Privacy Policy for Workers and Recruiters

Effective date: May 18, 2026
Last updated: October 18, 2026
Website: https://www.werko.ai
Company: Tradecraft Recruiting Inc. d/b/a Werko
Contact: privacy@werko.ai

1. Introduction

Werko respects your privacy. This Privacy Policy explains how Werko (“Werko,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you use our website, web application, and related services available at https://www.werko.ai and related domains (the “Service”).

Our Terms of Service govern your use of the Service. This Privacy Policy explains our privacy practices.

Werko is an AI-assisted profile, resume, and recruiting platform for Canadian skilled trades workers and the employers, recruiters, schools, and organizations that interact with them. Workers can create structured trade profiles, upload resumes, use AI-assisted profile and resume tools, generate trade-focused resumes, participate in job matching, and choose whether to make a limited recruiter-visible profile available to recruiters and employers.

This Privacy Policy is designed for a Canada-first launch. If we expand into additional jurisdictions, we may update this Privacy Policy or provide additional notices as required by law.

2. Who This Policy Applies To

This Privacy Policy applies to personal information we process about:

• workers and job seekers;
• recruiters, employers, and their organization users;
• school, cohort, training, and administrator users;
• waitlist users and marketing contacts;
• visitors to our website;
• individuals who communicate with us for support, sales, legal, or privacy purposes.

This Privacy Policy does not apply to third-party websites or services that we do not control, even if they link to or from Werko.

3. Important Terms

In this Privacy Policy:

• Personal information means information about an identifiable individual.
• Worker profile means the full profile a worker creates or maintains in Werko.
• Recruiter-visible profile means a limited profile view or projection that may be shown to recruiters or employers when a worker chooses to make their profile visible and meets applicable product requirements.
• Service providers means vendors and processors that help us operate the Service, such as hosting, authentication, storage, analytics, payments, communications, AI, document parsing, and security providers.
• AI-assisted features means features that use artificial intelligence, machine learning, language models, document parsing, or similar technologies to assist with resume parsing, profile enhancement, matching, recommendations, or related functions.

4. Personal Information We Collect

The personal information we collect depends on how you use the Service.

4.1 Account and authentication information

We may collect:

• name;
• email address;
• phone number;
• account identifiers;
• authentication, session, and login information;
• role, permissions, and organization membership;
• support and communication history.

4.2 Worker profile information

Workers may provide or generate profile information such as:

• name, preferred name, and contact details;
• city, province, postal code, address, or other location information;
• date of birth;
• emergency contact information;
• languages;
• trade, occupation, skills, tools, and experience;
• work history, employers, projects, summaries, and references;
• education, training, school, program, or cohort information;
• licenses, certifications, Red Seal-related information, or other credentials provided by the worker;
• union-related information if provided;
• availability, shift preferences, relocation preferences, travel radius, and commute preferences;
• compensation or hourly-rate expectations;
• profile completion, profile quality, and activity metadata;
• consent and visibility preferences.

Workers are responsible for ensuring that the information they provide is accurate and that they have authority to provide information about third parties, such as references or emergency contacts.

4.3 Resume and document information

If you upload a resume or other document, we may collect and process:

• the uploaded file;
• file name, file type, file size, and storage metadata;
• parsed resume text and structured fields;
• parser name, parser version, confidence scores, error details, and processing metadata;
• resume-derived profile suggestions;
• generated resume PDFs and related metadata.

4.4 AI-assisted feature information

When you use AI-assisted features, we may process:

• resume content;
• profile fields selected for enhancement;
• trade, skill, certification, and work-history context;
• AI-generated suggestions or outputs;
• user acceptance, rejection, or editing of suggestions;
• model, prompt, parser, or processing metadata;
• quality, safety, and diagnostics information.

4.5 Recruiter and employer information

For recruiters, employers, and organization users, we may collect:

• name, email address, phone number, title, role, and timezone;
• organization name, organization type, regions, verification, and subscription status;
• default trades, regions, and search preferences;
• saved searches, favorites, shortlists, candidate pipelines, notes, and collaboration metadata;
• recruiter search filters, pages viewed, search result counts, latency, and audit events;
• contact requests, contact status, channels, payload metadata, and blocked-contact events.

