Expert Privacy Notice

1. Information we collect

When you apply to Hatch, we collect:

• Identity and contact information (full name, email, phone number)
• Professional information (LinkedIn URL, primary domain, years of experience, credentials)
• Submitted work product (skill-task responses, code samples, writeups)
• Communications you send us

If you are onboarded, we additionally collect:

• Tax and payout information (W-9 / W-8BEN / equivalent; payout-method details)
• Government-issued identification for KYC where required by law
• Project work product and review records
• Access logs to NobleStark systems
• Performance metrics (inter-rater agreement, quality scores, throughput)

2. How we use this information

• To evaluate applications and match approved experts to projects
• To pay you and meet our tax-reporting obligations
• To attribute your work in delivery provenance (your name is visible to the customer consuming the data)
• To improve our matching, calibration, and review pipelines
• To communicate with you about available work, payments, and program changes
• To respond to law-enforcement, regulatory, and legal requests where lawfully required

3. Identity disclosure to customers

Hatch attributes every delivered item to the expert who produced it as part of our delivery provenance. By default, customers see your name and a high-level skill profile but no other personal information. You may opt to remain pseudonymous in provenance trails; some customer engagements require named experts and you can decline those engagements without penalty.

4. We do not sell your personal information

We do not sell or rent personal information. We share it only with sub-processors who help us operate Hatch (payment processors, identity verification providers, cloud and tooling vendors) and only as needed.

5. Use of expert work in our training data

Project work product belongs to the customer (or to NobleStark, where the customer chooses) as defined in each engagement. NobleStark does not use your project work product to train NobleStark\'s internal models without your explicit, separate, revocable consent.

6. Retention

• Applications that do not result in onboarding: retained for 12 months for re-application matching, then deleted.
• Onboarded contractor records: retained for the duration of the engagement plus the period required by tax law (typically 7 years in the US) and any longer period required by other applicable law.
• Submitted skill-task responses: retained for the duration of the program for fairness review; you may request deletion of declined-application skill-task responses after 12 months.

7. Your rights

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct inaccurate information.
• Deletion: ask us to delete your information, subject to legal retention requirements.
• Portability: receive your information in a structured, machine-readable format.
• Objection / restriction: object to or restrict certain processing.
• Withdrawal of consent: withdraw consent at any time where processing is consent-based.

Submit requests via /dsar or email support@noblestark.com. We respond within statutory timelines (typically 30 days under GDPR / 45 days under CCPA).

8. International transfers

NobleStark operates primarily from the United States. If you are located outside the US, your information will be transferred to and processed in the US. We rely on appropriate safeguards (Standard Contractual Clauses where applicable) for cross-border transfers.

9. Security

We protect contractor data using the controls described in our Trust Center at /security. This includes encryption at rest and in transit, role-based access control with MFA, periodic access reviews, and continuous monitoring.

10. Changes to this notice

We may update this notice. Material changes are reflected in the change history at /legal/versions. We will notify active experts in-app or by email of material changes before they take effect.

11. Contact