Privacy Policy

Effective: September 30, 2026

Plain-language summary

This summary is here to help you read the policy. It is not a substitute for it.

  • What we collect. Mostly what you give us: contact details, resumes, work history, hiring requests, and messages. Plus the usual technical data from using a website.
  • Why. To match Candidates with Employers, run the hiring process, communicate with you, keep the platform secure, and improve it.
  • Who sees it. Candidate information goes to Employers only when our recruiters present you for a role. Vendors that host, send messages, and power features process data on our behalf. We do not sell personal information.
  • AI. We use AI tools to organize, search, rank, and summarize. People make the hiring decisions.
  • Your choices. You can access, correct, or delete your information, block Employers from seeing your profile, and opt out of SMS or marketing at any time. Email info@irecruit.co.

1. Who we are and scope

iRecruit.co Inc. (“iRecruit.co,” “we,” “us,” or “our”) operates a mission-critical talent platform and specialized recruiting service. This Privacy Policy explains how we collect, use, share, and protect personal information when you use our websites, including irecruit.co and app.irecruit.co, our applications, forms, communications, recruiting services, and related offerings (together, the “Services”).

This policy applies to:

  • Candidates and prospective candidates, including people we contact about opportunities and people referred to us;
  • Employers and the people who use the Services on an Employer’s behalf;
  • referral participants, references, and other people named in recruiting materials;
  • website visitors and anyone who submits a form or communicates with us.

iRecruit.co Inc. is the controller (or, under U.S. state law, the business) responsible for personal information processed through the Services, except where Section 9 says an Employer is responsible. Our contact details are in Section 21.

Our Terms of Service govern your use of the Services. If you do not agree with this policy, please do not use the Services.

2. Personal information we collect

What we collect depends on how you interact with us. The categories below describe what we may collect from Candidates, Employers, and visitors.

A. Identifiers and contact information

Name, email address, phone number, mailing address, account credentials, profile photo, LinkedIn URL and other professional profile links, and, for Employer Users, job title and company.

B. Professional, education, and recruiting information (Candidates)

Resume or CV contents; work history and current and past job titles; education, certifications, and licenses; project history, portfolio items, skills, specialties, and sector experience; references and their contact details; compensation expectations; preferred locations and relocation or travel preferences; availability and notice period; work authorization status; work-setting and employer preferences; interview notes and feedback; and offer and placement details.

C. Employer and hiring information (Employers)

Company name, website, size, industry, and locations; hiring requests, role requirements, project context, and compensation ranges; Employer team members and permissions; interview feedback, ratings, pass reasons, and offer details; and billing and payment information for Employers with a paid engagement.

D. Communications

Email, SMS, and in-app messages with us; scheduling responses; support requests; recruiting conversations; and records of consent, opt-in, opt-out, and message delivery.

E. Device, usage, and technical information

IP address and approximate location derived from it; browser and device type; operating system; pages visited, referring URLs, and time on page; session identifiers; timestamps; error and usage logs; and analytics events.

F. Uploaded content

Resumes, cover letters, portfolio files and images, notes, comments, and form responses.

G. Sensitive or special-category information

We do not ask Candidates for sensitive information such as Social Security numbers, financial account numbers, health or disability information, or demographic details, and we ask you not to include it in resumes or forms. Recruiting materials sometimes include such information anyway (for example, veteran status on a resume, or a work-authorization status that reveals citizenship). Where that happens, we process it only as needed for the recruiting purpose you provided it for, or as required by law, and we do not use it to make inferences about you. Account credentials are treated as sensitive and protected accordingly.

H. Inferences and derived data

Likely role fit, seniority, sector alignment, relevant opportunities, match relevance between a Candidate and a role, Employer hiring preferences, and workflow insights. These are generated to help our recruiters and are reviewed by people before they affect a recruiting action.

We do not knowingly collect precise geolocation, biometric identifiers, or the contents of private communications outside the Services.

3. Where personal information comes from

  • Directly from you, through forms, profiles, resumes, uploads, messages, calls, and meetings.
  • From Employers, who provide hiring requests, feedback, and information about their team members.
  • From Candidates, who may name references, prior employers, or colleagues in their materials.
  • From referrals, when someone refers you to us.
  • From public and professional sources, such as professional networking profiles, licensing boards, company websites, and talent-data providers, when we are searching for candidates for a role.
  • From service providers that support sign-in, communications, scheduling, storage, analytics, enrichment, and recruiting operations.
  • Automatically, through cookies, logs, and similar technologies when you use the Services.

