Who we are
SAO Labs Inc. (“Saolabs”, “we”, “us”) is a company with its registered office at 3012 Fauntleroy Ave SW, Seattle, WA, USA. We source and vet human experts and produce expert-labelled training and evaluation data for AI model companies. We also license our hiring and agent technology.
For the personal data described in this policy, SAO Labs Inc. is the controller, except where we say we act as a processor for a customer. Where the law requires it, our representative in the EU or UK is [EU/UK REPRESENTATIVE, if required].
What we collect
The personal data we collect depends on how you interact with us. We aim to collect only what we need for the purposes described below.
- Website visitors: technical data such as IP address, browser type, device information and pages requested, plus anything you send us through a contact form or by email. With your consent, analytics and advertising cookies also record how you use the site; see our cookie policy at /legal/cookies.
- Business customers and prospects: names, job titles, work email addresses, phone numbers, company details, correspondence, meeting notes and billing information.
- Experts and candidates: application details, CVs, work history, qualifications, identity and right-to-work information where needed, skills assessment and work-test results, and payment details if you are engaged.
- AI voice interviews: if you take part in an AI-assisted voice interview, we may record the audio and process recordings and transcripts. We tell you before the interview starts.
- Customer project data: personal data contained in data that customers ask us to label, evaluate or otherwise process on their behalf.
Experts who apply through Workor
Experts usually apply through https://www.workor.ai, which is a separate site. Its own terms and privacy notice may apply to the information you provide there, alongside this policy for the vetting and engagement work Saolabs carries out.
During vetting we may use AI voice interviews, real-world work tests and skills assessments. We use the results to decide whether to invite you onto projects and which projects suit your expertise.
Data we process for customers
When a customer asks us to work on their data, we act as a processor on their behalf under a data processing addendum. We use that data only on the customer's documented instructions and for no other purpose.
If you want to exercise rights over data a customer has shared with us, please contact that customer first. We will help them respond. You can read a summary of our processor terms on our data processing addendum page at /legal/dpa.
Why we use your data and our legal bases
Under the GDPR and UK GDPR we must have a legal basis for each use of personal data. The main purposes and bases are listed below.
- To run and secure our website: our legitimate interests in operating a reliable, secure site.
- To respond to enquiries and manage customer relationships: steps taken at your request before entering a contract, performance of a contract, and our legitimate interests in running our business.
- To vet, engage and pay experts: steps taken at your request before entering a contract, performance of a contract, and our legitimate interests in building a qualified expert network.
- To record and transcribe AI voice interviews: our legitimate interests in consistent, fair assessment, or your consent where the law requires it.
- To send marketing about our services: our legitimate interests or your consent, depending on where you are. You can opt out at any time.
- To meet legal obligations, such as tax, accounting and responding to lawful requests: compliance with a legal obligation.
- To establish, exercise or defend legal claims: our legitimate interests.
Automated processing and AI-assisted screening
We use AI tools to help assess expert applications, for example by transcribing and scoring voice interviews and work tests. These tools support our decisions. They are not intended to make decisions that produce legal or similarly significant effects about you without human involvement.
If you are affected by an outcome of our screening, you can ask for a human to review it, give your point of view and contest the decision. Write to privacy@saolabs.ai and we will arrange a review by a member of our team.
How long we keep data
We keep personal data only for as long as we need it for the purposes above, including to meet legal, accounting or reporting requirements. When it is no longer needed we delete or anonymise it.
Where we have set specific periods, they are as follows. Customer project data is kept in line with the customer's instructions and our agreement with them.
- Expert application data, assessment results and voice interview recordings for candidates who are not engaged: [RETENTION PERIOD].
- Expert records for engaged experts: for the duration of the relationship and [RETENTION PERIOD] afterwards.
- Customer and prospect business contact data: [RETENTION PERIOD] after our last meaningful interaction.
- Website server logs: [RETENTION PERIOD].
International transfers
Saolabs is based in the United States, and our experts, customers and service providers are located in many countries. Your personal data may therefore be transferred to and processed in countries other than your own.
Where required, we use the European Commission's standard contractual clauses (SCCs) and the UK International Data Transfer Addendum or Agreement (IDTA) to protect personal data transferred out of the EEA or UK. You can ask us for more information at privacy@saolabs.ai.
Security
We use technical and organisational measures designed to protect personal data against loss, misuse and unauthorised access. No system is perfectly secure, but we work to keep risk low and to respond quickly if something goes wrong.
You can read more about how our security programme is designed on our security page at /security.
Your rights
Depending on where you live, you may have the rights listed below. We will not discriminate against you for exercising them. We may need to verify your identity before acting on a request, and you can use an authorised agent where the law allows.
If you are in the EEA or UK and are unhappy with how we handle your data, you can complain to your local supervisory authority. We would appreciate the chance to resolve your concern first.
- Access: ask for a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your data in certain circumstances.
- Restriction: ask us to limit how we use your data.
- Portability: ask for your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests, including direct marketing.
- Withdraw consent: where we rely on consent, withdraw it at any time without affecting earlier processing.
- US state rights, including under the CCPA as amended by the CPRA: know what we collect and how we use it, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined.
Children
Our website and services are intended for businesses and for adult professionals. We do not knowingly collect personal data from children.
If you believe a child has given us personal data, please contact privacy@saolabs.ai and we will delete it.
Contact
For privacy questions or to exercise your rights, email privacy@saolabs.ai. For other legal notices, email info@saolabs.ai.
You can also write to SAO Labs Inc., 3012 Fauntleroy Ave SW, Seattle, WA, USA. Our EU/UK representative, where required, is [EU/UK REPRESENTATIVE, if required].