Legal · privacy policy

Privacy

Three kinds of people's data pass through us: site visitors, client and prospect contacts, and engineers. Each one gets its own section, because each one is different.

Entity: Stackk Recruiting Services LLC ("Stackk," "we," "us"), trading as wepair.works
Formed: Wyoming limited liability company
Registered: 30 N Gould St, Ste 67524, Sheridan, WY 82801, United States
Privacy contact: privacy@wepair.works
Last updated: 4 September 2026

The short version

We do not sell personal data, and we run no advertising cookies or ad pixels.
Candidates: your full name and contact details reach a client only after you approve that specific submission.
Founder Gate sessions are recorded only with your consent. Decline the recording and you are still assessed.
Every retention period below is a number, not “as long as necessary”.
One address for every request: privacy@wepair.works, answered within 30 days.

01Site visitors

What we collect: IP address, browser and device type, pages viewed, referring link, and anything you type into a form on this site.
Why: To keep the site working, see which pages get read, and reply to you when you write.
Cookies: PostHog, for traffic and product analytics. It sets a first-party cookie so a returning visit is not counted as a new person. A session cookie handles form submission. No advertising cookies, no third-party ad pixels. Block cookies in your browser and the site still works.
Kept for: 12 months of analytics data. Anything you send through a form is handled under section 02 or 03 below, depending on who you are.

02Prospects and clients

Prospects — the people we email cold

What we collect: Name, job title, work email, company, and the public signal that put you on our list: a job posting, a funding announcement, a public post about hiring.
Where it comes from: Company career pages, LinkedIn, Crunchbase, press coverage, business-contact data providers.
Why: Business-to-business outreach about a service relevant to your role. Where GDPR or similar law applies, our legal basis is legitimate interest, balanced against the fact that we contact named decision-makers at their work address, about a hiring need they have stated publicly, in small targeted volumes.
Your control: Every email has a working unsubscribe and comes from a named founder. Replying “no thanks” works too. Opt-outs are permanent and applied across all our sending domains. We honour them within 10 business days, usually the same day.
Kept for: 24 months from last contact, or until you opt out. After an opt-out we keep only your email address, on a suppression list, so we do not contact you again by mistake.

Clients

What we collect: Contact details for the people we work with, contract and SOW records, invoices and payment records, and the content of the work-related communication between us.
Why: To deliver the engagement, invoice you, run the biweekly engineering digest, and meet tax and accounting obligations.
Kept for: The life of the relationship, plus seven years for financial records.

Need a signed Data Processing Agreement? Ask at privacy@wepair.works. We have one ready.

03Engineers: candidates and contractors

This is where we hold the most sensitive data, so it gets the most detail.

Candidates, at the vetting stage

What we collect: Name, contact details, country and timezone, CV, work history, links you give us (GitHub, portfolio), salary or rate expectations, and the record of your Founder Gate session: our notes, rubric scores, the take-home or pairing exercise, and a written summary.
Recordings: Sessions are recorded only with your consent. Decline the recording and you are still assessed.
Why: To assess you, and — with your permission for each specific role — to present you to a client.
What a client sees: Your first name and last initial, years of experience, stack, industry background, timezone, rate, and the vetting summary. Your full name and contact details reach a client only after you agree to that specific submission.
Kept for: 24 months from your last contact with us, so we can come back to you when a matching role appears. Ask us to delete it earlier and we will.

Contracted engineers

What we collect, on top of the above: Legal name, address, national tax ID, date of birth where a payment provider requires it, bank or payment-platform details, your signed services agreement, your Form W-8BEN or W-8BEN-E, your invoices, and evidence of where the services were performed — for example timezone-stamped commit or deliverable logs.
Why: To pay you, to meet US tax-documentation rules, and to hold the records that support the contracting structure set out in our legal terms.
Kept for: Four years after the engagement ends, for tax and evidentiary reasons. W-8 forms are re-collected every three years while you are active.
Engineers employed in Peru: We additionally process the data required to run planilla: PLAME declarations, AFP/ONP pension enrolment, EsSalud, CTS and gratificaciones records. We keep it for the period Peruvian law requires.

05International transfers

Our engineers are mostly in Latin America and India. Our clients are in the United States. We are a US company. So personal data moves from those countries to the US routinely and, for client-facing profiles, on to US clients.

Where transfer-restriction rules apply, we rely on the appropriate mechanism: Standard Contractual Clauses or the equivalent local instrument, plus the consent you give when you agree to a specific submission. Our contracts with service providers carry the same obligations.

06Security

Access to candidate, contractor and client data is limited to the two founders, and to any contractor with a specific need.
Multi-factor authentication on every business account.
Encryption in transit and at rest with our providers.
Tax documents, IDs and payment details sit in access-controlled storage, separate from general working files.
If a breach affects your data, we notify you and any required regulator without undue delay.

We are a small firm, and we will not claim enterprise security certifications we do not hold. If you need a security questionnaire completed, ask.

07Your rights

Depending on where you live, you may have the right to:

know what we hold about you, and get a copy
correct it
delete it
object to or restrict how we use it
withdraw consent — for a recording, or for a submission to a client
take your data elsewhere in a portable format
opt out of marketing email: always, immediately, no conditions

How: email privacy@wepair.works. We reply within 30 days. We may ask you to confirm your identity first. There is no charge, unless a request is repetitive or excessive.

Some data we must keep even if you ask us to delete it — signed contracts, invoices, W-8 forms and place-of-performance evidence, for the retention periods above. We will tell you when that applies, and delete everything else.

United States: California, Colorado, Connecticut, Virginia and other state privacy laws give residents these rights, including the right not to be discriminated against for using them. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
EU and UK: You can complain to your data protection authority.
Peru: Your ARCO rights under Ley 29733 (Ley de Protección de Datos Personales) apply, and you can complain to the Autoridad Nacional de Protección de Datos Personales.
Brazil, Mexico, Colombia, Argentina: Equivalent rights under LGPD, LFPDPPP, Ley 1581 and Ley 25.326 apply. We handle those requests the same way.

08Automated decisions

We do not use automated decision-making or AI screening to accept or reject candidates. Every candidate we present has been assessed by a founder in a live session. We use software to organise applications and to help draft notes, but a human makes the call.

09Children

Our services are for businesses and working professionals. We do not knowingly collect data from anyone under 18.

10Changes and contact

We update this page when our practices change, and move the “last updated” date. For material changes affecting candidates or contractors, we email you directly.

Questions about your data, a Data Processing Agreement, the current subprocessor list or a completed security questionnaire: email privacy@wepair.works. A founder reads it. General enquiries go to hello@wepair.works.

Stackk Recruiting Services LLC · 30 N Gould St, Ste 67524, Sheridan, WY 82801, United States