Privacy Policy

WorkOnward acts as a business or controller when it determines why and how information is used for its own accounts, direct candidate profiles, Marketplace Profiles, security, billing, analytics, support, and legal compliance.

WorkOnward acts as a service provider or processor when it handles Customer-controlled Candidate Hub records, employer-specific applicants, or integration data only to provide services under a Customer’s instructions and agreement. In that context, the Customer generally decides the recruiting purpose, access, and retention and is responsible for its own notice and legal basis. A Candidate may need to contact the relevant employer, recruiter, or agency about that data; WorkOnward will assist as required.

This Policy does not govern an Employer’s, Recruiter’s, Staffing Agency’s, job board’s, or other third party’s independent handling of information after it receives or collects it. Review their privacy notices as well.

WorkOnward does not use Customer-controlled private resumes or applicant records to train a general-purpose artificial-intelligence model or create a cross-customer candidate marketplace unless the Customer, the Candidate, applicable source terms, and law authorize that use or the information has been lawfully de-identified.

• Create and manage accounts, profiles, applications, job postings, Candidate Hub records, Credits, payments, and support.
• Enable job search, candidate search, relevant matching, resume parsing, screening workflow, messaging, scheduling, interviews, analytics, and recruiting administration.
• Provide a private Candidate Hub to the relevant Customer and process employer-specific applicant or integration data under that Customer’s instructions.
• Make authorized Marketplace Profile fields available to eligible Employers or Recruiters and record who requested or unlocked information.
• Send transactional messages, security alerts, application or recruiting communications, and communications separately authorized by the recipient.
• Verify accounts, businesses, authority, and legitimate recruiting purpose; prevent fraud, scraping, bulk extraction, spam, abuse, and security incidents.
• Measure and improve the Service, troubleshoot, develop features, and create aggregated or de-identified insights that are not reasonably linkable to a person.
• Comply with law, enforce agreements and source restrictions, respond to rights requests, resolve disputes, and protect people, WorkOnward, Customers, and the public.

A resume or candidate record uploaded by a Recruiter, received from a Candidate for a specific opportunity, submitted in response to a job, or delivered through an employer-specific feed is used for that Customer’s recruiting workflow and the purpose for which it was obtained. It is not automatically made searchable by unrelated Customers and is not converted into a Marketplace Profile merely because WorkOnward stores it.

Customers control which authorized personnel can access their Candidate Hub. Staffing Agencies may share information with an identified client only for a genuine role and when the Candidate, source terms, contract, and law permit. WorkOnward may isolate, quarantine, restrict, return, or delete data when rights are unclear, a source requires it, a Candidate objects, or a Customer relationship ends.

If you are a Candidate and your data is held in a Customer’s private Candidate Hub, the Customer may be the party responsible for your privacy request. You may contact WorkOnward, and we will route or assist with the request as applicable.

If a Candidate separately chooses to create or enable a Marketplace Profile, WorkOnward may display authorized professional information to eligible Employers or Recruiters and may mask a phone number, email address, resume, or other field until a recipient uses Credits or completes another disclosed access step. The authorization should explain the fields, intended recipients, recruiting purpose, paid access, and withdrawal method.

Creating a general account, accepting Terms, responding to an invitation, applying to a job, giving a resume to a recruiter, or appearing in Candidate Hub does not by itself authorize Marketplace disclosure. Data received from a Third-Party Source is not added to the Marketplace unless the source permits it and the Candidate has provided any separate authorization required for that new use.

WorkOnward treats Credits as payment for a limited platform feature rather than a transfer of ownership in Candidate Data. However, some state privacy laws define “sale” or “sharing” broadly and may treat certain transfers for value as a sale or sharing. Where such a law applies, a Candidate may opt out of future covered disclosure by emailing [email protected] with the subject “Do Not Sell or Share” or “Privacy Request.”

A Candidate may withdraw Marketplace authorization through available settings or a Privacy Request. After processing, WorkOnward will stop future Marketplace availability. WorkOnward may not be able to retrieve copies already lawfully delivered, but recipients remain subject to their legal and contractual duties.

