Privacy Policy
Last updated: October 17, 2026
This Privacy Policy explains how CoreOps Solutions ("CoreOps", "we", "us") collects, uses and shares personal data when you visit coreops-hq.com and its partner sub-domains (the "Site") or use the CoreOps platform (the "Platform"). Capitalised terms not defined here have the meaning given in the General Website Terms.
1. Who we are
CoreOps is the operator of the Platform and the controller of personal data processed through it. Our compliance desk can be reached at compliance@coreops-hq.com.
2. Data we collect
- Onboarding data supplied by a partner network when it issues an invitation: name, email address, role or position, compensation terms and start date.
- Identity-verification outcomes returned by our verification provider: verification status, document type, issuing country, document validity dates, name and date of birth as printed on the document, screening results and the provider's session reference. We do not receive or store biometric templates, selfies, liveness videos or document images.
- Agreement records: the version and content hash of the terms you accepted, the attestation text, and the time, IP address, user agent and approximate network location of acceptance.
- Account and activity data: sign-in events, pages requested, documents downloaded, status changes, IP address, user agent and timestamps.
- Billing data relating to partner networks: invoice amounts, numbers, payment references and payment status.
3. Why we process data
- To verify identity and screen for sanctions and anti-money-laundering risk before activating an account (legal obligation and legitimate interest).
- To provide workspace gateways, the contractor cabinet and the partner cabinet (performance of a contract).
- To evidence agreement to terms and maintain an audit trail required by our partners and regulators (legal obligation and legitimate interest).
- To invoice partner networks and reconcile payments (performance of a contract and legal obligation).
- To secure the Platform, detect misuse and respond to lawful requests (legitimate interest and legal obligation).
4. Sharing
We share personal data with: (a) the partner network that invited you, which can see your onboarding status, verification outcome and acceptance record; (b) our identity-verification provider, Didit, which processes identity documents and biometrics under its own privacy terms as our processor; (c) hosting, database, email and payment-institution providers acting as processors; and (d) public authorities where required by law. We do not sell personal data.
5. International transfers
The Platform is hosted in the United States. Where data originates from other jurisdictions we rely on appropriate safeguards, including standard contractual clauses with our processors.
6. Retention
Onboarding, verification-outcome, agreement and audit records are retained for the duration of the engagement and for the period required by applicable anti-money-laundering and tax record-keeping rules (generally five to seven years). Billing records are kept for the statutory accounting period.
7. Your rights
Depending on your jurisdiction you may have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority. Requests can be sent to compliance@coreops-hq.com. We may need to retain certain records to satisfy legal obligations even after a deletion request.
8. Security
Data is encrypted in transit and at rest, access is restricted by role and row-level security, and all administrative actions are logged. See the Security & Compliance page for more detail.
9. Changes
We may update this policy from time to time. Material changes will be announced in the Platform and the date above will be revised.