EQ Platform Privacy Notice
Effective date: · Last updated:
1. About this notice #
This notice explains how The EQ Company (“EQ”, “we”, “us”) collects and uses personal information about people who sign in to the EQ Platform at https://platform.eq.company (the “Platform”). This includes:
- EQ staff;
- independent contractors who work with EQ (“contractors”); and
- people who ask for access or apply to become contractors (“applicants”).
This notice does not cover:
- EQ Artists (eqartists.com), which has its own privacy notice;
- EQ’s datasets; or
- people who appear in recordings or other collected data. Separate agreements and consents govern these.
Who is responsible for your information. The EQ Company is a Delaware corporation at 11949 Goshen Avenue, Los Angeles, CA 90049, USA. EQ is the controller of the personal information described in this notice (“titular del banco de datos personales” under Peruvian law). You can contact us at alex@emotionalintelligenceco.com.
You must be at least 18 years old to use the Platform. The Platform is not for children, and we do not knowingly collect information about anyone under 18.
2. Sign in with Google #
If you sign in with Google, we ask Google only for the “openid”, “email” and “profile” permissions. Google then gives us:
- your Google account ID;
- your email address and whether it is verified;
- your name; and
- your profile picture.
We use this information only to create and secure your account, to confirm your identity, and to decide what you may access on the Platform. We do not access your Gmail, Google Drive, Contacts or any other Google data. We do not use Google user data for advertising, we do not sell it, and no person at EQ reads it except as needed for security, to meet the law, or with your permission. We do not transfer it to anyone except the service providers listed in section 5, and only as needed to run the Platform.
EQ’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Information we collect #
3.1 Account and security information (everyone) #
- Sign-in details: your email address, name and Google account details (if you use Google), and the sign-in method you last used.
- Second sign-in step: each person chooses one of the following:
- Authenticator app: our authentication provider holds a secret code.
- Text-message code: we keep your phone number and send codes through Twilio.
- Email code (contractors): we send a code to your email address.
- Passkey (staff, optional): we store only the public key and non-secret device details. Your fingerprint, face or other biometric data never leaves your device, and we never receive it.
- Logs: records of sign-ins, security events and actions on the Platform (an audit log). These include your account, the time, the action, and technical data such as your IP address and browser.
3.2 Information about contractors and applicants #
- Identity and contact: legal name, email, phone number, preferred language, country of tax residence, work location (country and city), and whether you work as an individual or through a company.
- Date of birth and nationality: we collect these when you sign the contractor agreement, which asks for them for copyright registration purposes.
- Mailing address: for U.S. tax residents only.
- Tax identification numbers: Peru RUC, U.S. SSN, ITIN or EIN. We store these encrypted, and screens show them only in masked form.
- Documents:
- tax forms (W-8BEN, W-8BEN-E or W-9, which we may pre-fill for you to review and sign);
- identity documents; and
- invoices or electronic Recibos por Honorarios. These are stored in private, encrypted storage.
- Agreements and signatures: the text of each agreement as you signed it, a digital fingerprint (hash) of that text, your typed name, the time of signing, and the method you used to sign in.
- Engagement details: team, role and scope of work, start and end dates, pay rate and currency, manager, your answers to classification questions, compliance status, and approval decisions.
- Payments:
- amounts, dates, status, bonuses and year-to-date totals; and
- tax reporting, such as Form 1099-NEC for U.S. persons.
You enter your bank details on a form hosted by Stripe, and Stripe holds them. We never see your bank details. We see only whether a bank account is connected and its payout status.
- Data-collection progress: upload counts, recorded hours, dates, and which camera or collector the uploads are linked to. We take this from the upload information (metadata) in EQ’s data-collection storage. The recordings themselves are covered by your contractor agreement and separate terms, not by this notice.
- Access requests: if you ask for access, we collect your name, email, phone number (optional) and any note you send, together with our decision to approve or decline the request.
3.3 Information about staff #
For staff, the Platform holds the account, security and log information in section 3.1, and:
- your role and project access (memberships and access tiers);
- invitations sent to you (your email address, and your phone number if you were invited by text message);
- your second sign-in method, and your phone number if you chose text-message codes; and
- the audit log of your actions.
The Platform does not hold payroll or HR data.
3.4 Cookies #
- Necessary cookies: we use these to keep you signed in. They are “HttpOnly” cookies, which means scripts on the page cannot read them.
- Preference cookies: these are small cookies that remember your language and the sign-in method you last used.
- No other cookies or analytics: we do not use advertising cookies, and we do not use third-party analytics on the Platform.