4. How we use personal information

We use personal information to:

  • create, authenticate, and manage accounts and Employer teams;
  • operate the recruiting platform and provide recruiting services;
  • build and maintain Candidate and Employer profiles;
  • process hiring requests, source and screen Candidates, and present Candidates to Employers;
  • coordinate interviews, collect feedback, and support offer, placement, and onboarding workflows;
  • communicate with you by email, SMS, phone, and in-app notifications, and manage your communication preferences;
  • bill Employers and manage engagements under a Service Agreement;
  • operate referral programs;
  • develop, test, and improve matching, search, ranking, and recommendation features, including AI-assisted features;
  • monitor, secure, and debug the Services, prevent fraud and abuse, and enforce our Terms;
  • produce aggregated or de-identified analytics, such as hiring trends and salary benchmarks, that do not identify you;
  • comply with legal obligations, respond to lawful requests, and protect the rights and safety of users and others.

We do not use personal information to train general-purpose AI models that are offered to third parties.

5. Legal bases for processing

Where the EU or UK General Data Protection Regulation or a similar law applies, we rely on the following legal bases:

  • Contract: to provide the Services you have signed up for and to take steps at your request before entering a contract, such as considering you for a role.
  • Legitimate interests: to operate a recruiting platform, present Candidates to Employers, improve matching quality, secure the Services, communicate with users, and run our business. We balance these interests against your rights.
  • Legal obligation: to keep records, respond to lawful requests, and comply with employment, tax, and other laws.
  • Consent: where the law requires it, including for SMS messages, marketing communications, certain cookies, and any processing of special-category data that is not otherwise permitted. You can withdraw consent at any time.

6. AI-assisted matching and human review

We use AI-assisted tools, including large language models, embeddings, similarity search, and ranking systems, to organize Candidate and Employer data, identify potentially relevant matches, generate fit explanations and summaries, prioritize records for recruiter review, and make search and workflows faster. AI-generated summaries or explanations may be shown to our recruiters and, in some cases, within the Candidate or Employer experience as assistive information.

We do not make hiring, interview, offer, or similarly significant decisions solely by automated means. Material recruiting actions are reviewed by iRecruit.co recruiters, and hiring decisions are made by Employers. You may ask how automated tools were used in a recruiting decision affecting you, request human review, and contest a decision by contacting info@irecruit.co.

AI providers we use process data under contracts that prohibit them from using your information to train their models.

7. How and when we share personal information

A. With Employers

We share Candidate information with an Employer only when our recruiters present that Candidate for a specific role or hiring need. Employers see a curated presentation, which may include your profile, resume, and recruiter notes, rather than open access to a database. Once shared, the Employer is responsible for its own use of the information (see Section 9).

B. With Candidates

We share opportunity details, Employer names where the Employer permits, scheduling information, and feedback with Candidates as needed to run the recruiting process.

C. With service providers

We use vendors that process personal information on our behalf under contracts that restrict their use of it. Categories and current providers include:

  • Application hosting and cloud storage: Replit, Google Cloud;
  • Website hosting: Webflow;
  • Email delivery and marketing email: Twilio SendGrid, Klaviyo;
  • SMS messaging: Twilio;
  • Scheduling: Calendly;
  • Applicant tracking and recruiting operations: Loxo;
  • Talent sourcing and professional-data enrichment: People Data Labs, Juicebox;
  • AI processing: OpenAI, Anthropic, Google (Gemini);
  • Analytics: Google Analytics, Google Tag Manager;
  • Payments and invoicing: our payment processor, which receives Employer billing details directly.

We update this list as our providers change. You can request the current list at info@irecruit.co.

D. With professional advisors and authorities

We may share information with lawyers, accountants, auditors, and insurers, and with regulators, courts, and law enforcement when required by law, to respond to a lawful request, to enforce our agreements, or to protect the rights, safety, or property of iRecruit.co, our users, or others.

E. In a business transaction

If iRecruit.co is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy and appropriate confidentiality protections.

F. With your direction or consent

We share information with other parties when you ask us to or agree to it, for example when you provide a reference or connect a third-party tool.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

8. Candidate visibility and privacy controls

  • Curated visibility. Your profile is not publicly searchable and is not visible to Employers until a recruiter presents you for a role. Over time you may be presented to more than one Employer.
  • Blocking. Where the feature is offered, you can block specific Employers, such as your current employer, from ever seeing your profile.
  • Status. You can tell us you are not currently looking, decline any opportunity, or withdraw from a process at any time.
  • Downloads. Employers reviewing a presented Candidate may download the resume and materials shared with them.
  • Deletion. You can ask us to delete your profile. Section 12 explains what we keep afterward and why.
  • Administrative access. iRecruit.co administrators may use controlled administrative or account-impersonation features to support Employer accounts, troubleshoot workflows, and deliver recruiting services. These actions are logged internally.

