Privacy Policy

1. Information we collect

• Account information: name, email, phone, password, and role (Employer or Worker).
• Worker information: profile details, work classification, work authorization documentation, licenses and certifications, insurance documents, availability, and gig history.
• Employer information: company details, billing information, gig postings, and hiring activity.
• Verification data: email and phone verification, and uploaded identity or credential documents.
• Payment information: handled by a payment processor when payouts launch. Payouts are simulated during this pre-launch period, and we do not store full card numbers.
• Location during gigs: your device location while you are on the clock for a gig (see section 7).
• AI conversations: the messages you send to SONNY AI and its replies (see section 3).
• Usage data: device, log, and interaction data collected automatically.

2. How we use information

• To operate the Platform, match Workers to gigs, and enable scheduling.
• To verify identity, credentials, work authorization, and insurance.
• To process payments and prevent fraud.
• To provide support, resolve disputes, and improve the Platform.
• To power Platform AI features, including matching and SONNY AI.
• To comply with legal obligations.

3. AI features

Sonny uses AI models from Anthropic to run the features below. We send only what each feature needs, and you can use the Platform without chatting with SONNY AI.

Our AI provider, Anthropic, does not use your data to train its models under its commercial terms.

• SONNY AI chat (Workers and Employers): runs on Anthropic Managed Agents (Claude Sonnet). For a Worker we send your name, city and state, CDL class, endorsements, years of experience, and certifications. For an Employer we send your name, job title, company name, and city and state. We also send your messages and the results the chat needs to answer, such as gigs and applications. We do not send your email, phone number, date of birth, or license numbers.
• Chat history: Sonny deletes each chat from your account 14 days after it starts. Anthropic keeps its own records of these conversations under its own retention policy.
• Staff access to your chats: Sonny staff open a SONNY AI chat only to handle a reply you gave a thumbs down, a support ticket, a dispute, or a safety issue, and our staff tools log each opening with its reason. If you erase your account, we delete the SONNY AI chats Sonny stores at the same time.
• Document scan: when you scan a CDL, résumé, certificate, ID, DOT medical card, or an Employer's EIN letter, the image or PDF goes to Claude Haiku to pre-fill fields that you then check and confirm. We do not store the fields extracted from Employer documents.
• Match explanations: Claude Haiku writes short explanations for top matches, with names removed. See section 4.
• Chat titles: Claude Haiku writes a title for each chat from its opening text.
• Landing page chat: visitors who are not signed in chat with Claude Haiku. We identify a visitor only by a keyed hash of their IP address, keep no account, and record only the cost of the reply.
• AI tracing: we send usage details to Langfuse (tokens, timing, tool steps, and any thumbs vote you give a reply). We do not send message text, user IDs are hashed, and free-text fields that are sent pass through a filter that removes personal details.
• Feedback on AI replies: when you rate a reply with a thumbs up or down, we keep the vote. An optional note stays with Sonny (it is not sent to Langfuse), is cleared after 90 days, and is deleted if you erase your account.

4. Automated matching

Matching runs on rules first: a gig reaches a Worker only if the Worker holds the credentials the gig requires. Matches that pass are then ranked on fit. AI writes short explanations for top results, with names removed, but it does not decide who is hired. Employers make every hiring decision, and Workers decide which gigs to apply for.

5. How we share information

• Between Workers and Employers as necessary to facilitate matching and engagements.
• With the service providers listed in section 6, under appropriate agreements.
• With an EOR or staffing entity where one is party to an engagement.
• When required by law, or to protect rights, safety, and the integrity of the Platform.
• We do not sell personal information.

6. Service providers

These companies process personal information for us to run the Platform:

• Anthropic: AI models for SONNY AI, document scan, match explanations, and chat titles.
• Langfuse: AI tracing (usage details only, as described in section 3).
• Supabase: database, sign-in, and file storage.
• Vercel: website and app hosting.
• Upstash: rate limits. Phone numbers that send SMS are stored only as hashes.
• Sentry: error reports, including session replays with text masked and images blocked.
• Mapbox: map display. Nothing Mapbox returns is stored.
• VendorFlow: SMS messages.
• Resend: email.

7. Location data during gigs

When you clock in to a gig, you agree to share your device location while you are on the clock, so the Employer can follow the gig while it is in progress. Sharing stops when you clock out. Outside a gig, the app uses your location only when you choose to share it, for example a one-time share in a message. Live gig location is kept for 30 days after the gig ends, unless it is held for a dispute. You can turn location off in your device settings at any time.

8. Cookies and local storage

We do not use advertising or analytics cookies. The app stores a few things on your device so it works: your sign-in session, a queue of actions waiting to send when you are offline, recently loaded data so screens open without a connection, and preferences such as language and theme. Signing out clears your session, the saved data, and any actions still waiting to send.

9. How long we keep data

• SONNY AI chats: deleted from Sonny 14 days after the chat starts. Our AI provider keeps its own records under its retention policy (see section 3).
• Direct messages: 90 days, longer while a related gig is active or a dispute is open.
• Live gig location: 30 days after the gig ends, unless held for a dispute.
• AI usage counts: 24 hours, then kept only as daily totals.
• Notes on AI feedback: cleared after 90 days. The vote itself is kept.
• Everything else: for as long as needed to provide the Platform and to meet legal, compliance, and recordkeeping obligations.

10. Data security

We use reasonable technical and organizational measures to protect personal information, including access controls and row-level security. No system is perfectly secure.

11. Your rights

Depending on jurisdiction, users may have rights to access, correct, delete, or restrict use of their personal information, and to opt out of certain processing.

12. International and language

The Platform supports multiple languages, including English and Spanish. Where translations are provided as a courtesy, the English version controls.

13. Children

The Platform is not intended for anyone under 18, and we do not knowingly collect information from minors.

14. Changes to this policy

We may update this Policy and will communicate material changes through the Platform.

15. Contact

Questions about this Policy may be directed to privacy@workwithsonny.com.