Privacy Policy

Mpower Sourcing operates from South Florida with offshore talent in the Philippines, Colombia, Nicaragua, and South Africa. For any privacy question, correction, or data-deletion request, email myron@mpowersourcing.com. We respond within 5 business days.

From clients

• Business information (company name, address, EIN, contacts, agreed scope)
• Payment details (billed through Zoho Books — we do not store card numbers directly)
• Portal usage data (login timestamps, pages viewed, actions taken inside the client portal)
• Workflow and tooling information shared during engagement (logins, SOPs, AI training inputs) — only as needed to deliver the engagement

From candidates

• Resume, contact information, and work history
• Optional audio/video samples submitted during application
• Screening and interview notes created by the Mpower recruiting team
• WhatsApp / email thread history with our recruiters when you opt in to communication

From contractors (placed candidates)

• Countersigned contractor agreement, NDA, and role-specific documentation
• Timesheets, daily check-ins, and performance records submitted through the contractor portal
• Payment information required by Payoneer to process pay

All records are held in Supabase (Postgres, encrypted at rest, US-based data residency for client and internal records). Resume files and uploaded documents are stored in Supabase Storage with access scoped by role. Our web application is hosted on Vercel (US region). Candidate data sourced from a given region is processed with care for that region's applicable rules, and we never route client-sensitive data outside the agreed jurisdiction without written approval.

We use the following vendors to deliver the service. Each has its own privacy terms; we only share the minimum data needed to perform the function.

• Supabase — database, authentication, file storage
• Vercel — web application hosting + analytics
• Zoho Books — client invoicing + payment processing
• GoHighLevel (GHL) — marketing, lead capture, and discovery-call scheduling
• Google Workspace — email (myron@mpowersourcing.com, nina@, etc.) and OAuth sign-in
• Twilio — WhatsApp messaging to candidates who opt in
• Payoneer — contractor payments
• Google Analytics — aggregate traffic measurement on the marketing site (no cross-site tracking)

• Deliver the staffing, AI-powered VA, or AI automation service you engaged us for
• Match candidates to roles and send relevant follow-up communications
• Process invoices and contractor payments
• Improve our internal operations, matching quality, and portal experience (aggregate and de-identified only)
• Meet legal, tax, and audit obligations

We never sell data. We never share one client's information, candidate, or intellectual property with another client. Every contractor signs an NDA before placement.

Our recruiting and contractor teams are based in the Philippines, Colombia, Nicaragua, and South Africa. To deliver the service, candidate and client data may be transferred to those countries under standard contractual safeguards and NDA obligations. If you are subject to GDPR, UK-GDPR, LGPD, or similar frameworks and need a specific transfer mechanism documented, contact us.

Client engagement records are retained for the duration of your engagement plus seven (7) years thereafter for tax, legal, and audit purposes. Candidate records are retained for three (3) years after last activity unless you request earlier deletion. Contractor records and payment history are retained per applicable tax-reporting requirements (currently seven years).

You can request access to the data we hold on you, correction of inaccurate data, deletion (subject to legal retention obligations), or portability of your data in a standard format. Email myron@mpowersourcing.com from the address on file and we will respond within five (5) business days. Candidates who want to withdraw from the Mpower pipeline can also request immediate removal.

Our marketing site uses first-party session cookies for basic site function and Google Analytics for aggregate traffic measurement. We do not deploy third-party ad trackers or fingerprinting pixels without explicit consent. The client, candidate, and contractor portals use authentication cookies only.

We apply industry-standard controls: encryption at rest and in transit, role-based access control (row-level security in the database), least-privilege staff accounts, and regular audits of third-party processor compliance. No system is perfect — if you suspect a security issue, email myron@mpowersourcing.com immediately.

We will post material changes at this URL and note the new effective date at the top. Continued use of Mpower services after a change means you accept the updated policy.

If you opt in to receive text messages from Mpower — through a web form, a discovery-call booking, or an existing engagement — we collect your mobile phone number, your opt-in record, and the content of messages exchanged with us.

We use SMS only for the purposes you opted in for: appointment reminders, account and engagement notifications, recruiting follow-up, and (only when you specifically opted in) marketing messages.

SMS consent is not shared with third parties or affiliates for their own marketing purposes. Carrier providers (e.g. RingCentral, Twilio) process the messages on our behalf under their own privacy terms and do not market to you using your number.

To stop receiving SMS, reply STOP to any message. For help, reply HELP or visit mpowersourcing.com. Message frequency varies. Message and data rates may apply. Full SMS Terms of Service are in our Terms of Service.