ERNESTOPAY

Privacy Policy

July 2026

1. Introduction and Scope

This Privacy Policy describes how ErnestoPay, Inc. ("ErnestoPay," "we," "us") collects, uses, shares, and protects the information of Workers and Clients who use the Platform. By using ErnestoPay, you agree to the practices described in this document, together with our Terms of Service.

This policy applies to the ernestopay.com website, public Worker profiles, and any interaction with our services. It does not apply to third-party sites or services linked from the Platform, including Stripe, whose own privacy policy governs the data it processes directly.

2. What Information We Collect

2.1 Information ErnestoPay Collects Directly

The professional profile and the public contact details are entirely optional: a Worker can use the Platform and receive Recognitions without providing them. Phone and contact email are not published by default; they are shown only if the Worker turns that option on, and it can be turned off at any time.

Neither the date of birth, gender, nor the city and state appears on the public profile. The date of birth is collected for one reason: to check that whoever creates a Worker profile is at least 18 years old, as Section 2 of the Terms of Service requires. Gender is optional in the strict sense —it can be left blank, or answered "prefer not to say"— and it gates nothing: without declaring it, a Worker signs up, verifies their identity and receives Recognitions all the same.

2.2 Information We Do NOT Collect — Processed Exclusively by Stripe

ErnestoPay never receives, sees, or stores: Social Security Numbers (SSN) or EINs, full bank account or card numbers, identity documents, or any other sensitive financial data. All of this is collected and held directly by Stripe, Inc. during the Stripe Connect onboarding process, under Stripe's own Privacy Policy (available at stripe.com/privacy).

One exception, and it is the only one: when identity verification completes, Stripe returns to us the city and state of the address it verified, and we store those two fields. We do not receive or store the street address, the postal code, the identity document, or any other part of the verification. The city and state are used internally —to know which states Workers are in— and are not shown on the public profile.

3. How We Use the Information

• Operate and maintain the Worker's public profile and the Recognition flow.

• Display to Clients who open the Worker's link or QR code the information on their profile, including any professional profile they have completed and the contact details they have chosen to publish.

• Facilitate communication with Stripe for payment processing, identity verification, and tax compliance.

• Send transactional notifications (confirmation of a Recognition received, notices relating to your account and to the legal documents you accepted).

• Enable future search and discovery features. ErnestoPay intends to develop features allowing Clients and businesses to search for and find Workers by criteria such as occupation, specialty, location, or language, using the professional profile information described in Section 2.1 and, if the Worker declared it, gender. This functionality is not currently available. We collect that information now so that we do not have to request it again later. When the functionality exists, you will be notified, and your profile appearing in search results will require you to expressly turn it on: it will not be enabled automatically.

• Respond to support requests and resolve disputes or content reports.

• Analyze aggregate Platform usage to improve the product (internal analytics, without sale to third parties).

• Check that the Worker is at least 18 years old, a requirement of Section 2 of the Terms of Service, from the date of birth they provide.

• Verify that the phone number the Worker chooses to publish belongs to them, by sending a code via SMS.

• Process any subscription or paid plans ErnestoPay may offer in the future, if the Worker chooses to purchase them.

• Comply with legal obligations, including valid requests from competent authorities, and retain consent records as evidence of compliance.

4. Who We Share Information With

The public profile is accessible without creating an account: anyone with the Worker's link or QR code can view it. This is intentional — it is what allows Recognitions to be received without friction — and it is why phone and email remain off unless expressly turned on.

Date of birth and gender are not shared with any recipient: they do not appear on the public profile and are not sent to third parties. Stripe collects its own date of birth directly from the Worker, inside its identity verification flow — it is not the one ErnestoPay stores, and we do not send ours to them.

ErnestoPay does not sell personal information to third parties for advertising purposes.

With one exception worth stating plainly: Microsoft, the provider of the Clarity analytics tool, may use the data it collects on our public website for its own purposes, under its terms of service. Under the CPRA, that processing may constitute "sharing." It is limited to the public website; the Worker app sends no data to Microsoft. See Section 7.

5. Data Retention

We retain Worker information for as long as their account remains active, and for a reasonable additional period after deactivation to comply with legal, tax, and dispute-resolution obligations (generally up to 7 years for transaction-related records, consistent with standard tax retention practices). Workers may request early deletion of data not subject to mandatory legal retention.