4. Why we use your information and our legal basis #
Some laws, such as the GDPR, require us to state a legal basis for each use. Where Peruvian law applies, we rely on your consent, or on the exceptions in Law No. 29733 for information needed to prepare or carry out a contract with you or to meet a legal obligation.
| Purpose | Legal basis (where the law requires one) |
|---|---|
| Creating, running and securing accounts, including the second sign-in step, logs and rate limits | Performance of a contract; our legitimate interest in keeping the Platform secure |
| Onboarding and engaging contractors, including checks before work and before payment (agreements, tax form, identity, tax ID, invoice) | Taking steps before a contract and performing it; legal obligation (tax and identity checks) |
| Paying you and keeping payment records | Performance of a contract; legal obligation |
| Meeting tax, accounting and other legal obligations, including tax reporting | Legal obligation |
| Recording your date of birth and nationality for copyright registration | Performance of a contract (the contractor agreement requires them) |
| Sending service messages: invitations, requests to sign agreements, sign-in codes and payment notices | Performance of a contract; legitimate interest |
| Reviewing access requests and applications | Steps taken at your request before a contract; legitimate interest |
| Preventing fraud and misuse, and establishing or defending legal claims | Legitimate interest; legal obligation |
We do not sell your personal information. We do not use it for advertising or for decisions made only by automated means that have legal or similarly significant effects on you. Rule checks on the Platform show what is missing, but EQ staff make every approval and payment decision.
If you do not provide information we need for tax, identity or payment checks, we may not be able to engage or pay you.
6. International transfers #
EQ is based in the United States. Your information is processed in the United States, in Brazil and in other countries where our service providers operate. These countries may not have the same data protection laws as your country.
- From Peru: we transfer data outside Peru (cross-border flow, or “flujo transfronterizo”) in line with Law No. 29733 and its Regulation.
- From the EU, EEA or UK: we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum), or on the EU-U.S. Data Privacy Framework where a provider is certified. Where needed, we also rely on the transfer being necessary for your contract.
You can ask us for more information about these safeguards.
7. How long we keep information #
| Information | How long |
|---|---|
| Tax, payment and invoice records, tax forms, and tax IDs | 7 years after the end of the tax year they relate to. This covers U.S. federal rules (generally 3 to 4 years, longer in some cases) and Peru’s tax rules, including the limitation periods in Peru’s Tax Code (generally 4 to 6 years, longer in some cases) |
| Signed agreements, signature records and engagement details | 7 years after the engagement ends |
| Identity documents | 2 years after your onboarding checks are complete |
| Audit and security logs | These are append-only (they cannot be changed). We keep logs of actions on records for 7 years, and routine sign-in logs for 12 months |
| Declined access requests | 90 days after the decision |
| Unused invitations | 90 days after the invitation expires |
| Account data for staff | 12 months after you leave EQ |
When a contractor is offboarded, their access ends immediately. We keep their records for the periods above, then delete or anonymize them.
8. Security #
We protect personal information with measures such as:
- encryption in transit and at rest;
- extra encryption and masking for tax IDs;
- private storage for documents;
- a required second sign-in step;
- access limited by role;
- rate limits; and
- audit logs that cannot be changed.
No system is completely secure. If a security incident affects your information, we will tell you and the authorities where the law requires it.
9. Your rights #
Everyone. You can ask to:
- access your information;
- correct it;
- delete it; or
- object to how we use it.
We may need to keep some information to meet legal obligations, such as tax record-keeping.
Peru (Law No. 29733 and its Regulation). You have the ARCO rights (access, rectification, cancellation and opposition), along with the other rights the Regulation gives you. You can also withdraw your consent at any time. If you are not satisfied with our answer, you can file a complaint with the National Authority for Personal Data Protection (Autoridad Nacional de Protección de Datos Personales) of the Ministry of Justice and Human Rights (www.gob.pe/anpd). We will answer within the time limits set by the Regulation.
EU, EEA and UK. If the GDPR or UK GDPR applies to you, you can also:
- ask us to restrict how we use your information;
- receive your information in a portable format;
- object to uses based on our legitimate interests; and
- withdraw consent at any time.
You can complain to the data protection authority in the country where you live or work. In the UK, this is the Information Commissioner’s Office.
How to make a request. Email alex@emotionalintelligenceco.com from the email address linked to your account, or write to us at the postal address in section 1. We will check your identity by confirming that you control that email address or your Platform account. If you cannot do this, we may ask for other limited information. We will not ask for more information than we need. An authorized representative may make a request for you with proof of their authority. Requests are free of charge.
10. Changes to this notice #
We may update this notice. We will show the new effective date at the top. If the changes are important, we will tell you on the Platform or by email before they take effect.
11. Contact #
The EQ Company11949 Goshen Avenue
Los Angeles, CA 90049
USA
Email: alex@emotionalintelligenceco.com