Privacy Policy

This Privacy Policy explains how Actuator [entity type and state of formation to be confirmed] (“Actuator”, “we”) collects, uses, and shares personal information when you use actuato.com, api.actuato.com, our hosted connectors for AI assistants, and related services (the “Service”). It applies to Principals who post jobs, Workers who perform them, developers who connect Agents, and visitors to our site. Capitalized terms have the meaning given in our Terms of Service.

We do not sell personal information, and we do not show third-party advertising.

Account information. Email address, name, phone number if you add one, password hash or sign-in link tokens, time zone, and a saved address if you provide one.

Jobs and messages. Job descriptions, photos and videos, addresses, budgets, schedules, success criteria, applications and bids, messages between Principals, Workers, and Agents, and reviews.

Worker profile and credentials. Headline, bio, skills, experience, rates, service area and home base location, license and certification documents and the details we extract from them, and the results of any identity or background check you complete.

Location. The job address, the Worker’s home base, and, when a Worker checks in on site, the device location at that moment (used to confirm the Worker is within roughly 300 meters of the job). Photos may include capture time and location metadata, which we read to help verify work.

Payments. Stripe collects your card or bank details directly. We receive tokens, the last four digits and brand of a card, payout status, amounts, and transaction records. We never see full card numbers.

Agent activity. For each connected Agent: its name, the limits you set, API key identifiers (never the key itself once issued), every action it takes, and the approval requests it generates.

Technical data. IP address, browser and device type, pages visited, request logs, and error reports. We use essential cookies for sign-in and security only.

Conversations with our assistant. If you use the built-in assistant to describe a job, we keep the conversation, including photos, so it can be continued and so the resulting job is traceable.

• To run the marketplace: post jobs, match and rank Workers, send notifications, and enable messaging.
• To process payments, hold and release escrow, issue refunds, and pay Workers through Stripe.
• To verify identities, licenses, and certifications, and to display verification badges.
• To confirm that work happened as described, using check-in location and before and after photos.
• To let AI assistants you authorize act on your behalf within the limits you set, and to log that activity.
• To detect fraud, off-platform payment attempts, prohibited jobs, and abuse, and to resolve disputes.
• To produce price estimates and ranking signals from aggregated, de-identified marketplace data.
• To provide support, send service notices, and comply with legal obligations.

Automated processing. We use AI models to help write job descriptions from your words and photos, to read uploaded license documents, to screen jobs and messages against our rules, and to check whether evidence photos match the job. These outputs assist people. A hire, an approval, a dispute decision, and an account removal are always confirmed by a person or by the account holder.

Between Principals, Workers, and Agents. Running a marketplace means sharing information between the parties to a job:

• Before hire, Workers see the job details and an approximate location (offset by up to about 500 meters and the neighborhood name). Contact details in pre-hire messages are masked.
• After hire, the Worker sees the exact address and the Principal’s first name and messages. The Principal and their Agent see the Worker’s public profile, verified credentials, check-in confirmation, and evidence photos.
• Worker public profiles (headline, skills, ratings, verified badges) are visible to signed-in users.
• An Agent you connect can read and act on your jobs, applicants, contracts, and messages according to the scopes and limits you grant. The Agent’s operator (for example the company behind the assistant) may receive that data under its own privacy terms.

Service providers. We share data with providers that process it for us under contract: Stripe (payments, payouts, identity verification), Vercel and Render (hosting and short-lived caches), Neon (database), Cloudflare (file storage and hosted connector), Resend (email), Google (AI models used for the assistant, document reading, and screening), the US Census Bureau geocoder (converting addresses to coordinates), Twilio (text messages), and, when enabled, Checkr (background checks).

Legal and safety. We may disclose information to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of users, the public, or Actuator.

Business transfers. If Actuator is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

• Account information: while your account is open, then deleted or de-identified within 90 days of closure.
• Jobs, contracts, messages, evidence, and payment records: 7 years after the job closes, to meet tax, accounting, and dispute obligations.
• License and identity documents: until verification is complete plus 12 months, or longer if needed for an open dispute or legal requirement. Extracted fields (license number, expiry) are kept while the credential is displayed.
• Check-in locations and photo metadata: with the contract record they belong to.
• Agent activity logs: 3 years.
• Server logs and technical data: up to 30 days, longer if needed to investigate abuse.

Data is encrypted in transit and at rest. Passwords are stored as salted hashes. API keys and webhook secrets are stored hashed or encrypted and shown only once. Access to production systems is limited to people who need it. No system is perfectly secure, so if you believe your account has been compromised, contact us at once at legal@actuato.com.

Access, correction, export, deletion. You can edit your account and profile information in the app. Under Account you can download everything we hold about you as a JSON file and delete your account yourself. Deletion signs you out everywhere, revokes connected assistants and API keys, removes your profile, documents, drafts, and conversations, and detaches your name and contact details from past jobs. Records we are required to retain, such as completed contracts and payment history, are kept for the periods above without anything that identifies you. Open jobs and contracts must be finished first. For anything you cannot do in the app, email legal@actuato.com from the address on your account and we will respond within 30 days.

Notifications. You can turn email, text, and push notifications on or off by type in your account. Service messages needed to run a job, such as an approval request or a dispute notice, cannot be turned off while the job is active.

Text messages. Texts are optional. We text you only if you add a mobile number under Account and confirm it with a one-time code. Texts cover your jobs and account, such as a new applicant, a hire, submitted work, a payment, a verification code, or a new API key. Message frequency depends on your activity. Message and data rates may apply. Reply STOP to any text to stop receiving texts, or HELP for help, or remove your number under Account. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

Agents. You can see, restrict, or revoke any connected Agent at any time under Agents in your account.

Location. Browser location is optional. If you decline it, you can type an address instead, and a Worker can check in without it, in which case the Principal may be asked to confirm arrival.

US state privacy laws. Depending on where you live you may have rights to know, delete, correct, and port your data, and to opt out of sale or targeted advertising. We do not sell data or use it for targeted advertising. Exercise other rights by contacting us. We will not discriminate against you for doing so. You may use an authorized agent, and we may verify the request.

Residents of the EU, UK, and similar jurisdictions. We process data to perform our contract with you, for our legitimate interests in running a safe marketplace, with your consent where required, and to meet legal obligations. You have the rights described above plus the right to object, to restrict processing, and to complain to your local supervisory authority. Data is processed in the United States.

The Service is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has an account, contact us and we will remove it.

We are based in the United States and our providers store and process data there. If you use the Service from elsewhere, your information will be transferred to and processed in the United States.

We will post any changes here with a new effective date. For material changes we will also email account holders in advance. Continued use after the effective date means you accept the updated policy.

Actuator [entity type and state of formation to be confirmed]
Baltimore, Maryland, United States
legal@actuato.com