Exception — consent records. The record of accepted legal consents (document type, version, date, language, and technical identifiers of the acceptance) is retained indefinitely, including after account deletion, as it is the evidence that the Worker accepted each document at the time. If account deletion is requested, that record may be anonymized, but it is not deleted.

6. Your Rights Over Your Data

Depending on your state of residence, you may have the right to:

• Access the personal information we hold about you.

• Request correction of inaccurate information.

• Request deletion of your personal information, subject to legal retention obligations.

• Opt out of the "sale" or "sharing" of personal information (ErnestoPay does not sell data, so this right does not currently apply in practice).

• Request a portable copy of your information in a structured format.

In addition, you may at any time turn off publication of your phone number and contact email, and delete your professional profile information, from your account settings. You may also change or withdraw the gender you declared. The date of birth is retained for as long as the account exists, as it is the check on a requirement for access to the Platform.

To exercise any of these rights, contact [email protected]

7. Specific Notice for California Residents (CCPA/CPRA)

If you reside in California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you additional rights over your personal information, including the right to know what categories of information we collect (detailed in Section 2), the right to request deletion, and the right not to face discrimination for exercising your privacy rights.

Categories of information collected from California residents in the past 12 months:

• Identifiers: name, email, phone number (if the Worker provides one).

• Characteristics of protected classifications under California or federal law: date of birth —from which age is derived— and gender, the latter optional. Neither falls within the CPRA's definition of "sensitive personal information."

• Commercial information: history of Recognitions received.

• Approximate geographic information: workplace, and the city and state Stripe verified. The latter two are held internally and are not published.

• Professional or employment-related information: occupation, specialties, years of experience, languages, certifications.

• Internet activity information: public profile visits, QR or link interactions, device and browser metadata, and recordings of browsing on the public website collected through Microsoft Clarity.

• Inferences: ErnestoPay does not build inferred profiles about identified individuals. The public website analytics tool analyzes browsing behavior in aggregate and not linked to an identity.

ErnestoPay does not sell personal information.

⚠️ It does use a third-party analytics tool (Microsoft Clarity) on its public website. Because the provider may use that data for its own purposes, this processing may constitute "sharing" under the CPRA definition. It is limited to the public website and does not reach the Worker app or any page behind a login.

You may opt out by writing to [email protected], and also by enabling the Global Privacy Control (GPC) signal in your browser, which we honor.

8. Information Security

We implement reasonable technical and organizational measures to protect personal information against unauthorized access, loss, or alteration, including encryption in transit and access controls. However, no system is completely secure, and ErnestoPay cannot guarantee the absolute security of information transmitted over the internet.

9. Children's Privacy

The Platform is not directed to individuals under 18 years of age. We check the date of birth when the profile is completed and refuse the creation of a Worker profile to anyone below that age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal information, we will remove it from our systems.

10. Cookies and Similar Technologies

ErnestoPay may use cookies and similar technologies to maintain the user's session, remember language preferences, and analyze aggregate Platform usage. Users may configure their browser to reject cookies, although this may affect Platform functionality.

The public website additionally uses Microsoft Clarity, which sets Microsoft’s own cookies to distinguish sessions and generate heatmaps and browsing recordings. The Worker app does not use these cookies and sends no data to Microsoft.

11. Consent to Electronic Communications (E-SIGN Act)

By accepting this Privacy Policy and the Terms of Service, the Worker expressly consents to receive disclosures, notifications and documents —including payment confirmations— electronically, in accordance with the Electronic Signatures in Global and National Commerce Act (E-SIGN Act).

⚠️ Tax forms are an exception, and it is worth stating precisely. They are issued and delivered by Stripe, not by ErnestoPay. They may be sent on paper to the address the Worker has on file with Stripe, or electronically if the Worker gives Stripe the specific consent the IRS requires for the electronic delivery of information returns. The consent in this section does not replace that one: they are two separate consents, with different requirements.

12. International Transfers

Information is processed and stored primarily on servers located in the United States. If you access the Platform from outside the U.S., your information will be transferred to the United States for processing in accordance with this policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified at least 15 days in advance by email or via an in-Platform notification. Continued use after the effective date constitutes acceptance of the updated policy.

14. Contact

For questions about this Privacy Policy or to exercise your data rights, contact: [email protected]