Privacy Policy

1.1 Information You Provide Directly

We collect information you voluntarily provide when you create an account, build a profile, use Platform features, or communicate with us, including:

(a) Account and Profile Information:

• Full name, email address, phone number, and login credentials
• Professional title, employer/organization name, and work history
• Educational background, degrees, and institutions
• Country of origin, nationality, and immigration status information
• Professional achievements, awards, publications, patents, memberships, and other evidence of extraordinary ability
• Photographs and profile images
• Biography and professional summary
• User type (Talent, Employer, Staffing Agency, or Immigration Attorney)
• For Attorneys: bar admission information, licensing jurisdictions, practice areas, and firm affiliation
• For Employers/Agencies: company name, size, industry, EIN, and business information

(b) Documents and Evidence:

• Resumes, curricula vitae, and cover letters
• Evidence documents supporting O-1 visa criteria (awards documentation, publication records, membership certificates, press coverage, salary information, contracts, recommendation letters, and similar materials)
• Interest letters and related correspondence
• Job postings and job descriptions
• Any other files, documents, or materials you upload to the Platform

(c) Communications:

• Messages sent through the Platform's messaging features
• Communications with O1DMatch support
• Survey responses and feedback

(d) Payment Information:

• Billing name and address
• Payment card information (processed and stored by Stripe; O1DMatch does not store full card numbers)
• Subscription plan and billing history
• Promotional code usage

1.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain information, including:

(a) Usage Data:

• Pages and features accessed, actions taken on the Platform
• Search queries and browsing activity within the Platform
• AI scores viewed, interest letters generated, and matches explored
• Date, time, frequency, and duration of Platform use
• Referring and exit pages

(b) Device and Technical Information:

• IP address
• Browser type and version
• Operating system and device type
• Screen resolution and language preferences
• Unique device identifiers

(c) Cookies and Similar Technologies:

• Session cookies (to maintain your login state)
• Persistent cookies (to remember your preferences)
• Analytics cookies (to understand Platform usage patterns)

See Section 7 for more information about cookies.

1.3 Information from Third Parties

We may receive information about you from third parties, including:

• Payment verification information from Stripe
• Authentication data if you sign in using third-party services (e.g., Google OAuth)
• Publicly available professional information to supplement your profile (with your consent, where required)

We use the information we collect for the following purposes:

2.1 Platform Operations and Service Delivery

• Creating and managing your account
• Facilitating connections between Talent, Employers, Agencies, and Attorneys
• Processing and displaying job postings
• Enabling messaging and communication between Users
• Processing subscription payments and billing

2.2 AI-Powered Features

• Performing AI evidence scoring and assessment across the eight USCIS O-1 extraordinary ability criteria
• Generating interest letters using AI-assisted templates
• Matching talent with relevant job opportunities and employers
• Providing AI-generated recommendations and assessments
• Training, improving, and developing our AI models and scoring algorithms

2.3 Anonymization and Matching

• Creating anonymized talent profiles for display to Employers and Agencies
• Facilitating the matching process while protecting talent identity until consent is given
• Generating anonymized and aggregated data for analytics and platform improvement

2.4 Communications

• Sending transactional emails (account verification, password resets, subscription confirmations)
• Sending notifications about matches, interest letters, messages, and Platform activity
• Sending service updates and announcements
• Responding to your inquiries and support requests

2.5 Analytics and Improvement

• Understanding how Users interact with the Platform
• Analyzing usage patterns to improve features and user experience
• Conducting research and generating aggregated, anonymized insights
• Debugging, testing, and improving Platform performance and security

2.6 Legal and Compliance

• Complying with applicable laws, regulations, and legal processes
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of O1DMatch, our Users, and the public
• Detecting and preventing fraud, abuse, and security threats

3.1 Anonymized Display

Talent profiles are displayed to Employers and Agencies in an anonymized format. Personally identifying information — including name, contact information, specific employer names, and other details that could directly identify the talent — is redacted or obscured in the anonymized profile view.

