Privacy Policy

This Privacy Policy explains how Personally ("we," "us") collects, uses, shares, and protects information for both job seekers and employers. It is written to be transparent — a core value of the product.

Who we are.The Service is operated by Personally LLC ("Personally"), a Texas (USA) limited liability company, administered from Germany. For most personal data on the platform we act as a data controller; for candidate data we process on an employer's behalf, we may act as a processor for that employer (see our Data Processing Addendum). Questions: contact@personallyhired.com.

1. Information we collect

From job seekers

• Account details: name, email, password (stored only as a salted hash), and an optional résumé link or file reference.
• Application data: your answers to an employer's screening questions and whether you passed.
• Scheduling data: any introductory call you book.
• Consents: your choices about future consideration and linking to The Workaround Collective.

From employers / hiring managers

• Account and company details, the real email we mask behind a relay address, requisition content, screening questions, interview notes, compliance-acknowledgment audit records, and subscription/billing details.

2. How we use information

• To operate screening, scheduling, and the transparency dashboards.
• To share a booking candidate's name, résumé, and questionnaire answers with the relevant hiring manager for that requisition.
• To verify humans (reCAPTCHA) and prevent abuse.
• To process employer subscriptions and account administration.

We do not sell your personal information, and we do not use it to train third-party advertising profiles.

3. Your data choices if you don't pass screening

This is central to how Personally treats job-seeker data:

• Delete & retract. You can permanently delete your application and personal details. When you do, we remove your application, answers, and personal record. The employer receives only an anonymous count of retractions — none of your information. We may retain limited records only where required by law (for example, certain legal-hold obligations).
• Future consideration.You can opt in to remain in an employer's talent pool for this role (if re-opened) or for any future role. You can withdraw this from your account.

4. The Workaround Collective

If you consent, we will link your Personally account to The Workaround Collective (a nonprofit we support, currently in development) so it can offer you grants, connections, and support. We will only share what is needed to provide those services, and only with your consent, which you can revoke at any time from your account.

5. Sharing

• With employers: only the candidate data described above, and only for the role(s) it relates to (or future roles you opted into).
• With service providers: calendar, email, human-verification, payment, and HR-sync providers (e.g., Workday, Greenhouse) strictly to provide the Service.
• For legal reasons: where required by law or to protect rights and safety.

6. Employer data sync

To keep enterprise systems current, we sync recruitment events (status changes, scheduled calls) to connected HR/talent systems. Employers are responsible for the privacy practices of their own connected systems.

7. Security & retention

We use reasonable technical and organizational measures to protect data, including hashing passwords and masking recruiter emails. We retain personal data for as long as your account is active or as needed to provide the Service, then delete or anonymize it, except where retention is legally required.

8. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on these legal bases under Article 6:

• Performance of a contract (Art. 6(1)(b)) — creating and running your account, processing applications, and scheduling calls.
• Consent (Art. 6(1)(a)) — linking to The Workaround Collective, opting into future consideration, and any optional marketing. You can withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f)) — securing the platform, preventing bots/fraud (reCAPTCHA), and enabling employers to search their own talent pool, balanced against your rights.
• Legal obligation (Art. 6(1)(c)) — tax, accounting, and responding to lawful requests.

We do not intentionally collect special-category data(Art. 9), such as health information, and we actively discourage employers from asking for it. Please don't include it in free-text fields.

9. International data transfers

Personally is operated from the USA and Germany, so your data may be transferred to and processed in the United States and other countries. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards — the European Commission's Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework — and we require our sub-processors to provide equivalent protection. See our sub-processors and security overview. You can request a copy of the relevant safeguards at contact@personallyhired.com.

10. Your privacy rights

Depending on where you live (including under the GDPR and UK GDPR, and under CCPA/CPRA in California), you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectify inaccurate or incomplete data.
• Eraseyour data ("right to be forgotten") — built into the product via delete/retract and account deletion.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Not be subject to solely automated decisions producing legal or similarly significant effects (Art. 22). Personally does not make such decisions: the questionnaire is a simple yes/no eligibility step you complete yourself, and a human hiring manager makes all interview and hiring decisions.
• Lodge a complaint. In the EU/EEA, you may complain to a data-protection supervisory authority. The authority competent for us is the LfDI Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany; poststelle@lfdi.bwl.de; www.baden-wuerttemberg.datenschutz.de) — you may also complain to the authority where you live or work. In the US, you may contact the relevant state attorney general (e.g., Texas or California) or, in California, the California Privacy Protection Agency, and you may also contact the Federal Trade Commission.

The fastest way to exercise your rights is to do it yourself, instantly, in your account — no request and no waiting. When signed in you can edit your details (rectification), export your data as JSON (portability), delete your account (erasure), and delete/retract individual applications, future-consideration, and Workaround Collective settings.

If you can't sign inor don't have an account, use our privacy request form or contact contact@personallyhired.com. These requests require manual identity verification and are answered within the legal deadline (GDPR: one month; CCPA: 45 days).

11. Cookies

We use only strictly necessary cookiesto run the Service: a session cookie to keep you logged in, and a small preference cookie for the demo "view as" switcher. We do not use advertising or third-party tracking cookies. If we add analytics in the future, we will ask for your consent first where required.

12. Data controller, EU representative & DPO

Controller: Personally LLC (Texas, USA), administered from Germany — full identity and address in our legal notice (Impressum). Where an EU representative (Art. 27) or Data Protection Officer (Art. 37) is required, their contact details will be published there. For now, all data-protection enquiries go to contact@personallyhired.com.

13. Changes & contact

We will post updates here with a new "last updated" date. For privacy questions or requests, contact contact@personallyhired.com.