I. LEGAL DISCLAIMER

This Privacy Policy describes Wokolako's data practices for human-AI collaboration services. It is not a contract and may be updated with 30 days' notice. For jurisdiction-specific rights (GDPR/CCPA).

II. PRIVACY POLICY

1. Data Collection & Sources

We collect data from:

• Talent/Employees: For placement, growth tracking, and certification

• Clients: For service delivery and partnership management

• Training Participants: For role-specific AI skill development

• Job Applicants: For evaluation via Woko-Scan Matrix

• Website Users: For service optimization

2. Data Sharing Principles

We share:

• Talent functional profiles (role skills/certifications, non-sensitive project highlights) with clients solely to enable collaboration

• Never shared without consent: Personal contact details, salary data, or raw performance metrics

• Third-party tools (e.g., Claude/Gemini): Process data under strict DPAs with anonymization

Further disclosures require:

a) Legal mandate, AND

b) Consent from affected parties

3. Data Retention Schedule

We retain data for:

• Talent project portfolios: 3 years post-engagement. (Archived for certification validation)

• Client training materials: Deleted 30 days post-program. (Matches T&C clause)

• Inactive client data: Purged after 12 months inactivity. (Automated archival first)

• Job applicant records: 2 years. (For talent pipeline development)

• Certification records: Indefinite (anonymized). (For industry benchmarking)

4. Security & Ethics Protocol

We implement:

• High-grade encryption for all data stores

• Zero-trust access controls: Talent access client systems via RBAC only

• Annual ethical AI audits: Human review of algorithmic decisions

• Automated bias detection: Immediate tool halt for discrimination risks

Incident response: 72-hour breach notification pledge

5. User Rights Implementation

• Access/Correction:

Update portfolio via Talent Portal within 48 business hours

• Deletion:

Request erasure post-engagement (excludes certification records/legal holds)

• Opt-Out:

Unsubscribe via email footer

• Sensitive Data Rule:

All client data = CLASSIFIED SENSITIVE. Talent access requires:

a) Project-specific NDA, AND

b) Minimum necessary RBAC rights

6. Automated Decisions Disclosure

We use AI for:

• Talent-client matching

• Training progress predictions

Human safeguards:

• Ethics panel reviews algorithmic outputs periodically

• Candidates may request manual reassessment

• No fully automated significant decisions (e.g., hiring/firing)