Privacy
What we hold, and why.
Written against what the application actually stores, field by field, with the legal basis and retention period for each.
Effective 20 August 2026
Who controls your data
The data controller is Connektor Group LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States. You can reach us at hello@eyas.work or on +1 917 694 3549, 24/7 support. Eyas is a product of Connektor Group LLC.
What we never collect
We do not collect gender, race, or ethnicity. Not in a form, not in an optional field, not for research, and not behind a setting. There is no column for any of them in our database. Country and languages are the only facts about you that shape which work you are offered.
What we collect, and on what basis
Each row below is a category we actually store, with the reason we store it, the lawful basis we rely on under the UK and EU GDPR, and how long it is kept.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name | Addressing you in correspondence and in your decision email. | Contract: taking steps at your request before entering a contract. | Until deletion is requested. Erased within 30 days of a request. |
| Email address | Sending your assessment decision and replying to messages you send us. | Contract: taking steps at your request before entering a contract. | Until deletion is requested. Erased within 30 days of a request. |
| Country | Projects are assigned by country, and it determines whether we can pay you. | Contract, and our legitimate interest in routing work to eligible people. | Until deletion is requested. |
| Languages | Language queues open on the languages you work in. | Contract, and our legitimate interest in routing work you can do. | Until deletion is requested. |
| Assessment answers | Scoring your application and deciding the outcome. | Contract: taking steps at your request before entering a contract. | Identifying link erased on request. Anonymised answers kept for calibration. |
| Assessment telemetry: per-question timing, typing and paste activity, window-focus changes | Detecting undisclosed assistance during an assessment that you certified would be your own work, and calibrating how long questions actually take. | Legitimate interest in the integrity of an assessment that leads to paid work. Disclosed to you before the assessment begins. | Erased with your other identifying data on request. Retained anonymised for calibration. |
| Messages you send us | Answering your question. | Legitimate interest in responding to correspondence. | Until deletion is requested. |
How your answers are separated from your identity
Your name and email are stored in one table. Your assessment answers and telemetry are stored in separate tables, keyed only to an anonymous applicant identifier. The two are never joined in anything a grader sees, so the person scoring your work does not know whose work it is.
This is enforced in the database rather than by policy: the views and queries that serve graders select from the answer tables only and cannot reach the identity table.
Assessment telemetry, stated plainly
During the assessment, and only during it, we record how long you spend on each question, keystroke and paste activity, and when the window loses focus. We do not record what you type outside the answer fields, we do not read your clipboard, and nothing is recorded before you start or after you submit.
This exists because the assessment leads to paid work and you certify the answers are your own. It is disclosed on screen before you begin.
Who processes it for us
We use a small number of service providers to run the product. They process data on our instructions only, under contract, and none of them are permitted to use it for their own purposes.
| Category of processor | What it does | Location |
|---|---|---|
| Cloud database and authentication provider | Stores applicant records, assessment answers and telemetry, and runs sign-in for internal reviewers. | United States |
| Application hosting and content delivery provider | Serves this website and runs its server-side code. | United States |
| Transactional email provider | Delivers assessment decision emails and other service messages triggered by your application. | United States |
| Business mailbox provider | Receives and sends correspondence to and from our contact address. | United States |
We name our specific providers on request. Write to hello@eyas.work and we will tell you who they are.
Because our providers are in the United States, data from the UK and the EEA is transferred there. Those transfers rely on the Standard Contractual Clauses together with the additional safeguards in our agreements with each provider.
Deletion
Email hello@eyas.work from the address you applied with and we erase your identifying data within 30 days.
Anonymised assessment answers may be kept after that for calibrating how questions perform. Once the identifying link is erased those answers cannot be traced back to you, so they are no longer personal data.
Your rights in the UK and the EEA
Under the UK and EU GDPR you have the right to:
- Access the personal data we hold about you, and receive a copy.
- Have inaccurate data corrected.
- Have your data erased, which we do within 30 days.
- Receive your data in a portable, machine-readable format, or have it sent to another controller.
- Object to processing we carry out on the basis of legitimate interests, including the assessment telemetry.
- Restrict processing while a dispute about accuracy or legitimate interests is resolved.
- Withdraw consent at any time, where we rely on consent.
- Complain to a supervisory authority in the country where you live or work.
To exercise any of these, email hello@eyas.work. We answer within 30 days and we do not charge for it.
Your rights in California
Under the CCPA as amended by the CPRA, if you live in California you have the right to know what personal information we have collected about you, the sources it came from, the purposes we use it for, and the categories of third parties it is disclosed to. You have the right to delete it, to correct it, and to receive a portable copy. You have the right not to be discriminated against for exercising any of these rights, and we do not treat applicants differently for doing so.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done either. Because we do not, there is no opt-out link to provide, and no financial incentive is offered in exchange for your data.
We do not knowingly collect personal information from anyone under 16.
Cookies and similar technologies
The site sets no advertising or analytics cookies. What it does store in your browser, and why, is set out in the Cookie Policy.
Changes
If we change this policy we update the effective date at the top. If a change materially affects how we handle data belonging to people who have already applied, we email them.