Gridma Talent

Privacy Policy

What we collect, why, and what you can do about it. Last updated .

The short version

  • We collect what you give us to apply, pass the checks and show your work.
  • Clients see your first name, surname initial and field. Never your email, full surname, date of birth or rate.
  • Community posts and comments are public. Anyone can read them.
  • If you are 13 to 17, a parent or guardian agrees for you, signs the Talent agreement and receives your payments.
  • No analytics, no ad trackers, and we do not sell your data.
  • You can ask for a copy, a correction or deletion at any time.

This summary helps you read the policy. The full text below is what applies.

1. Who we are

Gridma Talent (talent.gridma.ai) is where designers apply to work with construction businesses in the United States. It is run by [Gridma legal entity name], registered at [registered address], [company registration number] ("Gridma", "we", "us"). We decide how your data is used, so we are responsible for it.

This policy covers the Talent side of Gridma: the application and its checks, your account, your profile, the project feed and the community. [Governing law for this policy.]

2. What we collect

We collect what you give us at each step, and a little technical data the site needs to run.

Your account

Your email and a password. We store the password as a one-way hash, so nobody at Gridma can read it. We also record when you confirm your email.

Your application

Your full name, date of birth, country of birth, field, portfolio link, the AI tools you use, country of residence, time zone, hours per week and hourly rate. From the moment you create an account, your answers save to our servers as you type, so we hold them even before you submit.

Once you submit, our team reviews your portfolio and profile. We record the decision, who made it and, if we cannot move you forward, the feedback we send you.

Your parent or guardian, if you are under 18

If you are 13 to 17, a parent or legal guardian must agree for you. Before your first paid project, we collect their full name, date of birth, relationship to you (parent or legal guardian), email and a copy of their ID. We use them to check that they are 18 or older, to have them sign the Talent agreement with you, and to pay them for your projects. This step is not open yet (section 6).

Field quiz

The quiz we sent you, your answers, your score, whether you passed, the attempts you used and when the quiz closes. The quiz is marked automatically against a pass mark. If you think a result is wrong, write to us and a person will check it.

Interview

The task we gave you, when you started and handed it in, and what you hand in with it: a file, a link and a note, all optional. We also note when screen sharing stopped and started again. Our team keeps notes and the result.

Interview recordings

The interview is a timed task you do on your computer, and we record your screen while you work on it. Only the screen is recorded: no camera and no sound. Recording starts when you share your screen and stops when you hand in the task, cancel it, or the time runs out. We ask for your agreement each time you start. The recording is stored privately, never at a public link, and only the Gridma team watches it, to review your work. We delete it 90 days after our decision on your interview. If you cancel an interview, its recording is deleted at once.

Your browser shares whatever is on your screen, so close anything private before you start: email, chats, other tabs and notifications.

Your verified profile

Once you are verified, you can add a photo, a cover image, a headline, an about text, your city, skills, AI tools, your AI level, languages, education, whether you are taking work, and portfolio projects. A project has a title, category, description, location and year, plus images, videos, captions and YouTube or Vimeo links. You choose what to add, and you can change or remove it at any time. Our team may mark an education entry as checked.

Community

Verified Talents can post, comment and appreciate posts. A post holds your text, its type (such as a case study), highlights, images and videos. A post or comment shows your public name (such as "Leyla N."), your photo and your headline or field. Appreciations show only as a count. Anyone who opens the community can read posts and comments, signed in or not.

When you delete your own post or comment, it is removed, with its images and video. Our team can also hide posts, and delete posts and comments. A hidden post leaves the feed but stays on record, and only its author can still open it. You cannot delete a hidden post yourself: write to us to have it removed.

Reporting a post or comment through the site is coming. When it opens, we will keep the report, its reason and note, and the account that sent it, so our team can review it. Until then, once email support is open, a report reaches us by email with the reason and any note you add, and we keep that email for the review.

Emails we send

We email you about your application: the link to confirm your email, that we received your application, your quiz, your interview task, that we received your interview, and our decision. We also send security notices: a password reset link, a note when your password changes, and a note to your old address when your email changes. We do not send marketing email.

Technical data

When you use the site, our servers receive your IP address and browser details. We use them to:

  • keep your visit and your sign-in working (your IP address and browser are stored with each session, signed in or not),
  • limit how often a form can be sent, to stop abuse,
  • check with Google reCAPTCHA that a request comes from a person,
  • keep a security log of sign-ins, failed sign-ins and password resets, with the account and the IP address, never the password,
  • log errors, including a refused reCAPTCHA check with its IP address.

