Privacy Policy

Lona ("we", "us") operates an expert network that connects domain specialists with AI laboratories. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. It applies to lonaos.com and all related services.

We aim for transparency: every piece of data we collect is in service of matching you to relevant work, paying you accurately, and keeping the platform secure.

We collect information you provide directly, information we receive from your use of the platform, and information from third-party identity verification partners when required.

• Account data: name, email, password hash, professional background, languages, declared expertise.
• Verification data: employer or institutional affiliations, credentials, ID verification artefacts when working on regulated domains.
• Task data: submissions, evaluations, time spent, quality ratings.
• Payment data: tax forms, bank or wallet details routed through our payments processor — Lona does not store full bank credentials.
• Device data: IP address, browser type, language, and approximate location used to detect fraud and adapt the experience.

We use the information we collect to:

• Match you to tasks that fit your declared expertise.
• Calculate payouts and process payments.
• Maintain quality through peer review and rater audits.
• Detect fraud, abuse, and policy violations.
• Communicate platform updates, opportunities, and policy changes.

We do not sell your personal information. We do not use your task submissions to train AI models we do not own without your explicit, informed consent.

Limited information is shared with the following categories of partners, only as needed:

• AI laboratories that operate the projects you opt into — they see your pseudonymous expert profile and submissions.
• Identity-verification vendors for regulated domains.
• Payment processors to deliver earnings.
• Infrastructure providers (hosting, observability, anti-abuse) under contractual confidentiality.

We require every partner to handle Lona data under terms at least as protective as this policy.

Depending on where you live, you may have rights to access, correct, port, or delete your personal information, and to restrict or object to certain processing. You can exercise these rights from your account settings, or by emailing privacy@lonaos.com.

If we cannot resolve a concern, you may contact your local data protection authority. For EU/EEA residents, our representative under the GDPR can be reached via the same channel.

We protect your information with encryption in transit, at-rest encryption for sensitive identifiers, hardened access controls for staff, and routine audits of our infrastructure. No system is perfectly secure, so we will notify affected experts within regulated timeframes if a breach materially affects them.

We retain account information while your account is active and for a reasonable period after closure to comply with legal, tax, and audit obligations. Task submissions are retained for the duration required by the underlying client contract and our quality program.

When we make material changes we will notify you by email or by a prominent in-app notice at least fourteen days before the change takes effect. The "Last updated" date at the top of this page tells you when the policy was last revised.

Questions, requests, or complaints about this policy can be sent to privacy@lonaos.com or via our contact form. We aim to respond within five business days.