Privacy Policy

LabourBase AI Ltd ("LabourBase", "we", "us") is a UK-based technology company providing an AI-powered construction labour marketplace. We are the data controller for personal information collected through our platform.

We collect information you provide directly: name, email, home postcode, trade, work history, tax status, profile photos, and compliance documents (CSCS cards, insurance certificates). We also collect device information, IP address, and usage data automatically.

Video content you upload is processed by our AI scoring pipeline. We extract frames from your videos for AI analysis, including identity verification (comparing your video appearance to your profile photo). Videos are automatically compressed to 720p after upload to optimise storage and playback.

Post-hire feedback: after a contractor hires you, they may provide skill ratings (work quality, safety, technique, communication) and confirm whether your video accurately represented your abilities. This feedback is stored alongside your profile.

We use your information to:

• Provide and improve the platform • Match workers with job opportunities using AI scoring • Verify identity by comparing your profile photo to video frames (facial comparison) • Score work videos across quality, safety, technique, and communication • Verify compliance documents (CSCS, insurance, right to work) • Process payments via Stripe • Send service notifications • Generate aggregated, anonymised training data to improve our AI models • Comply with legal obligations

We do not sell your personal data.

Under UK GDPR, we rely on the following legal bases for processing your data:

• Contract (Art. 6(1)(b)): Account creation, authentication, job matching, and payment processing are necessary to deliver the service you signed up for. • Legitimate interest (Art. 6(1)(f)): AI video scoring, identity verification, candidate ranking, and post-hire feedback improve the marketplace for all users. You can object at any time. • Consent (Art. 6(1)(a)): You explicitly consent to AI analysis of uploaded content (including facial comparison for identity verification) and to receiving email notifications at registration. You may withdraw consent at any time from Settings. • Legal obligation (Art. 6(1)(c)): Compliance document verification (CSCS cards, insurance) is required by construction industry regulations.

Videos you upload are processed by our AI system to generate skill scores across quality, safety, technique, and communication. These scores rank you in contractor searches.

Identity verification: When you upload a work video and have a profile photo on file, our AI compares your appearance in the video against your profile photo to confirm your identity. This comparison is performed entirely server-side, your profile photo is never exposed to other users during this process. The result (match, mismatch, or inconclusive) and a confidence score are stored on your video record. A successful match contributes to your verification status.

If no profile photo is uploaded, identity verification is skipped and your video is scored normally without a verified identity badge.

Video compression: Uploaded videos are automatically compressed to 720p quality to optimise storage and streaming. The original file is replaced with the compressed version.

AI training: Aggregated and anonymised scoring data (AI scores, contractor feedback, hire outcomes) may be used to train and improve our proprietary AI models. No personally identifiable information is included in training datasets.

You may delete your video and scores at any time from your profile. AI scores are informational only and do not constitute employment decisions.

Your profile photo is used for two purposes: display on your public profile and AI identity verification.

You can control whether your profile photo is visible to other users (contractors, other workers) via the "Photo visible to others" toggle in your profile settings. When set to private:

• Your photo will not appear in browse results or your public profile • AI identity verification continues to work, the comparison happens server-side and your photo is never shared publicly • Contractors will not see your photo unless they hire you

Regardless of your privacy setting, your profile photo is stored securely on AWS S3 and is only accessed by our backend services for identity verification. It is not shared with any third party beyond what is necessary for storage (AWS) and AI processing (Anthropic).

After a contractor hires you through the platform, they may submit skill feedback rating your performance across work quality, safety, technique, and communication on a 1–5 scale. They may also confirm whether your work matched what was shown in your video.

This feedback is stored on the application record and may influence your AI scores over time as our models improve. You can view feedback received via your dashboard. Feedback is factual and performance-based, it does not include personal opinions or character assessments.

We share your professional profile (trade, experience, scores, postcode) with contractors searching for workers. Your profile photo is only shared if you have enabled the "Photo visible to others" setting. Contact details are only revealed after a hire is confirmed.

We use the following third-party processors:

• Stripe: payment processing • AWS (S3, CloudFront): media storage and delivery • Anthropic: AI scoring, identity verification, and job matching • Sentry: error tracking and performance monitoring • Resend: transactional email delivery

Each processor operates under their own privacy policies and our data processing agreements. No other third-party sharing without your consent.

We retain your account data while your account is active. On closure, personal data is deleted within 30 days, except where legal or tax obligations apply (typically 7 years for financial records). Video files and extracted frames are deleted from S3 within 30 days of account closure or video deletion. AI scores derived from deleted videos are also removed.

Under UK GDPR you have the right to:

• Access your data: download a full export from Settings or via GET /auth/export • Correct your data: update your profile at any time • Delete your data: delete your account from Settings (POST /auth/delete-account), which removes all personal data within 30 days • Object to processing: contact us to object to AI scoring or identity verification • Data portability: export your data in machine-readable format • Withdraw consent: disable AI processing or email notifications from Settings

Contact us at privacy@labourbase.ai. You may also complain to the ICO at ico.org.uk.

We use essential cookies only:

• lb_token: authentication session cookie • cookie_consent: records your cookie preference

We do not use third-party advertising or analytics cookies. Disabling essential cookies will prevent you from using the platform.

We implement the following security measures:

• TLS encryption for all data in transit • bcrypt password hashing with automatic salting • JWT session tokens with version-based invalidation on password change • Rate limiting on authentication endpoints • Content Security Policy headers • Non-root Docker containers in production • Input validation and sanitisation on all endpoints • S3 server-side encryption for stored media

No system is completely secure, but we take reasonable steps to protect your data in line with industry best practices.

Your data is primarily processed and stored in the UK and EU (AWS eu-west-2, London region). AI processing via Anthropic may involve data transfer to the United States, covered by appropriate safeguards including Standard Contractual Clauses.

The platform is not intended for use by anyone under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has registered, contact us immediately.

We may update this policy and will notify you of significant changes by email or in-app notification at least 14 days before they take effect. Continued use after changes constitutes acceptance. Previous versions are available on request.

For privacy queries contact our Data Protection Officer at privacy@labourbase.ai or write to LabourBase AI Ltd, Data Protection Officer, England & Wales.