Privacy Policy

Effective date: August 15, 2026 · Erudire Incorporated

What changed in this version: the payroll onboarding section no longer promises that a Plaid bank connection closes immediately after Zeal receives the account. The policy now describes the connection conservatively unless and until that teardown is enforced and tested. The August 11 version added Plaid's own-use disclosure and policy link; earlier August versions added developer-console messages and voluntary feedback submissions to the session-recording section. Nothing about masking changed in this update.

Who we are

Erudire Incorporated, a Delaware corporation that does business as Erudire Workforce, operates erudireworkforce.com and the customer portal at app.erudireworkforce.com. Questions about this policy can be sent to legal@erudireworkforce.com.

Information we collect

We collect information in two ways: directly from you, and automatically as you use the site.

Information you provide: When you email us, including through the contact link on our site, we receive your email address and whatever you choose to include in your message, such as your name and company. If you create an account on the customer portal, we collect your name, email address, and any profile information you provide.

Information collected automatically: When you visit, our hosting provider records standard server log data, including your IP address, browser type, pages visited, and the date and time of each request. We also use PostHog to measure how the site and the portal are used, which is described in Analytics and session recording below. We run no advertising trackers anywhere.

How we use it

We use the information we collect to:

• Respond to inquiries and communicate with prospective and current clients
• Operate and improve the website and customer portal
• Understand how visitors use the site so we can make it more useful
• Comply with legal obligations

We do not sell your personal information. We do not use it for advertising.

Payroll onboarding for trainees

Trainees we place are paid through Zeal, a payroll provider. Setting that up means collecting what the IRS and your bank require: your Social Security number, your date of birth, your home address, and the account you want your pay sent to.

You enter those on a page we host, and our systems hand them straight to Zeal, which holds your payroll file from then on. We do not keep them. What stays in our database is that you finished a step, the date you finished it, the state you work in, and the last four digits of the bank account so you can tell which one you picked. Your Social Security number, date of birth, and full account and routing numbers are never written to our storage or our logs.

We use Plaid to connect your bank, so you sign in to your bank rather than typing account numbers. Plaid handles that sign-in and we never see your banking password. It passes us the account and routing numbers, which go straight to Zeal and are not kept in our database or logs. The Plaid connection is not guaranteed to close as soon as Zeal receives the account; it can remain active at Plaid until it is disconnected, and Plaid's own retention and use policy applies as described below.

Plaid also works for itself in that exchange. Its End User Privacy Policy governs its relationship with you rather than with us, and under it Plaid uses what it collects to improve and build its own products, to develop insights, to prevent fraud and verify identity, and to train and deploy artificial intelligence systems. We cannot narrow that on your behalf, so read it before you connect an account. Plaid is never the only way to be paid. Tell us and we will take your account details directly instead, which is also how we set up trainees under 18, since Plaid does not offer its services to them.

The employment eligibility check, Form I-9, runs inside Zeal's own form shown on our page. Anything you upload there, including photographs of your documents, goes to Zeal rather than to us.

Disclosure

We share information only in limited circumstances:

• Service providers: We work with third-party services (such as email, authentication, payment, and cloud infrastructure providers) that process data on our behalf, under the terms we have accepted with each of them. Those terms require them to protect your information and to use it for the services they provide to us. Where a vendor also uses your information for its own purposes, we name it below and link you to the policy that governs it.
• Payroll: For trainees we place, Zeal receives the identity and bank details needed to pay you and file your taxes, and handles them on our behalf. Plaid receives the bank sign-in used to connect an account, and as described under Payroll onboarding, Plaid also uses that information for its own purposes under its own policy.
• Legal requirements: We will disclose information if required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights or the safety of others.
• Business transfers: If Erudire Incorporated is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before that happens.

Security

We take reasonable steps to protect the information we hold. The customer portal uses HTTPS in transit and relies on Clerk for authentication, which handles credential storage with industry-standard encryption. Our infrastructure runs on AWS with access controls restricted to authorized personnel.

No method of transmission or storage is completely secure. If you have reason to believe your information has been compromised, contact us at legal@erudireworkforce.com.

Data retention

We keep personal information only as long as we need it for the purposes described here — answering inquiries, operating accounts, and meeting legal or tax obligations — and then delete or anonymize it. Portal account data is kept for the life of the account and a reasonable period afterward.

Analytics and session recording

We use PostHog, a product analytics service, to understand how people actually use our site and portal: which parts of a page get read, where visitors give up, and which steps in the portal cause trouble. PostHog processes this information on our behalf as a service provider and is not permitted to use it for its own purposes.

On the public website, PostHog is configured to run without cookies. It stores nothing on your device and keeps nothing in your browser between visits, so when you come back you look like a new visitor to us. We lose some accuracy that way, and in exchange nothing about your visit follows you around.

Session recording. PostHog also builds a replay of a browsing session, showing how the page moved, what was clicked, and where the visit went. It is a reconstruction of the web page itself. It is not a recording of your screen, your camera, or your microphone, and it cannot see other tabs or any other application.

What we mask in the portal. Portal pages carry your company's own information, so recording there is restricted. Everything typed into a field is masked inside your browser before anything is sent, as are names, dollar figures, and email addresses. Payment card numbers are never available to us or to PostHog under any setting, because card details are entered in a frame served by Stripe that our scripts are not able to read.

Our own staff tools run the same analytics and session recording, under the same masking rules, so the measuring we do to customers we also do to ourselves.

Feedback you submit. If you use the Feedback or Report a problem control on the site or portal, the text you type is sent to PostHog as a product event so we can investigate and fix issues. That is separate from session recording: you choose what to write, and we only receive what you submit plus technical context for that visit (page path, session id, viewport size).

Error reports. When something breaks in your browser, it sends us a short automatic report so we find out without waiting for someone to tell us: the error message, and the file and line it came from. No stack traces, and any email address or dollar amount inside the message is replaced before the report leaves your browser.

Developer messages. A session replay now also carries the technical messages our code and the services we embed write to the browser's developer console. These are diagnostic notes meant for engineers — a failed request, a warning from the payment or sign-in library — and they exist because a payment once ended with the page dying on a customer and nothing recorded to explain why. The pages themselves write almost nothing here: one line in the customer portal and two in our staff tools, all of them error objects. They are not a second copy of what is on your screen, the masking described above is unchanged, and we hold ourselves to keeping your own information out of them.

If you would rather not be measured at all, we honor your browser's "Do Not Track" setting: when it is switched on, PostHog collects nothing and records nothing. Ad and script blockers stop it as well, and both the site and the portal work normally without it. You can also write to legal@erudireworkforce.com and we will exclude you by hand.

Cookies

The customer portal uses cookies for sign-in and session management, handled by our authentication provider, Clerk. The public website sets no cookies at all, and we use no advertising cookies anywhere. You can disable cookies in your browser settings, though some features of the portal may not work correctly without them.

Your privacy rights

Whether or not a state privacy law applies to us, we will honor reasonable requests to access, correct, delete, or receive a copy of the personal information we hold about you. To make a request, email legal@erudireworkforce.com. We will respond within 45 days, and will tell you if we need more time. We do not sell personal data and do not use it for targeted advertising.

Some state laws, including the Virginia Consumer Data Protection Act, give residents these rights and a right to appeal a refused request. If we deny a request, you may appeal by replying to our decision, and if an appeal is denied you may contact the Virginia Attorney General.

Children's privacy

Our website and portal are meant for businesses and the people who represent them, not for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, contact legal@erudireworkforce.com and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. For material changes, we will provide notice on the site or by email.

Contact

Erudire Incorporated
legal@erudireworkforce.com