Legal

Privacy Policy

Privacy framework. Pukot adopts the EU General Data Protection Regulation (EU GDPR) and UK GDPR as the privacy framework for this service. This policy does not represent that Pukot complies with any other privacy regime.

This policy explains how Pukot collects, uses, protects and shares personal information in connection with contributor profiles, contributor programs, study cohorts, human-judgment data services, enterprise projects, research and the Pukot website.

1. Controller and contact

Pukot is the service and operating identity used for these activities. Where a specific contracting legal entity controls personal data for a commercial project, that entity will be identified in the applicable agreement, study notice or intake flow. Privacy questions and rights requests can be sent to jakub@pukot.ai.

2. Information we collect

Depending on how you use Pukot, we may collect your name, email, phone number, messaging handle, country, organization, referral or acquisition source, preferred language, age or eligibility information, self-described skills or areas of knowledge, enterprise project or evaluation descriptions, cohort membership, task responses, activity and timestamps, delivery and localization metadata, answer-quality and contributor-reliability measures, cohort-utility measures, reward allocations, payment records and technical information. Optional fields do not need to be provided.

Please do not submit credentials, passwords, unnecessary sensitive personal information or confidential production data through a general website intake form. Commercially sensitive project material should be shared through an agreed project process.

3. How we collect information

Information may come from website forms, contributor profile and eligibility flows, surveys, questionnaires, annotation and classification tasks, preference and ranking exercises, evaluation and benchmarking, open-ended responses, controlled research, human review, project administration and later real-world outcomes.

4. Purposes and legal bases

We use personal information to create and maintain contributor profiles, assess program eligibility and task fit, recruit and admit contributors, record consent, route and localize questions, operate studies and enterprise projects, evaluate answer and contributor quality, measure cohort usefulness, administer rewards and payments, prevent fraud, communicate with users, improve Pukot, conduct research and model evaluation, protect systems and meet contractual or legal obligations.

Under EU GDPR and UK GDPR, the legal basis may be consent, performance of a contract or steps taken at your request, legitimate interests, or compliance with a legal obligation, depending on the processing activity.

5. Scoring and profiling

Pukot may create versioned, task-specific measures of answer usefulness, contributor reliability, demonstrated capability, matchability and cohort performance. These measures can consider validity, relevance, information added, consistency, coverage, integrity, calibration where measurable, scarcity within a study and later outcomes. They may influence routing, future invitations and reward allocation. Raw volume alone does not determine reward.

Pukot does not intend to treat a single universal score as a complete measure of a person's intelligence or value. Different evidence may matter for different tasks and programs.

Where EU GDPR or UK GDPR gives you rights in relation to profiling or automated decision-making, those rights apply. Pukot does not intend contributor scoring to produce solely automated decisions with legal or similarly significant effects without the safeguards required by the applicable GDPR framework.

6. Human judgment data and outputs

Responses may be analyzed with other responses, compared with machine outputs, expert review or later outcomes, and used to create datasets, evaluation methods, research and Pukot products. Buyer-facing outputs are designed to exclude direct personal identifiers unless a project specifically requires identified data and the necessary safeguards are in place. Contributor administration data is separated from task-response data where practical.

7. Data minimisation

We seek to collect only information reasonably necessary for operational, research, quality-control, payment, contractual, security or compliance purposes. Contributor administration data is not sold as a standalone personal-data product and is not intentionally used for unrelated advertising.

8. Sharing and processors

We may share necessary information with service providers that support hosting, storage, analytics, security, communications, task administration or payments, and with professional advisers or authorities where required. Providers should receive only the information reasonably necessary for their role and be subject to appropriate contractual or legal safeguards.

9. International transfers

Pukot is a fully remote global service and information may be processed in more than one country. Where EU GDPR or UK GDPR restricts an international transfer, Pukot will use an applicable transfer mechanism or safeguard, such as an adequacy decision, Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, as appropriate.

10. Retention and security

We retain personal information only as long as reasonably necessary for its purpose, auditability, payment reconciliation, dispute handling, contracts, research integrity and legal obligations. We may retain de-identified or aggregated information for longer. We use reasonable technical and organisational security measures, but no online service can guarantee absolute security.

11. Your GDPR rights

Subject to EU GDPR or UK GDPR and the circumstances of the processing, you may have rights to access, correction, erasure, restriction, objection, withdrawal of consent, data portability and information about certain automated decisions. Requests may require identity verification and may be subject to lawful exceptions or retention requirements.

You may also have the right to complain to the relevant EU supervisory authority or the UK Information Commissioner's Office where the applicable GDPR framework gives you that right.

12. Age

The current public contributor intake is limited to people aged 18 or older. Pukot does not knowingly recruit children through the public contributor program. Any future project involving minors would require a separately designed and appropriately consented process.

13. Changes

We may update this policy as Pukot develops. A new effective date or version will identify material changes.