Recruiters and employers may create notes or workflow records about workers. These records may be visible to other authorized users within the recruiter’s organization depending on product permissions.

4.6 School, cohort, and training information

If you use school or cohort features, we may collect:

• school or training organization information;
• program and cohort names;
• invite codes;
• enrollment status, dates, completion, withdrawal, or removal information;
• administrator actions and audit information;
• worker/student association with a school, program, or cohort.

School, program, or cohort information may become visible in a worker’s recruiter-visible profile if the worker chooses to make their profile searchable and the product shows that context.

4.7 Assessment information

If you use assessment features, we may collect:

• assessment eligibility and attempt records;
• questions served to you;
• answers submitted;
• score, pass/fail status, attempt count, timing, and expiry information;
• assessment summaries that may be shown to workers, schools, or recruiters depending on product settings.

Assessment information can be sensitive because it may affect perceived employability. Recruiters and employers may not use assessment outputs in a discriminatory, unlawful, or solely automated manner.

4.8 Job-agent and matching information

If you use job-agent or matching features, we may collect:

• primary and secondary trades;
• preferred provinces or regions;
• relocation preferences;
• home base or approximate location information;
• compensation preferences;
• keywords, union preferences, shift preferences, and job preferences;
• job-agent consent and pause settings;
• match scores, reasons, fit evidence, status, and interaction data.

Job matches and scores are recommendations only. They are not employment decisions, eligibility determinations, or guarantees of work.

4.9 Payment and subscription information

If you purchase a paid plan or subscription, our payment processor may collect payment card or payment method details. Werko does not intend to store full payment card numbers.

We may receive and store limited payment and subscription information such as:

• payment processor customer ID;
• subscription status;
• plan, billing cycle, renewal, cancellation, and invoice metadata;
• payment success or failure status;
• billing contact information where applicable.

4.10 Waitlist, marketing, and communications information

If you join a waitlist, contact us, or opt in to communications, we may collect:

• name;
• email address;
• audience type, such as worker or recruiter;
• trade, region, organization, or hiring context;
• communication preferences;
• consent, unsubscribe, and notification metadata;
• support or sales messages.

4.11 Usage, device, analytics, and diagnostics information

We may automatically collect information such as:

• IP address;
• browser type and version;
• device type, operating system, and device identifiers;
• pages viewed and actions taken;
• referring and exit pages;
• dates, times, and duration of visits;
• product event metadata;
• error logs, traces, crash reports, and diagnostics;
• security, fraud-prevention, rate-limit, and abuse-prevention information.

We try to avoid sending sensitive resume or profile content to analytics and logging tools, but some metadata or identifiers may be processed by analytics, diagnostics, or security providers.

5. How We Collect Personal Information

We collect personal information:

• directly from you when you create an account, complete a profile, upload a resume, use AI-assisted features, join a waitlist, make a purchase, contact us, or use the Service;
• from your use of the Service, including logs, analytics, device information, cookies, and similar technologies;
• from recruiters, employers, schools, or organization administrators when they manage organization accounts, searches, candidates, notes, cohorts, or users;
• from service providers such as authentication, payment, analytics, communications, AI, document parsing, and security providers;
• from publicly available or third-party job-source information if job-agent/source-intelligence features are enabled.

6. How We Use Personal Information

We use personal information for the following purposes:

1. to provide, operate, maintain, and improve the Service;
2. to create and manage accounts;
3. to authenticate users and protect account security;
4. to create, update, and display worker profiles according to worker visibility settings;
5. to process resume uploads, parse resumes, generate profile suggestions, and generate resumes;
6. to provide AI-assisted profile, resume, matching, and recommendation features;
7. to enable recruiters and employers to search limited recruiter-visible profiles where workers have chosen visibility;
8. to enable platform-mediated contact requests and recruiting workflows;
9. to enable school, cohort, and assessment features;
10. to provide job-agent preferences, job matching, recommendations, and alerts;
11. to process payments, subscriptions, billing, and account administration;
12. to send transactional, service, account, security, support, billing, and legal notices;
13. to send marketing or promotional communications where permitted by law and where required consent has been obtained;
14. to provide customer support and respond to inquiries;
15. to monitor, analyze, debug, and improve the Service;
16. to prevent fraud, abuse, spam, unauthorized access, and security incidents;
17. to enforce our Terms, policies, and legal rights;
18. to comply with legal obligations and respond to lawful requests;
19. for other purposes disclosed when information is collected or with your consent.

