Stratum (“Stratum,” “we,” “us”) is a workforce platform that introduces credentialed immigrant professionals to US firms. We collect a small, deliberate amount of information to do that work, and we share it only with the people who need to see it. This policy explains what we collect, why, and what you can do about it.
1. What we collect
We collect three kinds of information:
- Account information— the email address, name, password (hashed), and role (“talent” or “employer”) you provide when you sign up.
- Profile and credential data — the wizard inputs talent submit during onboarding: country of training, years of experience, work-authorization status, languages, self-summary, credential filings (degrees, licenses, certificates), and work samples (drawings, case summaries, lab reports, code links, portfolio photos, etc.). For employers, this includes company name, role description, budget range, and timeline.
- Usage and device data — standard log information: IP address, browser type, pages visited, and timestamps. We use this for security, debugging, and aggregate analytics.
2. How we use it
We use what we collect to:
- Vet talent against vertical-specific rubrics. This includes running credential filings and work samples through an AI-assisted review (Anthropic's Claude) and human admin review.
- Match approved talent to employer requests and introduce the two sides when there is fit.
- Operate the product: authenticate users, send transactional email, prevent abuse, and improve the wizard and review flows.
- Aggregate and de-identify usage data for our own analytics and for the citation-grade research we publish about the foreign-trained workforce.
3. AI assessments
Talent submissions are processed by a large language model (Anthropic Claude) against the rubric defined for their vertical. The model output is stored as a structured assessment alongside the human admin's notes and overrides. We do not allow the model provider to retain or train on your submissions. The final “status” on a talent profile is always set by a human admin, not by the model alone.
4. Who we share it with
We do not sell personal information. We share it in three narrow ways:
- Employers, only after explicit introduction. When you are matched to an employer engagement, we share the named profile (and, with your consent, the supporting files) with that one employer. We never bulk-share talent lists. The anonymous profile cards on the public site do not include identifying information.
- Processors who run the platform. Supabase (database and object storage), Anthropic (AI assessment), Resend (transactional email), Vercel (hosting and CDN), and PostHog (product analytics). Each is bound by a data-processing agreement.
- Legal disclosures, if we are compelled by valid legal process. We will tell you unless we are prohibited from doing so.
5. How long we keep it
We keep talent profiles, credentials, and assessments for as long as the account is active and for 24 months after the last activity, after which we delete or anonymize them. Employer request records are kept for 24 months after the engagement closes. Aggregated, de-identified usage data may be kept indefinitely.
6. Your rights
You can ask us to access, correct, export, or delete the personal information we hold about you. Email privacy@stratum.work and we will respond within 30 days. Talent can also delete their account directly from the profile page, which deletes the profile, credentials, work samples, and assessment records.
7. Security
Credential and work-sample files are stored in private buckets with row-level access policies — only the owning talent and our admins can read them. Files shared with an employer during an introduction are released by signed URL, not by changing the underlying ACL. Database access is gated by Supabase row-level security with role-based policies. All traffic is TLS-encrypted in transit.
8. Jurisdictions
If you are in the EU or UK, you have rights under the GDPR and UK GDPR — including the right to lodge a complaint with your local supervisory authority. If you are a California resident, you have rights under the CCPA, including the right to know, delete, and opt out of any sale of personal information (we do not sell personal information). Email privacy@stratum.work to exercise any of these rights.
9. Children
Stratum is intended for adult professionals. We do not knowingly collect information from anyone under 16. If you believe a minor has submitted information, contact us and we will delete it.
10. Changes
We may update this policy. Material changes will be announced by email to active accounts and at the top of this page. The “Last updated” date will always reflect the current version.
Questions? Email privacy@stratum.work. See also our terms of service.