Information from a third-party job board, professional networking service, resume database, recruiting platform, data provider, applicant feed, recruiter account, Customer, agency, integration, or similar external source is processed only within the rights granted by that source and the original recruiting purpose. WorkOnward does not treat access to data as permission to resell, republish, combine it into a general marketplace, or use it for an unrelated purpose.

In particular, employer- or job-specific applicant data is not disclosed to unrelated Customers. If a source prohibits resale, database creation, cross-customer sharing, automated extraction, or secondary outreach, WorkOnward and the Customer must honor that restriction. A later direct relationship with a Candidate does not erase a source’s contractual restriction on the originally supplied copy.

References to categories of external sources do not imply sponsorship, endorsement, partnership, or a current contractual relationship with any particular provider. Third-party services have their own notices and practices. WorkOnward is not responsible for their independent processing, but may suspend an integration or remove data when necessary to honor a contract, Candidate request, or legal requirement.

WorkOnward retains information only for as long as reasonably necessary for the purpose described in this Policy, an applicable Customer agreement or instruction, a Candidate’s active authorization, security and fraud prevention, dispute resolution, legal obligations, or enforcement. Retention periods differ by data type and recruiting context.

Candidate Hub and job-specific applicant data may be deleted, returned, de-identified, or retained according to the controlling Customer’s instructions, the source agreement, the status of the job or application, and applicable recordkeeping duties. Consent, disclosure, suppression, opt-out, transaction, and security records may be retained after account deletion when needed to prove compliance or prevent renewed contact.

Deletion from active systems may not immediately remove information from protected backups. Backups are isolated from ordinary use and removed or overwritten under applicable backup schedules. Information lawfully disclosed to an independent recipient may remain with that recipient under its own obligations.

This section supplements the rest of this Policy for residents of California and other U.S. states that grant comparable rights. Depending on applicable law and our role, you may have the right to confirm or know whether we process personal information; access the categories, sources, purposes, recipients, or specific pieces involved; correct inaccuracies; request deletion; obtain a portable copy; opt out of a legally defined sale, sharing, or targeted advertising; limit certain uses or disclosures of sensitive personal information; withdraw consent; or appeal a denied request.

For California purposes, the categories we may process are described under “Information We Collect and Its Sources” and may include identifiers and contact details; professional, employment, education, resume, application, and recruiting information; commercial and Credit transaction information; internet or electronic-network activity; approximate location; communications; inferences; and sensitive personal information such as account credentials or citizenship, immigration, and work-authorization information when a person chooses or is required to provide it for a requested recruiting service.

WorkOnward does not sell ownership of a person’s resume or contact information. Nevertheless, because California and certain other state laws define “sale” and “sharing” broadly, making authorized Marketplace Profile information available to a verified Employer, Recruiter, Staffing Agency, or identified client in exchange for Credits or other value may be treated as a sale or sharing. The potentially affected categories may include identifiers and contact details, professional and employment information, education information, resume or profile content, preferences, and related inferences. WorkOnward does not knowingly sell or share personal information of anyone under 16.

To exercise the right to opt out, use the “Do Not Sell or Share My Personal Information” link in the website footer, email [email protected] with the subject “Do Not Sell or Share My Personal Information,” or call 646-771-9945. Cookie Settings control browser- or device-based technologies; a Marketplace opt-out must also identify the relevant account or profile so WorkOnward can apply it to account-based disclosures.

For other requests, email [email protected] with the subject “Privacy Request” or “Privacy Appeal,” or call 646-771-9945. Describe the account, Customer, job, or interaction involved without emailing highly sensitive documents. WorkOnward may verify identity and authority, ask for clarification, or require an authorized agent to provide signed permission or other proof of authority. WorkOnward will not unlawfully discriminate or retaliate because you exercised a privacy right.

