Privacy Policy

1. B2B Commercial Use Only

The ON-WPOM Bidding & Compliance Platform is a Business-to-Business (B2B) infrastructure service. We do not offer services to individual consumers or for personal use.

All accounts must be associated with a verified legal entity (Corporation, LLC, or Government Agency). Usage for personal, non-commercial purposes is strictly prohibited and will result in immediate termination of API credentials.

2. Nature of Communications

3. Zero Tolerance Spam Policy

In alignment with the CAN-SPAM Act and international anti-spam regulations, ON-WPOM maintains a Zero Tolerance Policy regarding unsolicited communications.

• Prohibited Lists: The use of purchased, rented, or third-party lead lists is strictly forbidden.
• Cold Messaging: "Cold" outreach or unsolicited workforce solicitation is not permitted on this domain.
• Compliance Vetting: Our Compliance Officer, Richard Nance, audits all outgoing message templates to ensure they meet the "Mandatory Operational" criteria.

4. Strict Identity & Account Verification

To ensure the integrity of our network, all personnel and organizational accounts require Double Opt-In (DOI) verification. Access to the API is only granted after:

• Verification of the Corporate Domain and Authorized Representative identity.
• Validation of the Workforce Data Source (ERP Integration check).
• Signed attestation that all recipients have an existing contractual or employment relationship with the sending entity.

5. Advanced Data Protection & Residency

Beyond standard requirements, ON-WPOM implements enhanced security protocols due to the critical nature of our clients' operations:

• AES-256 Encryption: All Personally Identifiable Information (PII) is encrypted at rest and in transit.
• Personnel Access Control: Only cleared system administrators have access to notification logs; access is logged via immutable audit trails.
• Data Minimization: We only store the minimum worker data required to execute the transaction (Email/ID) and purge operational logs every 30 days unless otherwise required by law.

6. Third-Party Infrastructure

We utilize Tier-1 infrastructure providers (such as Mailgun Technologies, Inc.) for the technical delivery of notifications. Data shared with these providers is limited to the necessary routing information (Recipient Email) and is governed by their respective security policies and our Data Processing Addendum (DPA).

7. Contact Information

For questions regarding this policy or to report a compliance violation, please contact our Infrastructure & Compliance Department: