Privacy

Last updated August 28, 2026

CanWork is operated by Pivot Course LLC.

We collect buyer account data (name, email, company profile), vendor contact details you enter, uploaded COI / W-9 / license files, extracted fields, evaluation results, and email delivery logs. Payment cards are handled by Stripe; we store customer and subscription identifiers, not full card numbers.

Files live in the object store you configure (local disk in development, S3-compatible storage in production). Extracts and audit records live in Postgres. We use them to run the product: scoring, reminders, exports, and billing entitlements.

The public COI reader does not create a vendor record. It stores an audit line (IP, filename, confidence) and is rate-limited. Do not upload certificates that contain data you are not allowed to process.

Email is sent through Resend or Postmark when configured. Magic-link and vendor-upload messages include the minimum needed to complete the task.

To export or delete an organization, sign in and email the address on your account from that same inbox. We are not a consumer reporting agency.