Privacy Policy

1. Scope and Application

This Privacy Policy applies to all users of the Engage platform, including:

• Customers: Organizations using Engage to manage their workforce
• Workers: Contractors and employees managed through the platform
• Visitors: Individuals browsing our website and marketing materials
• Partners: Third-party service providers and integration partners

2. Information We Collect

2.1 Information You Provide Directly

2.2 Information Collected Automatically

2.3 Information from Third Parties

• Background check providers (with your consent)
• Identity verification services
• Payment processors and financial institutions
• Integration partners (HRIS, ATS, accounting systems)
• Social media platforms (when you connect accounts)
• Analytics and marketing partners

3. How We Use Your Information

3.1 Service Delivery

• Create and manage user accounts
• Process workforce onboarding and offboarding
• Facilitate compliance checks and classification
• Process payments and manage payroll
• Generate reports and analytics
• Provide customer support and respond to inquiries

3.2 Legal and Compliance

• Comply with employment and tax laws
• Prevent fraud and ensure platform security
• Respond to legal requests and court orders
• Enforce our terms of service and policies
• Protect rights, property, and safety

3.3 Platform Improvement

• Analyze usage patterns and user behavior
• Develop new features and services
• Conduct research and development
• Improve AI models and automation
• Optimize platform performance and reliability

3.4 Communications

• Send transactional emails and notifications
• Provide product updates and announcements
• Share educational content and best practices
• Send marketing communications (with consent)
• Conduct surveys and gather feedback

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contract Performance: To fulfill our contractual obligations to you
• Legal Obligations: To comply with applicable laws and regulations
• Legitimate Interests: To operate, improve, and secure our platform
• Consent: Where you have provided explicit consent for specific processing
• Vital Interests: In rare cases, to protect someone's life or physical safety

5. Data Sharing and Disclosure

5.1 Service Providers

We share data with carefully selected service providers who assist us in:

• Cloud hosting and data storage (AWS, Google Cloud)
• Payment processing (Stripe, ACH processors)
• Identity verification and background checks
• Customer support and communication tools
• Analytics and monitoring services
• Security and fraud prevention

5.2 Employer of Record (EOR) Partners

When you use our EOR services, we share necessary information with our certified partners to facilitate legal employment, payroll processing, and benefits administration in specific jurisdictions.

5.3 Legal Disclosures

We may disclose information when required to:

• Comply with subpoenas, court orders, or legal processes
• Respond to government or regulatory requests
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our agreements and policies

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity. We will notify you of such changes and any choices you may have regarding your information.

6. International Data Transfers

As a global platform, we may transfer your data across international borders. We ensure appropriate safeguards are in place for such transfers:

• Standard Contractual Clauses approved by regulatory authorities
• Adequacy decisions where applicable
• Privacy Shield frameworks (where valid)
• Binding Corporate Rules for intra-group transfers
• Your explicit consent for specific transfers

7. Data Security

We implement comprehensive security measures to protect your information:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Multi-factor authentication and access controls
• Regular security audits and penetration testing
• SOC 2 Type II compliance
• Employee training and confidentiality agreements
• Incident response and breach notification procedures
• Regular backups and disaster recovery plans

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying you of any breaches that may affect your personal data.

8. Data Retention

We retain personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal and regulatory obligations (typically 7 years for financial records)
• Resolve disputes and enforce agreements
• Maintain business records and analytics
• Fulfill any other legitimate business purpose

When retention is no longer necessary, we securely delete or anonymize your data using industry-standard methods.

9. Your Privacy Rights

Depending on your location, you may have the following rights:

To exercise these rights, contact us at hello@engageapp.ai. We will respond to your request within 30 days (or as required by applicable law).

10. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and share
• Right to delete personal information (with exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising privacy rights
• Right to request specific pieces of personal information

To make a request, email hello@engageapp.ai or call 858-333-4473. You may designate an authorized agent to make requests on your behalf.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to lodge a complaint with your local supervisory authority
• Right to withdraw consent at any time
• Right to object to processing based on legitimate interests
• Right to restriction of processing
• Right to data portability
• Rights related to automated decision-making and profiling

Our EU Representative can be contacted at: hello@engageapp.ai

12. Marketing and Communications

We may send you marketing communications about our products, services, and events if you have:

• Opted in to receive such communications
• Purchased or inquired about our services (and haven't opted out)

You can opt-out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email
• Updating your communication preferences in your account settings
• Contacting us at hello@engageapp.ai

13. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

14. Third-Party Links and Services

Our platform may contain links to third-party websites, services, or integrations. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy with a new effective date
• Sending an email notification to registered users
• Displaying a prominent notice on our platform

16. Contact Information