We do not use analytics or advertising trackers.

3. What clients see

Gridma has no client accounts yet. Until it does, our team introduces Talents to clients directly, and the same rules apply. Clients see:

  • your first name and surname initial, such as "Leyla N.",
  • your field, headline, city, country, time zone (as a UTC offset) and whether you are taking work,
  • your photo, cover, about text, skills, AI level and AI tools, languages, education and portfolio projects.

Clients never see your email, your full surname, your date of birth, your country of birth, your hourly rate, your hours per week, the portfolio link from your application, your quiz answers or score, your interview or its recording, our notes, any document you send us, or anything about your parent or guardian.

4. Why we use your data

  • To run your application and the four checks, and to tell you where you stand.
  • If you are under 18, to check your parent or guardian's details, have them sign the Talent agreement and pay them.
  • To show your profile and work to clients, and to match you with the right projects.
  • To run the community.
  • To keep accounts safe and stop spam, bots and abuse.
  • To answer you when you write to us.
  • To meet our legal duties. [Legal duties that apply, such as tax records once payouts open.]

We do not sell your personal data and we do not use it for advertising.

[Legal basis for each use under the governing law, for example contract, legitimate interests, legal obligation or consent.]

5. Services that handle your data

These services handle some of your data for us, or load in your browser when you open a page:

  • Google reCAPTCHA. On the live site, it runs on the sign-in, application, password, Account and community pages, and checks account creation, sign-in, password resets, the email confirmation resend, and community posts and comments. Google's script looks at your browser, your device and how the page is used, and gives us a score. Our server sends Google the check and your IP address. This site is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.
  • Google Fonts. Most pages, including sign-in, the application, the password pages, your Account and Earnings pages, Support, these legal pages and error pages, ask Google Fonts for the Inter font. Your browser then contacts Google, which receives your IP address and browser details.
  • YouTube and Vimeo. When a profile or project shows a YouTube or Vimeo link, the viewer's browser contacts that service. YouTube preview images load from YouTube as soon as the project shows. The player loads from YouTube's privacy-enhanced youtube-nocookie.com player, or from Vimeo, when someone opens the video. Their own privacy policies apply.
  • Interview recordings. [Storage provider for interview recordings, such as Cloudflare R2] stores the screen recordings of interviews, privately, in [storage region].
  • Email delivery. [Email delivery provider, not chosen yet] sends our emails, so it handles your email address and the messages we send you.
  • Hosting. [Hosting provider, not chosen yet] runs our servers and stores the database and the uploaded files in [hosting region]. [Backup schedule and where backups are kept.]
  • Coming. When the steps in section 6 open, [e-signature service, not chosen yet] will handle signing the Talent agreement, and [payout provider, not chosen yet] will handle payouts. For a Talent under 18, they handle the parent or guardian's details too.

Your data may be handled in countries other than yours, including the United States. [Safeguards for international transfers.]

6. Documents, agreement and payouts

These steps are not open yet. Before each one opens, we will describe it in full here and tell you by email.

  • Documents. After the interview, you will upload your ID, a diploma and proof of address so our team can check them. If you are under 18, you will also add your parent or guardian's full name, date of birth, relationship to you, email and ID. We plan to store these files privately, never at a public link, and only our team will open them.
  • Talent agreement. Before your first paid project, you will sign the Talent agreement in a new tab with an outside e-signature service, [e-signature service, not chosen yet]. That service will receive your name, your email and your signature. If you are under 18, your parent or guardian signs it too, with their own link sent to their email, and the service receives their name, email and signature. We will keep the signed agreement and a record of when each person signed it.
  • Payouts. To pay you, we will need your payment details, and we will pay through [payout provider, not chosen yet]. If you are under 18, payouts go to your parent or guardian, so we will need their payment details instead. We will keep a record of each project and payout. Your Earnings page will show your payouts and printable statements, and who they were paid to.