9. Employers as independent controllers

When we present a Candidate to an Employer, the Employer receives that Candidate’s personal information for its own hiring purposes and becomes an independent controller (or business) for it. The Employer’s own privacy notices and obligations then apply, including for any information it stores in its applicant tracking system, shares internally, or uses to make a hiring decision. Our Terms of Service require Employers to use Candidate information only for legitimate hiring, keep it confidential, and comply with applicable privacy and employment laws, but iRecruit.co does not control how an Employer processes information once it has been shared.

Employers that need a data processing agreement, a description of our security practices, or help responding to a Candidate rights request can contact info@irecruit.co.

10. Email, SMS, and communications

Types of messages

We send account and security notices, interview and scheduling messages, recruiting and workflow updates, support replies, transactional messages such as agreements and invoices, and, where permitted, limited marketing about our services. Marketing emails include an unsubscribe link. Service messages are sent as needed to run your account and cannot be unsubscribed from while your account is open.

SMS program

  • We send SMS only to mobile numbers that have opted in through an iRecruit.co sign-up or consent flow. Consent is not a condition of using the Services or of any purchase.
  • Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
  • Reply STOP to opt out at any time. Reply HELP for help, or email info@irecruit.co.
  • Mobile phone numbers and SMS opt-in information are not shared with third parties or affiliates for their marketing or promotional purposes. We share them only with the messaging providers that deliver our texts.
  • We keep records of opt-in and opt-out requests, including the date, time, and source of consent.

11. Cookies and analytics

We use cookies and similar technologies for:

  • Essential functions: sign-in, session management, security, and remembering your settings. These cannot be turned off without breaking the Services.
  • Analytics and performance: understanding how the Services are used and where they can be improved. We use Google Analytics and Google Tag Manager for this. Google’s use of data is described in Google’s privacy policy, and you can install Google’s browser add-on to opt out of Google Analytics.
  • Attribution: recording which page or campaign brought you to us so we can understand what is working.

We do not use cross-site retargeting or advertising cookies that track you across other websites. If we run our own search or social advertising, we may use conversion-measurement tags to learn whether an ad led to a sign-up, and we configure those tags to restrict data use where the law requires it. Where we use consent-based cookies, you can change your choices through the cookie banner or your browser settings. We honor Global Privacy Control signals as an opt-out of sale and sharing where required, though we do not sell or share personal information.

12. Data retention

We keep personal information only as long as reasonably needed for the purposes in this policy. How long depends on the type of information:

  • Candidate profiles and recruiting records are kept while you are active with us and for a reasonable period afterward so we can reconnect about future opportunities, unless you ask us to delete them. Profiles that have not been active for an extended period are archived or deleted.
  • Employer accounts and engagement records are kept for the life of the relationship and for as long as needed to fulfill and document the engagement, invoice, and resolve disputes.
  • Communications and consent records, including SMS opt-in and opt-out history, are kept for as long as needed to prove consent and comply with law, typically at least four years.
  • Financial and tax records are kept as long as tax, accounting, and corporate law require.
  • Security and access logs are kept for a limited period to detect and investigate incidents.
  • Backups are retained on a rolling schedule and overwritten in the ordinary course.

When you ask us to delete your information, we delete or de-identify it except where we need to keep it to comply with law, complete a transaction you requested, document consent, defend legal claims, or maintain security. Copies already shared with an Employer are subject to that Employer’s retention practices.

13. Security

We use administrative, technical, and organizational safeguards appropriate to the risk, including encryption in transit, role-based access controls, least-privilege permissions for staff, logging of administrative actions, vendor security reviews, and secure development practices. No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify you and any regulator as required by law. Please help by using a strong, unique password and telling us right away at info@irecruit.co if you suspect unauthorized access to your account.

14. International data transfers

iRecruit.co is based in the United States, and we process personal information in the United States and in other countries where we or our service providers operate. Those countries may have data-protection laws that differ from yours. Where required, we rely on appropriate safeguards for cross-border transfers, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, and we assess the protections available in the destination country. You can request more information about our transfer safeguards at info@irecruit.co.

15. Your privacy rights and how to exercise them

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you and receive a copy of it;
  • Correct inaccurate or incomplete information;
  • Delete your personal information;
  • Port certain information to another provider in a usable format;
  • Object to or restrict certain processing, including processing based on legitimate interests;
  • Withdraw consent where processing is based on consent, without affecting processing that happened before;
  • Opt out of marketing emails, SMS, and, where applicable, targeted advertising, sale, or sharing of personal information (we do none of the last three);
  • Obtain human review of a decision made with automated tools, and contest it;
  • Not be discriminated against for exercising your rights;
  • Complain to a supervisory authority or regulator.