7. Worker Profiles and Recruiter Visibility

Workers can create a full worker profile in Werko. A worker’s full profile is not automatically public.

If a worker chooses to make their profile visible and meets applicable profile-completion requirements, Werko may create and show recruiters a limited recruiter-facing profile projection. This recruiter-visible profile may include selected information relevant to recruiting, such as:

• name or display name;
• city/province or approximate location;
• trade and skill information;
• experience summaries;
• selected licenses or certifications;
• availability, relocation, travel, or compensation preferences;
• school/program/cohort context where applicable;
• assessment summaries where enabled;
• profile completion or activity information.

Werko may exclude or limit certain sensitive identifiers from recruiter-visible search experiences. However, workers should review their profile and visibility settings before making their profile visible.

Recruiters and employers may only use worker information for lawful recruiting and workforce discovery purposes and must comply with our Terms of Service.

8. Resume Uploads, AI Features, and Generated Content

Resume uploads and parsing

Workers may upload resumes to help create or update their Werko profile. We may store uploaded resumes, parse resume content, extract structured information, and present profile suggestions to the worker.

Resume files or resume content may be processed by Werko and by service providers that support document parsing, AI-assisted features, cloud storage, security, and diagnostics. Depending on configuration, these providers may include document parsing or AI providers such as LlamaCloud/LlamaParse or OpenAI.

AI-assisted features

AI-assisted features may help workers improve profile summaries, work-history descriptions, skills, certifications, generated resumes, matching, or related content. AI outputs may be inaccurate, incomplete, biased, or unsuitable. Workers should review and edit AI-generated content before relying on it.

AI model training and service improvement

We may use aggregated, de-identified, or otherwise privacy-protected information to evaluate, maintain, secure, and improve the Service and AI-assisted features.

We do not use identifiable resumes, worker profiles, assessment results, recruiter notes, or private communications to train foundation models or third-party AI models unless we clearly disclose that use and obtain any required consent. We also seek to ensure that third-party AI providers process user content only as authorized and not for their own model training except as disclosed and permitted.

9. Communications, Email, and SMS

We may send transactional or service-related communications, such as account, security, support, billing, profile, recruiter-contact, job-agent, assessment, school/cohort, legal, or policy notices.

We may send marketing or promotional communications where permitted by law and, where required, with your consent. You can unsubscribe from marketing emails using the instructions in the message or by contacting us at privacy@werko.ai.

If you provide a mobile number and opt in where required, we may send SMS or MMS messages for service-related notifications, account/security purposes, recruiter-contact workflows, job-agent notifications, or marketing messages. Message frequency varies. Message and data rates may apply. You may opt out of marketing SMS by replying STOP, and may reply HELP for help, where those features are enabled. Opting out of marketing messages does not necessarily stop transactional or service-related messages that are necessary to provide the Service or permitted by law.

For Canadian users, we intend to comply with Canada’s Anti-Spam Legislation (CASL), including consent, identification, and unsubscribe requirements for commercial electronic messages where applicable.

10. Cookies, Analytics, and Similar Technologies

We may use cookies, pixels, SDKs, local storage, and similar technologies to:

• operate the Service;
• remember preferences;
• authenticate users;
• improve security;
• understand Service usage;
• diagnose errors;
• improve performance;
• measure marketing or waitlist activity where enabled.

We may use analytics and diagnostics providers such as PostHog, Vercel Analytics, Google Analytics if enabled, Sentry, and Better Stack/Logtail. These providers may process usage, device, event, error, and diagnostic information.

At launch, if Werko does not use third-party targeted advertising networks, this policy should not be read to mean that we sell personal information for advertising. If targeted advertising or cross-context behavioral advertising is later enabled, we will update this Privacy Policy and provide any required notices and choices.

You can control cookies through your browser settings. Disabling cookies may affect some Service features.

10.1 Optional usage analytics

When you allow optional usage analytics, we use PostHog to understand which Werko pages visitors use and how they progress through signup, onboarding, job discovery, and application preparation. We collect a limited set of usage events, such as the type of page visited, the number of results returned, or a recorded manual application submission. When you are signed in, this activity can be linked to your Werko account through an account identifier. Your email preferences and other product consents are separate from this analytics choice.