7. Cookies and browser storage

We use only the cookies the site needs to work. No analytics or advertising cookies.

gridma-talent-sessionKeeps your visit and your sign-in. Ends 2 hours after your last action.
2 hours
XSRF-TOKENProtects your forms from requests sent by other sites.
2 hours
remember_talent_ and a codeSet when you create an account or sign in, so you stay signed in on this device. Removed when you sign out.
Up to 400 days
Google reCAPTCHAOn pages with a protected form, Google's script can set its own cookies, such as _GRECAPTCHA, under Google's domain.
Set by Google

Browser storage

These stay on your device. Nothing here is sent to us on its own.

gridma_hub_registrationThe email you typed before creating an account. Removed once the account exists.
Local
gridma_hub_quiz_ and a numberYour quiz answers in progress, so a reload does not lose them. Removed when you pass.
Local
gridma_verify_dismissedRemembers that you closed the confirm-your-email notice.
This tab
gridma_reset_emailThe email you typed on Forgot password, so the next screen can show it.
This tab
gridma_talent_feedThe briefs you saved or applied to in the project feed.
Local

"Local" stays until you clear it. "This tab" ends when you close the tab. You can clear all of these in your browser settings. The site still works; you may need to sign in again.

8. How long we keep data

  • Your account, application and profile: while your account is open.
  • Applications we did not move forward: [retention period for declined applications].
  • Interview recordings: 90 days after our decision on your interview, then deleted. A cancelled interview's recording is deleted at once.
  • Community posts and comments: until you or our team delete them, or your account is deleted. Hidden posts: [retention period for hidden posts].
  • After your account is deleted: removed from the live site at once, with your uploaded files, except the records below that the law requires. Copies in backups: [backup retention period].
  • Records the law requires: kept after your account is deleted, for as long as the law requires. [Which records, such as payout and tax records once payouts open, and for how long.]
  • Sign-in: a session ends 2 hours after your last action. The sign-in cookie lasts up to 400 days, or until you sign out.
  • Links in emails: a password reset link works for 60 minutes, an email confirmation link for 72 hours.
  • Abuse checks: counters that limit how often a form can be sent last up to 10 minutes. A reCAPTCHA check is remembered for 10 minutes, so it cannot be used twice.
  • Server and security logs: [log retention period].

9. Your rights

  • See your data. Your application and your profile show what you gave us. For a full copy, write to us.
  • Correct it. Edit your profile at any time. Before you submit, you can change your whole application, including your email and password on its first step. After you submit, write to us to correct the application. Your verified name and field change through Support. To change your email or password, use your Account page, or write to us if a setting there is not connected yet. Signed out, you can also choose a new password with Forgot password.
  • Delete it. Ask to delete your account on your Account page, or write to us. Your application, quiz results, profile, uploaded files, posts, comments and appreciations are deleted with it, except the records the law requires us to keep (section 8). You can delete your own posts and comments yourself at any time. A post our team has hidden stays on record: its author cannot delete it, and only its author can still open its comments. Write to us to have a hidden post, or your comment under one, removed.
  • More, depending on where you live. You may also object to some uses, ask us to limit them, ask for your data in a portable format, and complain to a data protection authority, such as [supervisory authority under the governing law].

We answer within [response time]. We may ask you to confirm that the request comes from you.

If you are under 18, your parent or guardian can also make these requests for you.

10. How we protect your data

  • Passwords are stored as one-way hashes.
  • The session cookie cannot be read by page scripts and, on the live site, is sent only over HTTPS.
  • Resetting your password signs you out on every other device.
  • Profile photos, covers, and JPG, PNG and WebP images are re-encoded when you upload them, which removes camera and GPS data. Videos and GIFs are stored as you upload them, so remove location data from them first.
  • Profile photos, covers, portfolio files and community media are stored at web addresses that anyone with the link can open.

No system is perfectly safe. If a breach affects your data, we will tell you as the law requires.

11. Age

Gridma Talent is for people aged 13 or older. The application asks for your date of birth and refuses anyone younger. If you think someone under 13 has applied, write to us and we will delete the account.

If you are 13 to 17:

  • a parent or legal guardian must agree for you,
  • before your first paid project, we collect their full name, date of birth, relationship to you, email and ID, and check that they are 18 or older,
  • they sign the Talent agreement with you,
  • your payouts go to them, not to you.

We use their details only for these steps. Clients never see them.

12. Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use your data, we email you before it applies.

13. Contact

Email support@gridma.ai, or use the Support page.

[Gridma legal entity name], [registered address]. [Data protection contact, if the governing law requires one.]