3.2 Identity Disclosure

A Talent User's identity is revealed to an Employer or Agency only when the Talent User affirmatively accepts an interest letter or otherwise explicitly consents to identity disclosure through the Platform's designated mechanisms.

3.3 Limitations

O1DMatch does not sell your personal information. We share your information only in the following circumstances:

4.1 With Other Platform Users

• Anonymized Talent Profiles: Employers and Agencies can view anonymized talent profiles as described in Section 3.
• Revealed Profiles: When a Talent User consents to identity disclosure, relevant profile information is shared with the applicable Employer or Agency.
• Employer/Job Information: Job postings and employer information are visible to Talent Users and Attorneys.
• Attorney Directory: Attorney profile information is visible to other Users browsing the directory.
• Messages: Messages sent through the Platform are shared with the intended recipients.

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Stripe, Inc. — Payment processing, subscription management, and billing
• Supabase — Database hosting, authentication, and backend infrastructure
• SendGrid (Twilio) — Transactional and notification email delivery
• Google Analytics (if applicable) — Website analytics and usage tracking
• Cloud hosting providers — Data storage and computing infrastructure
• AI service providers — AI model hosting and processing

These service providers are contractually obligated to use your information only for the purposes of providing services to O1DMatch and in accordance with applicable data protection laws.

4.3 For Legal Compliance

We may disclose your information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms of Service or other agreements
• Protect the rights, property, or safety of O1DMatch, our Users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Respond to lawful requests from law enforcement or government agencies

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, asset sale, or other business transfer involving O1DMatch (or its parent, the Innovative Global Talent Agency network), your information may be transferred to the acquiring or successor entity. We will notify you via email and/or a prominent notice on the Platform of any such change in ownership and any choices you may have regarding your information.

4.5 With Your Consent

We may share your information with third parties when you provide explicit consent to such sharing.

4.6 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other purposes.

5.1 Active Accounts

We retain your personal information for as long as your account remains active and as needed to provide the Platform's services.

5.2 After Account Closure

Following account deletion or termination, O1DMatch retains your information for a reasonable period as necessary to:

• Comply with legal obligations (including tax, financial reporting, and immigration-related record-keeping requirements)
• Resolve disputes and enforce our agreements
• Prevent fraud and abuse
• Maintain platform integrity and security
• Fulfill the legitimate business purposes described in this Privacy Policy

5.3 Retention Periods

Specific retention periods vary by data type and purpose. Generally, we retain account data for a minimum of three (3) years following account closure, and financial/billing records for a minimum of seven (7) years as required by tax and financial regulations. AI training data derived from your Content may be retained indefinitely in anonymized or aggregated form.

5.4 Deletion

When personal information is no longer needed for any retained purpose, we will delete or anonymize it in accordance with our data management practices. Deletion from backup systems may take additional time.

6.1 Access and Correction

You may access and update most of your personal information through your account settings on the Platform. If you need assistance accessing or correcting information that is not available through your account settings, contact us at info@o1dmatch.com.

6.2 Account Deletion

You may request deletion of your account by using the account deletion feature in your settings or by contacting us at info@o1dmatch.com. Please note that:

• Account deletion does not result in immediate deletion of all your data. We retain certain information as described in Section 5.
• We may retain information necessary for legal compliance, dispute resolution, fraud prevention, and enforcement of our Terms of Service.
• Aggregated or anonymized data derived from your information may be retained indefinitely.
• Content shared with other Users (such as messages or revealed profile information) may remain visible to those Users.

6.3 Communication Preferences

You may opt out of non-essential marketing communications by following the unsubscribe instructions in our emails or adjusting your notification preferences in your account settings. You cannot opt out of transactional communications necessary for Platform operations (such as billing confirmations, security alerts, and Terms of Service updates).

6.4 Cookie Preferences

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may impair Platform functionality. See Section 7 for more information.

