This policy explains what personal data 16Psyke LLC ("16Psyke", "we") collects, why, and what rights you have. It covers 16psyke.com, the Core platform, the Engineer and Supplier portals, and the ways we contact engineers about roles. It is written to be read, so it is short; if anything here is unclear, write to [email protected].
Who we are
16Psyke LLC is a Wyoming limited liability company. We are the controller of the personal data described here.
Who this policy covers
- Clients and channel partners: people at organisations that request and hire engineers through 16Psyke.
- Engineers: people whose professional profile appears in Core, whether we sourced it, they claimed it, a supplier added it, or they signed up.
- Suppliers: people at the companies that supply engineers through the Supplier portal.
- Visitors: anyone who uses 16psyke.com.
What we collect, and where it comes from
From you directly. Your name, work email, phone number, company, role, and anything you type into a form, a profile or a job description. For engineers: your skills, work history, rate band, availability, team shape, and the documents you upload (company registration, tax forms, insurance certificates, work-status attestation). For suppliers: your firm's registration, tax and insurance documents and the engineers you add.
From data providers. We licence professional profile data from third-party providers who warrant that it was collected lawfully. From it we build a 16Psyke profile: role, skills, employment history and region. Every record carries the name of its provider and the date we received it, so we can delete a provider's data on request. We do not scrape websites and we do not automate any login to any social network.
From the Assay. If you take an Assay, we record the interview (video and audio), the interviewer's written assessment, and the result of an identity check. The identity check is run by Stripe Identity, which compares a government ID with a live image; we receive the result and a reference, not the ID image.
From use of the site and platform. Server logs (IP address, browser, pages visited, time), account activity in Core (requests made, shortlists viewed, profiles viewed), and the record of who viewed which masked profile. We use essential cookies only; see the cookie notice.
From suppliers about engineers. A supplier may add an engineer's profile and say that it employs them. The engineer confirms or declines that relationship; until they confirm, the profile is not shown to clients through that supplier.
Why we use it
- Showing masked profiles to clients and matching them to requests. Profile data. Basis: our legitimate interest in running an engineering marketplace, and the contract once you claim a profile or sign up.
- Inviting an engineer to claim a profile when a client has asked to meet someone like them. Profile data and contact details from enrichment providers. Basis: legitimate interest; one email, then only if you reply or claim.
- Running the Assay and identity checks. The recording, the assessment, the identity result. Basis: contract, your consent to the recording, and legal obligation and fraud prevention for the identity check.
- Contracting, paying and invoicing. Company, tax and insurance documents, timesheets. Basis: contract and legal obligation.
- Keeping the platform secure and preventing circumvention. Logs, account activity, profile view records. Basis: legitimate interest.
- Answering you. Whatever you sent us. Basis: legitimate interest.
We do not sell personal data, and we do not use it for advertising. We do not make automated decisions about you that have legal or similarly significant effects: a 16Psyke architect runs every Assay and a person at 16Psyke handles every request.
Masking
Clients who submit a request see profiles without names, employer names or contact details until an engineer agrees to meet them. Each client account's views are logged and watermarked so that profile data cannot be exported or reused.
Who we share it with
- Clients see an engineer's identity only when the engineer agrees to meet, and the Assay recording only for an engineer they have requested.
- Suppliers see the state of the engineers they employ, never the engineer's identity documents.
- Service providers who process data for us under contract: hosting (Vercel), DNS and security (Cloudflare), email delivery (Resend), authentication (Clerk), database (MongoDB Atlas), notifications (Novu), identity checks (Stripe Identity).
- Data providers receive nothing back from us.
- Authorities, when the law requires it.
Some of these providers are in the United States. If you are in the EU, UK or another country with transfer rules, transfers rely on standard contractual clauses or an adequacy decision.
How long we keep it
- Sourced profiles that are never claimed: 24 months from receipt, then deleted or refreshed from the provider.
- Claimed profiles and accounts: while the account is open, then 12 months.
- Assay recordings: 24 months after the last request that used them, unless the engineer asks for earlier deletion.
- Identity check results: the result and reference for 3 years for fraud prevention; never the ID image.
- Contracts, invoices and tax documents: as long as tax and commercial law requires, typically 7 years.
- Logs: kept by our hosting provider for a short period set by its plan, and we keep no other copy.
- Suppression list (people who asked not to be contacted): kept indefinitely, so we keep honouring it.
Your rights
You can ask us to tell you what we hold about you, correct it, delete it, give you a copy, restrict or object to how we use it, or withdraw consent where we rely on it. Write to [email protected]. We answer within 30 days, or 45 days for California requests, and we do not treat you differently for asking.
Not being contacted. Every email we send about a role has a one-click opt-out. Opting out adds you to a suppression list that every outreach workflow checks before any email, call or text. We text only people who have claimed a profile and ticked consent. We never auto-dial or send pre-recorded calls.
California. You have the rights above under the CCPA, including the right to know the categories and sources of data, the right to delete, the right to correct, and the right to opt out of sale or sharing; we do not sell or share personal data as those terms are defined, and we do not use sensitive personal information to infer characteristics.
EU and UK. You have the rights above under the GDPR and UK GDPR, and you can complain to your supervisory authority. Where we obtained your data from a provider rather than from you, this policy and our first email to you are the notice of that source.
Other US states. Residents of states with privacy laws have equivalent rights; use the same address.
Children
16psyke.com and Core are for working professionals and are not directed at anyone under 18.
Security
Data is encrypted in transit and at rest with our providers; access inside 16Psyke is limited to the people who need it for the purpose above; identity documents are never stored by us. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
Changes
We will post changes here with a new date. If a change reduces your rights, we will tell account holders by email before it takes effect.
Contact
16Psyke LLC, a Wyoming limited liability company. Privacy requests: [email protected]. General: [email protected], +1 908-538-6210.