Privacy Policy

Last updated October 19, 2026

Who is responsible for your data

The controller of personal data processed through the service is the administrator of the expertmatcher.com service. You can reach the administrator about any privacy matter at [email protected].

Scope of this policy

This policy covers the website expertmatcher.com, the ExpertMatcher web application, the emails we send and the data exchanged during expert calls, projects and fractional engagements arranged through the platform. When a company and an expert exchange information within an engagement, each of them is also responsible for how they use that information under the NDA and SOW they sign.

Data we collect from companies

Account data, such as work email, password hash, name, job title, company name and the seats you add
Briefs and match briefs, including the problem description, role, industry, budget band, timeline and attached files
Shortlists, comments, approvals, bookings, contracts and ratings you create
Billing data, such as billing contact, billing address, tax identifiers and payment status (full card numbers and bank credentials are held only by our payment processor)
Support messages you send to [email protected]

Data we collect from experts

Account data, such as email, password hash, name, headline, location and timezone
Verification data, such as identity document images, a selfie for the identity match, work history, references and certifications
Rate card, availability calendar, languages, portfolio items and profile text
Payout data, such as bank account details held by our payment processor, and tax forms (W-9 for US experts, W-8BEN for experts outside the US)
Engagement records, such as accepted briefs, signed NDAs, SOWs, timesheets, payouts and ratings received

Data collected automatically

When you use the site we collect technical data needed to run it securely: IP address, browser and device type, pages requested, referring page and the time of the request. We use cookieless analytics to count visits and measure which pages lead to signups, without tracking you across other sites. We do not use advertising pixels.

Cookies

ExpertMatcher sets only strictly necessary cookies: a session cookie that keeps you signed in, a CSRF token that protects forms and a cookie that remembers preferences such as the pricing toggle. These cookies are required for the service to work, so we do not show a cookie banner. You can block cookies in your browser, but signing in will not work without the session cookie.

Why we use your data and on what legal basis

To create and run your account, match briefs to experts, run calls and engagements and handle payments (performance of a contract)
To verify expert identity, work history and credentials, so companies can rely on profiles (legitimate interest in a trustworthy marketplace, and contract performance for the expert)
To issue invoices, process payouts, file 1099 forms and keep tax and accounting records (legal obligation)
To keep the service secure, prevent fraud and resolve disputes (legitimate interest)
To send service emails such as sign in codes, matched briefs, booking confirmations and invoices (performance of a contract)
To send product news by email, only where you agreed to it, with an unsubscribe link in every message (consent)

How AI is used on your data

Your brief text is sent to an AI model provider to build the structured match brief and the fit explanations. The provider processes it under contract terms that do not allow it to use the data to train its public models. Match results support your decision; the choice of expert and every contract decision stay with you and the expert.

Who receives your data

We share personal data only with recipients that need it to deliver the service, in these categories:

The other side of an engagement: a company sees verified profile data of experts on its shortlist, and an expert sees brief details after signing the NDA
A hosting provider that runs our servers and storage
A payment processor that handles card and ACH payments, payouts and related compliance checks
An identity verification provider that checks identity documents and selfies
An email delivery provider that sends sign in codes and service emails
An AI model provider that processes brief text as described above
Professional advisers such as accountants and lawyers, under confidentiality duties
Public authorities where the law requires disclosure

We do not sell personal data and we do not share it for cross context behavioral advertising.

International transfers

The service is operated for the US market and data may be processed in the United States and in other countries where our providers operate. Where data of people in the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on adequacy decisions or standard contractual clauses.

How long we keep data

We keep account data while your account is active. After you close your account we delete or anonymize it within 90 days, except records we must keep longer: invoices, payouts, tax forms and contract records are kept for the periods required by tax and accounting rules, and data needed to handle an open dispute is kept until the dispute is closed. Identity document images are deleted once verification is complete; we keep only the verification result.

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access your data, correct it, delete it, restrict or object to processing, receive your data in a portable format and withdraw consent at any time without affecting earlier processing. You may also lodge a complaint with your local data protection authority.

Your rights under the CCPA

If you are a California resident, you have the right to know what personal information we collect, use and disclose, to access it, to correct it, to delete it and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use sensitive personal information for purposes other than those allowed by law. We will not treat you differently for exercising your rights. An authorized agent may submit a request on your behalf with your written permission.

How to exercise your rights

Write to [email protected] from the email address on your account and describe your request. We may ask you to confirm your identity before we act. We reply within 30 days for GDPR requests and within 45 days for CCPA requests, and tell you if we need more time and why.

Security

We protect data with encryption in transit and at rest, access limited by role, logging of staff access and verification of every expert. More details are on ExpertMatcher security. No system is free of risk, and if a breach affects your data we notify you and the authorities as the law requires.

Children

ExpertMatcher is a service for businesses and professionals. It is not directed at anyone under 18 and we do not knowingly collect data from them.

Changes to this policy

We may update this policy when the service or the law changes. We post the new version on this page with a new date, and for material changes we also email account holders before the change takes effect.

Contact

Questions about this policy go to the administrator of the expertmatcher.com service at [email protected].