Privacy

Last updated August 29, 2026

CanWork is operated by Pivot Course LLC.

We collect buyer account data (name, email, company profile), vendor contact details you enter, uploaded COI / W-9 / license files, extracted fields, evaluation results, and email delivery logs. Payment cards are handled by Stripe; we store customer and subscription identifiers, not full card numbers.

Production vendor files live in a private object store (not a public URL). Extracts and audit records live in Postgres. Files are encrypted at rest by the hosting provider. Only a signed-in buyer in that organization can open uploaded files. We use them to run the product: scoring, reminders, exports, and billing entitlements.

The public COI reader does not create a vendor record. It stores an audit line (IP, filename, confidence) and is rate-limited. Do not upload certificates that contain data you are not allowed to process.

Email is sent through Resend or Postmark when configured. Magic-link and vendor-upload messages include the minimum needed to complete the task.

We may email account holders about the product until they subscribe or unsubscribe. Transactional invite and deficiency mail is separate.

We use a Google tag to measure ad clicks and completed checkouts.

How long we keep files

While you are subscribed, we keep your vendor files, extracts, and account data so the product works. If you cancel, we keep that data so you can resubscribe. Ninety days after the subscription ends, we delete the organization: uploaded files, extracts, vendor records, and email logs. If you resubscribe before then, the clock stops.

To export or delete sooner, sign in and email support@canwork.app from the same inbox as your account. We complete deletion requests by hand. We are not a consumer reporting agency.