CoreInsp
← Home

Plain-English Privacy

Privacy Policy

Pre-launch. This is a working draft pending legal review.

What we collect

From inspectors:

  • Email address (via your sign-up)
  • Display name, headline, bio, city/state/zip
  • Self-reported credentials (badge name, optional issue and expiration dates, and an optional photo of the card) plus specialty experience
  • Self-declared employment status and any linked-company relationships you choose to declare
  • Job interest expressions (which jobs you said you're interested in, and the optional message you sent)
  • An optional resume file (PDF or Word) that stays private to you until you explicitly attach it when expressing interest in a job
  • Availability date ranges (when you’ve blocked dates as unavailable for new work)
  • Open-to-opportunities setting (off / public / hidden)

From inspection companies:

  • Email address (via your sign-up)
  • Company name, location, contact info, description, and taxonomy assignments you set
  • Job postings you create and reviewer notes on workers who expressed interest
  • Logo image you upload

We store usage events for moderation and audit purposes — claim approvals, taxonomy edits, expressed interests, and the like.

What we do with it

We use your information to power the platform — to display your profile to relevant viewers, to match inspectors with jobs they qualify for, to surface companies in the directory, to send transactional emails about platform events you take part in, and to fight abuse.

We do not sell your data. We do not share it with advertisers. We do not use it for marketing outside CoreInsp.

Who sees what

Visibility is event-driven, not connection-managed. Your profile is visible to:

  • Companies whose jobs you've expressed interest in (while the application is open)
  • Companies you're currently assigned to or working for
  • Companies with whom you have a confirmed past relationship (read access to historical profile only)
  • Companies you've self-declared as full-time, while that declaration is active
  • All signed-in employers if your open-to-opportunities setting is "Public"

If your open-to-opportunities setting is "Hidden," your name and any company links are suppressed from search and listings; only your headline, location, and credentials are visible. You decide whether to reveal your name on a per-conversation basis.

The platform never reveals one employer's contract details to another employer.

Availability

When you mark dates as unavailable, employers viewing your profile see the date range — they do not see which company or contract is the reason. The platform never reveals one employer’s contract details to another. Cross-employer overlaps are documented but not resolved by the platform.

For OPEN_HIDDEN profiles, availability dates are suppressed from anyone except the worker themselves — specific date ranges combined with industry knowledge could re-identify a confidential profile.

Credential photos

If you upload a photo of a credential card, it’s stored in Vercel Blob with an unguessable URL and shown to viewers who already have access to your profile.

For OPEN_HIDDEN profiles, credential photos are suppressed from anyone except the worker themselves. The card typically carries your name and could re-identify a confidential profile.

Resumes

When you upload a resume, it’s stored in Vercel Blob with an unguessable URL. The resume is not shown on your public profile and is not visible to companies by default. It only becomes visible to a specific company when you check “Attach my resume” while expressing interest in one of their jobs.

We snapshot the resume URL and filename onto each interest expression at the moment you send it, so updating your resume later doesn’t retroactively change what an employer received. Withdrawing an interest doesn’t guarantee the company won’t have already downloaded the file.

If your open-to-opportunities setting is “Hidden,” resume attachment is disabled — sending a resume would reveal your name to the employer and break the privacy promise of hidden mode.

Authentication and account security

Sign-in is handled by Clerk, a third-party authentication provider. Clerk stores your password (or social login token) securely. CoreInsp never sees your password.

Where your data lives

Profile and platform data are stored in a Postgres database hosted on Neon in AWS us-east-1 (Virginia). Uploaded images (company logos) live in Vercel Blob. Transactional emails are sent through Resend.

Your rights

You can:

  • Update or delete any field on your profile via the editor
  • Withdraw any expressed job interest
  • Request a copy of your platform data by emailing hello@coreinsp.com
  • Request account deletion. We retain audit logs for compliance reasons but will purge profile and credential data on request.

Cookies

The platform uses functional cookies set by Clerk to keep you signed in. We don't set advertising or tracking cookies.

Changes to this policy

We will update this policy when the platform changes. Material changes will be announced before they take effect.

Contact

Questions about your data? Email hello@coreinsp.com.