Some information may be exempt from a request or retained for security, fraud prevention, legal duties, claims, contracts, suppression, or another lawful exception. If a Customer controls private Candidate Hub or applicant information, WorkOnward may direct or transmit the request to that Customer. Marketing email choices can be changed through the unsubscribe link; SMS choices are described below.

WorkOnward uses administrative, technical, and physical safeguards designed to protect personal information, including access controls, account and environment separation, monitoring, vendor controls, and incident response measures appropriate to the data and Service. Customers and users must also protect credentials, devices, exported files, and information they receive.

No transmission or storage method is completely secure. Report suspected unauthorized access, disclosure, scraping, or misuse promptly to [email protected]. WorkOnward will investigate and provide notifications when required by law or contract.

WorkOnward and service providers acting on our behalf may use cookies, local storage, pixels, software development kits, logs, and similar technologies. Necessary technologies support security, authentication, session continuity, fraud prevention, requested features, network management, and privacy choices. Optional functional, analytics, performance, or advertising technologies may remember preferences, measure use, diagnose errors, or evaluate communications and campaigns.

Use “Cookie Settings” in the website footer to review and change available browser-based choices. Rejecting optional technologies will not prevent access to the core Service, although a feature that depends on a particular technology may not operate as intended. Browser settings may also delete or block cookies, but those controls may not communicate a legally recognized opt-out request to WorkOnward.

A consent platform may display a framework-maintained directory of advertising or technology vendors. Such a directory identifies potential participants in that framework and is not a list of WorkOnward partners, a representation that WorkOnward uses every listed vendor, or a statement that WorkOnward sells personal information to every listed vendor. Our actual disclosures are limited to technologies and providers that WorkOnward or an authorized Customer configures and uses as described in this Policy and the applicable consent interface.

Cookie preferences generally apply to the browser or device on which they are made. They do not by themselves withdraw a Candidate’s account-level Marketplace authorization or remove information from a Customer-controlled Candidate Hub. Use the privacy-rights methods above for those requests.

If you connect a calendar, WorkOnward may access calendar data within the permission you grant to create, update, or delete interview events, check relevant availability, synchronize changes, and provide the requested scheduling feature. WorkOnward does not use Google Workspace API data for advertising or to train a generalized artificial-intelligence or machine-learning model.

You can revoke calendar access through WorkOnward settings or the calendar provider. Revocation stops future access through that authorization but may not automatically remove events previously created in your calendar or records that WorkOnward must retain for security, troubleshooting, legal compliance, or dispute resolution.

WorkOnward may parse resumes, rank search results, recommend jobs or Candidates, detect duplicate or suspicious activity, and generate recruiting assistance using rules, statistical methods, or automated tools. Outputs may be incomplete, inferred, outdated, or inaccurate. Employers and Recruiters must independently verify relevant information, use human review, and comply with employment and anti-discrimination laws.

WorkOnward is not offering Candidate Profiles or Marketplace Data as consumer reports or employment background checks. The Service may not be used as a substitute for disclosures, authorization, accuracy procedures, pre-adverse or adverse-action notices, or other duties under the Fair Credit Reporting Act or similar state law.

The Service is not directed to children under 13, and WorkOnward does not knowingly collect their personal information. Contact us if you believe a child under 13 provided information. A person must be at least 18 to authorize a Marketplace Profile or use Credits to access Candidate Data unless WorkOnward establishes another lawful arrangement.

WorkOnward and its providers may process information in the United States and other countries where privacy protections may differ. Where required, WorkOnward uses an approved transfer mechanism or other safeguard.

The Service may link to third-party sites and services that WorkOnward does not control. Their privacy practices govern their independent processing.

WorkOnward may update this Policy as the Service, data practices, contracts, or law change. The revised version will be posted with a new date. Material changes apply prospectively, and WorkOnward will provide additional notice or request consent when required.

For privacy questions or requests, email [email protected] with an appropriate subject such as “Privacy Request” or call 646-771-9945. Do not send Social Security numbers, full identity documents, medical records, payment-card details, or other highly sensitive information through ordinary email.