Privacy Policy

VcrewX is operated by VstreamX Studio Inc. (“VstreamX”, “we”, “us”), which is the controller of the personal information described here. Write to legal@vstreamx.com about anything in this policy.

• Account. Your name, email address, role, and the password credential held by our authentication provider. We never see your password.
• Profile (professionals). Everything you choose to publish: headline, biography, skills, experience, education, certifications, languages, portfolio, location, rate and availability. A profile that reaches 70% completeness becomes visible to companies browsing for people — that visibility is the point of it, so treat what you put there as public.
• Company. Company name, industry, billing email, and the workspace you configure.
• Work. Roles, proposals, contracts, milestones, tasks, timesheets, uploaded documents, and messages between users.
• Money. Transaction and withdrawal records, their amounts and status, and the destination details you supply with a withdrawal request. Card and bank numbers go to Stripe and are never stored on our systems.
• Tax documentation. The legal name, country of tax residence, mailing address and tax identification number you certify on a W-9 or W-8BEN. We show only the last four digits of a tax ID back to you.
• Technical. Log and security data associated with requests, kept to operate and protect the platform.

To run the marketplace: to create and secure accounts, show profiles to companies, carry contracts and milestones, move money and account for it, meet tax and anti-fraud obligations, provide support, and send transactional email about your account, your work and your payments. We do not sell personal information, and we do not use your work content to train third-party models.

Payments are processed by Stripe. When you fund a milestone or start a membership, your card details go directly to Stripe and never touch our servers. We retain the record Stripe returns — amount, currency, date, status and Stripe’s reference — which is what we need to account for the transaction and to answer a question about it later.

Where you use the AI-powered tools, the content you point them at — a task, a support ticket, a job description, the profile a cover letter is written against — is processed by OpenAI or Anthropic acting as subprocessors through their business APIs, which do not train their models on that content. Output is prepared for a person to review, and anything sensitive requires a human approval before it takes effect.

• Google Cloud / Firebase — hosting, database, file storage and authentication.
• Stripe — payment processing (see §4).
• OpenAI and Anthropic — AI-assisted processing (see §5).
• Google Workspace — business email.

VcrewX is a cross-border marketplace: companies and the professionals they hire are in different countries, and information necessarily moves between them. A published profile is visible to companies wherever they are, and a contract, its messages and its milestones are visible to both parties to it. Our providers process data in Canada, the United States and other countries, under the safeguards their agreements with us require.

We keep personal information while your account is open and for as long as we need it for the purposes above, then delete or anonymize it. Two specifics:

• Financial and tax records — transactions, withdrawals, invoices and tax certifications are retained for the period the applicable tax authorities require, which outlasts the account itself.
• Contract records — contracts, milestones and the messages attached to them are retained while either party may need them, since they are the record of what was agreed and what was paid.

You may ask for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or object to a particular use. Email legal@vstreamx.com, and we will respond within the time your law allows. Some records we must keep — the financial and tax records in §7 — and we will tell you so rather than delete them quietly.

Access is checked by role, on the server, on every request. Sessions use signed, httpOnly cookies. Uploads are restricted by file type and size. No system is perfectly secure; if there is a breach that requires it, we will tell the affected users and the relevant authority.

We use the cookies needed to sign you in, remember the language you chose, and protect the platform from abuse. See our Cookie Policy for the detail.

The platform is for people aged 18 and over. We do not knowingly collect information from children, and will delete it if we learn that we have.

We may update this policy. The version and effective date above always reflect the current text, and we will give notice of material changes by email or in the platform.