The MVP PostHog usage events do not include your email address or its hash, name, phone number, resume text, message contents, freeform searches, form contents, raw page URLs or query strings, or campaign and advertising click identifiers. We do not enable PostHog session replay, automatic capture of clicks and form contents, or automatic console or performance capture for this MVP. Google Analytics and Vercel Analytics are not enabled for this MVP usage analytics rollout.

Sending an event to PostHog exposes network metadata, including the connection’s IP address. We disable GeoIP enrichment for our MVP events and configure PostHog to discard IP addresses from stored events after transformations. This does not make the connection anonymous or guarantee deletion of vendor network logs, backups or historical records.

You can allow or turn off optional usage analytics in the Werko app when an optional analytics provider is enabled: when you choose your account type after sign-up, on the first onboarding step for workers, in your account menu under “Usage analytics”, and in worker Notification settings. The choice starts off. We honor supported browser privacy signals. The choice is saved in that browser for the app’s site hostname only. Turning analytics off stops new optional usage collection when the choice takes effect. It does not automatically delete analytics data already sent. Our marketing site (www.werko.ai) does not offer this choice and keeps optional usage analytics off for all visitors, including visitors who allowed it there before October 18, 2026. You can also clear a saved choice through your browser’s cookie settings.

Our selected usage analytics project is hosted in PostHog US Cloud.

We save the optional analytics choice in a host-only cookie for up to 180 days. We no longer collect first-touch acquisition attribution (campaign parameters, advertising click identifiers, the referring site, or the landing page) from your browser. Our marketing site deletes the first-party cookie we used for this when it next loads, and the app deletes it when you turn usage analytics off. Attribution saved before October 18, 2026 may remain in private waitlist or account records, separate from events already sent to PostHog. When you sign up through a worker referral link or a waitlist invitation, we record only that fixed source label in your private account record. Private attribution values are not included in the MVP PostHog usage events.

For privacy requests, use the contact details in this privacy policy. The analytics preference control is not itself a deletion request or confirmation that deletion has occurred.

11. How We Disclose Personal Information

We may disclose personal information as follows:

11.1 To service providers

We may disclose personal information to service providers that help us operate the Service, such as providers for:

• authentication and identity management;
• hosting and infrastructure;
• databases;
• cloud storage;
• analytics;
• error monitoring, logging, and diagnostics;
• AI and document parsing;
• payments;
• email, SMS, and notifications;
• security, fraud prevention, rate limiting, and abuse prevention;
• customer support;
• legal, accounting, and compliance.

11.2 To recruiters and employers

If a worker chooses to make their profile visible, we may disclose a limited recruiter-visible profile to recruiters and employers using the Service. Recruiters may also create records relating to workers, such as favorites, saved searches, candidate pipeline entries, notes, and contact events.

11.3 To schools or training organizations

If you participate in school, program, cohort, or training features, we may disclose relevant enrollment, status, progress, or profile information to authorized school or organization administrators.

11.4 To organization administrators and collaborators

If your account is associated with an organization, certain information may be visible to authorized administrators or collaborators within that organization.

11.5 For legal, safety, and compliance reasons

We may disclose personal information if we believe it is necessary or appropriate to:

• comply with applicable law, legal process, or lawful government requests;
• enforce our Terms or other agreements;
• protect our rights, privacy, safety, property, users, or the public;
• prevent fraud, abuse, spam, security incidents, or illegal activity;
• establish, exercise, or defend legal claims.

11.6 Business transactions

If Werko is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to appropriate protections.

11.7 With consent or as disclosed

We may disclose personal information with your consent or as otherwise disclosed when the information is collected.

12. Service Providers and Cross-Border Processing

Werko may use service providers that process personal information in Canada, the United States, the European Union, and other jurisdictions. Privacy laws in those jurisdictions may differ from those in your province, state, or country, and your information may be subject to lawful access by courts, law enforcement, or government authorities in those jurisdictions.

Depending on which features are enabled, service providers may include:

This list may change as the Service evolves. We use contractual, technical, and organizational safeguards designed to protect personal information in accordance with this Privacy Policy and applicable law.

13. Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by law.

Retention periods may vary depending on the type of information and the reason we process it, including:

• account and profile data;
• resume uploads and parsed resume data;
• generated resume artifacts;
• recruiter searches, contact events, candidate notes, and audit logs;
• school/cohort records;
• assessment attempts and results;
• job-agent preferences and matches;
• payment and subscription records;
• analytics, logs, diagnostics, and security records;
• legal, tax, accounting, compliance, and dispute-resolution records;
• backups.

Some records may be retained after account closure or deletion where necessary for legal compliance, security, fraud prevention, billing, dispute resolution, audit, or enforcement purposes. We may also de-identify or aggregate information so that it no longer identifies an individual.

Our selected PostHog usage analytics project uses the current plan’s one-year event-retention period. That period does not establish that every copy, backup, or derived record is deleted after exactly one year. We are still confirming backend purge and deletion arrangements before stating an execution deadline.

We are still finalizing category-specific retention schedules and deletion workflows. We will avoid representing that all data is automatically deleted on a fixed timeline unless that process is operationally confirmed.

14. Security

We use technical, organizational, and administrative safeguards designed to protect personal information based on the sensitivity of the information and the risks associated with processing it. These safeguards may include access controls, encryption, monitoring, logging, vendor controls, and security review practices.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

If a privacy breach occurs, we will assess it and notify affected individuals and regulators where required by applicable law.

15. Your Privacy Rights and Choices - Canada

Subject to applicable law and identity verification, you may request to:

• access personal information we hold about you;
• correct inaccurate or incomplete personal information;
• withdraw consent where processing is based on consent, subject to legal or contractual restrictions and reasonable notice;
• request deletion or de-identification of certain information;
• ask questions or challenge our compliance with this Privacy Policy.

To make a request, contact us at privacy@werko.ai.

We may not be able to provide certain features if you withdraw consent or request deletion of information needed to operate those features. We may also retain certain information where permitted or required by law, including for legal, security, fraud-prevention, billing, dispute-resolution, audit, or enforcement purposes.

If Quebec privacy law applies to your personal information, you may have additional rights, such as rights relating to access, rectification, withdrawal of consent, de-indexation, portability, and information about automated processing, subject to applicable requirements and effective dates. Contact us at privacy@werko.ai for requests.

16. United States and California Privacy Rights

If we make the Service available in the United States, residents of certain states may have additional privacy rights, which may include rights to access, delete, correct, port, opt out of certain processing, limit certain uses of sensitive personal information, or appeal a privacy-rights decision.

For California residents, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, may provide rights to know, access, delete, correct, opt out of sale or sharing, limit use/disclosure of sensitive personal information, and not be discriminated against for exercising privacy rights, subject to legal requirements and exceptions.

At this time, Werko does not intend to sell personal information. If Werko uses targeted advertising or other activities that may be considered “sharing” under California law, we will provide required notices and opt-out choices.

To submit a privacy request, contact privacy@werko.ai.

17. EEA/UK Privacy Rights

If the GDPR, UK GDPR, or similar laws apply to your personal information, you may have rights such as access, correction, deletion, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority.

To submit a request, contact privacy@werko.ai. We may ask you to verify your identity before responding.

18. Children and Minors

The Service is not intended for individuals under 18 or the age of majority in their jurisdiction, whichever is higher, unless Werko expressly supports a school, apprenticeship, guardian, or other authorized program for such users.

We do not knowingly collect personal information from individuals under the applicable minimum age without appropriate authorization. If you believe a minor has provided personal information to us without appropriate authorization, contact us at privacy@werko.ai and we will take appropriate steps.

If Werko later supports apprentices, students, or minors through schools or training organizations, we will provide additional notices or consent processes as appropriate.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, such as by posting the updated policy, updating the effective date, sending an email, or displaying a notice in the Service.

Your continued use of the Service after an updated Privacy Policy becomes effective means that the updated policy applies to your use of the Service from that point forward, subject to applicable law.

20. Contact Us

If you have questions or requests about this Privacy Policy or our privacy practices, contact us at:

Email: privacy@werko.ai

Support: support@werko.ai

Mailing address: 422 Richards St #170, Vancouver, BC V6B 2Z4

Privacy officer/contact: privacy@werko.ai