Privacy Policy

HumanOS ("HumanOS", "we", "us" or "our") respects the privacy of individuals whose personally identifiable information ("Personal Data") we process. This Privacy Policy explains how HumanOS collects, uses, stores, discloses, and protects Personal Data when you visit or use the HumanOS website and platform, create or administer an account, post or fulfil tasks, join as a Human capability provider, integrate with our API, or otherwise interact with our services.

This Privacy Policy is a general privacy notice. Certain processing activities may be subject to more specific terms agreed with enterprise or partner customers. Where a separate agreement or data processing addendum applies to a particular processing activity, that document supplements this Privacy Policy and, to the extent of any inconsistency for that activity, the more specific terms prevail.

HumanOS provides verified human capability infrastructure. Our services help enterprises, partners, and software systems translate natural-language tasks and API requests into approved capabilities, verified human capacity, and evidence-backed results. For certain processing activities, HumanOS acts as a Data Controller. For other processing activities, including where an enterprise or partner customer determines the purpose and means of processing task-related Personal Data, HumanOS may act as a Data Processor on behalf of that customer. Our role depends on the particular processing activity.

For the purposes of this Privacy Policy, "Customer" means an enterprise, partner, or workspace operator using HumanOS to post tasks, access matching results, or integrate with our API. "Human" means an individual who registers to offer verified capabilities and may be matched to tasks through the platform.

This Privacy Policy applies to website visitors, account holders, Customers, Humans, authorised administrators, and other users interacting with the HumanOS platform and services.

We seek to collect only Personal Data that is relevant and reasonably necessary for the applicable purpose, subject to applicable legal requirements. We do not typically ask for special categories of Personal Data (also referred to as sensitive personal data under laws such as the UK GDPR or the Nigeria Data Protection Act (NDPA) 2023). If we process such data, we do so only where permitted by applicable law and where an appropriate legal basis applies.

4.1 Information you provide directly
Depending on how you interact with HumanOS, we may collect:

(a) name and contact details, including email address and telephone number;

(b) company or organisation name and role;

(c) account credentials, preferences, and workspace settings;

(d) capability profile information for Humans, including skills, education, languages, location, availability, rates, and verification status;

(e) task descriptions, requirements, deployment instructions, and related communications;

(f) evidence, media uploads, and deliverables connected with tasks or verification workflows, including optional short capability proof videos submitted for HumanOS review;

(g) support enquiries, feedback, and other communications you send to us.

4.2 Information collected automatically
When you visit or use our website and platform, we may automatically collect technical Personal Data, including:

(a) IP address;

(b) browser type and device information;

(c) operating system;

(d) log information and access times;

(e) pages visited and referring URLs;

(f) security signals such as login attempts, blocklist events, and consent records.

4.3 Information received from third parties
Where lawful and appropriate, we may receive Personal Data from Customers, verification partners, identity providers used for sign-in, analytics providers (where you have consented), and other service providers supporting platform operations.

We may obtain your Personal Data directly from you when you register an account, complete a capability profile, post or accept a task, use our API, or contact support. We may also collect Personal Data automatically through cookies and similar technologies when you browse our platform, or from third parties such as verification partners and sign-in providers.

We may process Personal Data for purposes including:

(a) creating and administering accounts and workspaces;

(b) providing, operating, and improving the platform and API;

(c) matching tasks to verified human capabilities;

(d) verifying identity, skills, and task evidence;

(e) communicating with users and providing customer support;

(f) maintaining platform security and preventing abuse;

(g) logging admin activity on sensitive operations for audit purposes;

(h) complying with legal and regulatory obligations;

(i) establishing, exercising, or defending legal claims;

(j) other purposes disclosed at the time of collection or otherwise permitted by applicable law.

Where HumanOS acts as a Data Controller, we process Personal Data on an appropriate lawful basis under applicable data protection law, including the UK GDPR and, where relevant, the NDPA 2023. Our processing may be justified by:

(a) your consent;

(b) performance of a contract or steps prior to entering a contract;

(c) compliance with a legal obligation;

(d) protection of vital interests;

(e) our legitimate interests or those of a third party, except where overridden by your rights and freedoms.

Where HumanOS acts as a Data Processor for a Customer, the Customer is generally responsible for determining the lawful basis for the underlying processing. We process such data in accordance with the Customer's documented instructions and applicable agreements.

We and our service providers may use cookies, web beacons, pixels, and similar tracking technologies on our website and platform. For more detail, see our Cookie Policy.

We may disclose Personal Data to:

(a) Customers where needed to operate tasks, matching, or evidence delivery;

(b) Humans where needed to evaluate or fulfil matched tasks;

(c) authorised service providers, subprocessors, and cloud hosting providers;

(d) verification, security, and analytics partners where permitted;

(e) professional advisers, auditors, and legal counsel;

(f) regulators, courts, and law-enforcement authorities where required or permitted by law.

We do not sell Personal Data as a commercial commodity or otherwise sell Personal Data to third parties for their own independent commercial purposes.

Some of our service providers, cloud infrastructure, analytics providers, or technology platforms may be located outside your country of residence. Where Personal Data is transferred internationally, HumanOS implements appropriate safeguards required by applicable law, such as adequacy decisions, standard contractual clauses, or equivalent protections.

HumanOS uses appropriate technical and organisational measures, including access controls, encryption where appropriate, network monitoring, signed media delivery, and staff confidentiality obligations designed to protect Personal Data against unauthorised access, disclosure, loss, alteration, or destruction. No internet-based system can be guaranteed to be completely secure.

We retain Personal Data only for as long as reasonably necessary for the purposes for which it is processed, unless a longer period is required or permitted by law. Retention periods may vary by data category and take account of the purpose of processing, legal obligations, contractual requirements, disputes, security needs, and legitimate business recordkeeping. When Personal Data is no longer required, we take reasonable steps to securely delete, anonymise, or otherwise dispose of it.

Depending on applicable law and the circumstances of processing, you may have rights including access, correction, deletion, restriction, objection, data portability, and withdrawal of consent where consent is the lawful basis. You may also have the right to object to or request review of certain automated processing or profiling, where applicable.

Where HumanOS processes Personal Data on behalf of a Customer, the Customer may be responsible for responding to certain requests relating to that processing. Where you submit a request directly to HumanOS, we will determine the appropriate route and assist the relevant controller where required by law. Contact us using the details below.

HumanOS may use automated tools, matching technologies, risk indicators, or profiling as part of task routing, capability scoring, or platform safety. The nature and significance of that processing is assessed in accordance with applicable law, and relevant decisions are subject to human review where required.

Our services are not directed at children, and we do not knowingly collect Personal Data from anyone under 18. Where we become aware that we have collected Personal Data from a child without appropriate authority, we will take appropriate steps to delete such information.

Our platform may contain links to third-party websites, applications, or services that are not operated or controlled by HumanOS. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices.

We may update this Privacy Policy from time to time. Where changes are material, we will take reasonable steps to provide appropriate notice. The updated version will be identified by its effective date. Continued use of the services after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or raise a concern about our processing of Personal Data, contact us at hello@usehumanos.work.

If you are unsatisfied with how we handle your Personal Data, you may contact us directly to seek a resolution. You may also have the right to lodge a complaint with your local data protection authority, such as the UK Information Commissioner's Office or the Nigeria Data Protection Commission.

This Privacy Policy is effective as of September 16, 2026.