7.1 Types of Cookies We Use

7.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or alert you when cookies are being sent. However, some Platform features may not function properly without cookies.

7.3 Do Not Track

The Platform does not currently respond to "Do Not Track" browser signals, as there is no industry-wide standard for this technology.

The Platform integrates with and relies on third-party services. Each third-party service has its own privacy policy governing its collection and use of data:

O1DMatch is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with.

9.1 Data Processing in the United States

The Platform is operated from the United States, and your information is processed and stored in the United States. If you access the Platform from outside the United States, you understand and consent to the transfer, processing, and storage of your information in the United States, where data protection laws may differ from those in your country of residence.

9.2 Consent to Transfer

By using the Platform, you explicitly consent to the transfer of your personal information to the United States and acknowledge that U.S. data protection laws may not provide the same level of protection as the laws of your home country.

9.3 Safeguards

We implement reasonable administrative, technical, and physical safeguards to protect your information regardless of where it is processed.

The Platform is not intended for use by individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18.

If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

If you believe that we have inadvertently collected information from a child under 18, please contact us immediately at info@o1dmatch.com.

11.1 Technical Safeguards

O1DMatch implements industry-standard technical security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Secure authentication mechanisms and password hashing
• Access controls and role-based permissions
• Regular security assessments and monitoring

11.2 Operational Safeguards

We maintain operational security measures including:

• Limiting access to personal information to authorized personnel who need it for legitimate business purposes
• Employee and contractor confidentiality obligations
• Incident response procedures for potential data breaches
• Regular review and updating of security practices

11.3 No Absolute Guarantee

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your information. You use the Platform and transmit information at your own risk.

11.4 Breach Notification

In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities as required by law.

12.1 California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)

If you are a California resident, you may have additional rights under the CCPA/CPRA, including:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions (such as legal compliance, completing transactions, and security purposes).
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: O1DMatch does not sell your personal information. We do not share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Authorized Agent: You may designate an authorized agent to make requests on your behalf, subject to verification.

12.2 Exercising California Rights

To exercise your California privacy rights, contact us at info@o1dmatch.com or call (561) 794-4621. We will verify your identity before processing your request.

12.3 Categories of Information Collected

In the preceding twelve (12) months, we have collected the following categories of personal information: identifiers (name, email, phone, IP address); professional/employment information; education information; internet/electronic network activity; geolocation data (derived from IP address); and inferences drawn from the above.

12.4 Other State Privacy Laws

If you reside in a state with additional consumer privacy protections (such as Virginia, Colorado, Connecticut, Utah, or others), you may have similar rights to access, delete, correct, and opt out. Contact us at info@o1dmatch.com to exercise any applicable rights.

O1DMatch reserves the right to update or modify this Privacy Policy at any time.

For material changes, we will provide notice via email to the address associated with your account and/or through a prominent notice on the Platform at least thirty (30) days before the changes take effect.

Non-material changes (such as formatting, clarifications, or typographical corrections) may be made at any time without advance notice.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically for any changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us. For privacy-specific inquiries, please include "Privacy" in the subject line of your email.

15.1 AI and Automated Decision-Making

The Platform uses artificial intelligence and automated processing to generate evidence scores, match talent with opportunities, and produce interest letters. These automated tools assist Users but do not make final decisions regarding visa eligibility, employment, or other outcomes. Users are encouraged to use AI-generated outputs as one factor among many in their decision-making and to consult with qualified professionals.

15.2 Anonymized Data for AI Training

O1DMatch may use anonymized, aggregated, or de-identified data derived from User Content and Platform usage to train, improve, and develop its AI models and algorithms. This data is processed in a manner that does not identify individual Users.

15.3 Third-Party Links

The Platform may contain links to third-party websites or services. This Privacy Policy does not apply to third-party sites, and we are not responsible for their privacy practices.

15.4 Governing Law

This Privacy Policy is governed by the laws of the State of Florida, consistent with the Terms of Service.