowtado.com if you believe an account or Submission has been accessed without authorization.

Depending on where you live and how Crowtado handles your information, you may have rights to know or access information, receive a portable copy, correct information, request deletion, restrict or object to processing, withdraw consent, opt out of sale, sharing, targeted advertising, or qualifying profiling, appeal a denied request, and complain to a data-protection authority. These rights are not absolute and may be subject to verification, exemptions, retention duties, and the rights of other people.

Submit a request through the "Do Not Sell or Share My Personal Information" page linked from the site footer or email privacy@crowtado.com. State the right you want to exercise and the country or state where you live. We may request information reasonably necessary to verify identity, authority, and account linkage. Authorized agents must provide evidence of authority where permitted. We respond within the period required by applicable law and do not discriminate against a person for exercising a privacy right.

Residents of the European Economic Area or United Kingdom may also contact their local supervisory authority. California residents may appeal or complain to the California Privacy Protection Agency or Attorney General. Other regulators may offer similar complaint channels.

During the preceding 12 months, Crowtado may have collected the categories described in Section 2 and disclosed them to the recipient categories in Section 5 for the purposes in Section 3. Depending on the applicable definition, disclosures of online identifiers and interaction information to advertising partners, and licenses of Submissions and metadata to customers, may constitute sale or sharing. Section 6 explains how to opt out where that right applies.

Sensitive personal information may include account credentials, precise location for tasks that require it, government or tax identifiers, financial information, communications, and the contents of audio, video, images, or other Submissions. We use sensitive information to perform tasks and payments, verify identity and consent, prevent fraud, provide the service, comply with law, and for purposes disclosed in task-specific materials. If we use sensitive information in a way that creates a statutory right to limit its use, we will provide the required method to exercise that right.

A Submission may contain a person's voice, face, image, likeness, or physical characteristics. Raw audio, video, or photographs are not automatically a biometric identifier under every law. If Crowtado or a provider creates or uses a voiceprint, face-geometry template, or other biometric identifier for identification, Crowtado will provide any separate notice, written release, retention schedule, and destruction policy required before that collection or use.

Some identity-verification providers may perform document, selfie, or liveness checks under their own notices. Task terms and consent materials may provide additional restrictions. Nothing in the general Platform agreement replaces a separate biometric notice or release when applicable law requires one.

The contributor Platform is for people age 18 or older. Crowtado does not knowingly permit a minor to create a contributor account or knowingly sell or share a minor's personal information. Tasks must not include a minor unless Crowtado has expressly authorized the task and all legally required parental or guardian permissions and protections are in place. Contact privacy@crowtado.com if you believe we collected a minor's information contrary to this Policy.

We may update this Policy to reflect changes in law, technology, vendors, or our services. We will change the published and effective dates and provide additional notice when required. Material changes will not retroactively expand a task-specific consent without a lawful basis.

This English version is the controlling version to the extent permitted by law. Any translation is provided for convenience unless it expressly states that it is an approved local version. Mandatory rights under local law continue to apply regardless of this language clause.

Privacy requests and questions: privacy@crowtado.com. Legal notices: legal@crowtado.com. Mailing address: Crowtado, Attn: Privacy, 1395 22nd Street, San Francisco, CA 94107, USA.