How to make a request

Email info@irecruit.co with the subject line “Privacy request,” tell us which right you want to exercise, and use the email address associated with your account if you have one. You can also write to the mailing address in Section 21.

  • Verification. We will take reasonable steps to confirm your identity before acting, usually by matching the request to the email address on file or asking for information only you would know. We will not ask for more information than we need.
  • Authorized agents. You may use an authorized agent to make a request on your behalf. We may ask for proof that you authorized the agent and may still verify your identity directly.
  • Timing. We respond within the time required by the law that applies to you, generally within 45 days for U.S. state requests and within one month for EU and UK requests, and we will tell you if we need more time.
  • Appeals. If we decline your request, we will explain why. You may appeal by replying to our decision, and we will respond to the appeal within the time the law allows. If you are still not satisfied, you may contact your state attorney general or data-protection authority.
  • Cost. Requests are free unless they are manifestly unfounded or excessive.

16. California privacy disclosures

This section applies to California residents and supplements the rest of this policy. It also serves as our notice at collection for California Candidates and job applicants.

Categories of personal information

In the last 12 months we have collected the categories below for the purposes described in Section 4 and disclosed them for business purposes to the recipients listed in Section 7.

CategoryExamplesDisclosed for a business purpose to
IdentifiersName, email, phone, address, account credentials, IP address, profile linksEmployers (Candidates only), service providers
Personal records (Cal. Civ. Code §1798.80)Contact details, employment and education historyEmployers (Candidates only), service providers
Protected classificationsOnly if volunteered in a resume or form, such as veteran status or citizenshipEmployers (Candidates only, as included in your materials)
Commercial informationEmployer engagements, invoices, payment historyService providers, professional advisors
Internet or network activityPages visited, session data, device and browser informationService providers (hosting, analytics)
GeolocationApproximate location from IP address; preferred work locationsEmployers (preferred locations only), service providers
Professional or employment informationResume, work history, titles, licenses, compensation expectations, references, feedbackEmployers, service providers
Education informationDegrees, schools, certificationsEmployers, service providers
InferencesRole fit, seniority, sector alignment, match relevanceService providers (AI processing); shown to Employers only as recruiter-reviewed summaries
Sensitive personal informationAccount login credentials; work-authorization status; other sensitive data only if volunteeredEmployers (work authorization, where relevant to the role), service providers

Sale, sharing, and sensitive information

  • We do not sell personal information and have not done so in the last 12 months.
  • We do not share personal information for cross-context behavioral advertising.
  • We do not have actual knowledge that we sell or share the personal information of anyone under 16.
  • We use sensitive personal information only for the purposes permitted by the California Consumer Privacy Act, such as providing the Services you requested, security, and legal compliance, and we do not use it to infer characteristics about you. Because of this, we do not offer a separate “limit the use of my sensitive personal information” option.

Your California rights

You have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; to opt out of sale and sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. Section 15 explains how to make a request. We honor Global Privacy Control signals. Retention periods are described in Section 12.

California job applicants

If you are a California resident considered for a role through the Services, the information above describes what we collect from and about applicants, why, and how long we keep it. Employers that receive your information are responsible for their own applicant notices.

17. Other U.S. state privacy rights

Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, may have rights to access, correct, delete, and port their personal information, to opt out of targeted advertising, sale, and certain profiling, and to appeal a denied request. We do not sell personal information, engage in targeted advertising, or profile individuals in a way that produces legal or similarly significant effects without human involvement. Section 15 explains how to make a request or an appeal.

Washington residents: we do not intentionally collect consumer health data as defined by the Washington My Health My Data Act. If health-related information appears in materials you provide, we treat it as described in Section 2G.

18. EU, UK, and other international users

If you are in the European Economic Area, the United Kingdom, or Switzerland, the rights in Section 15 apply to you under the GDPR, the UK GDPR, or the Swiss Federal Act on Data Protection, together with the legal bases in Section 5 and the transfer safeguards in Section 14. You may lodge a complaint with your local data-protection authority; a list of EU authorities is published by the European Data Protection Board, and the UK authority is the Information Commissioner’s Office. We would appreciate the chance to address your concern first at info@irecruit.co.

If you are in Canada, Australia, or another country with its own privacy law, we handle your information in accordance with this policy and the requirements of that law to the extent they apply to us.

19. Children

The Services are for adults engaged in professional recruiting and hiring. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact info@irecruit.co and we will delete it.

20. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new effective date, and for material changes we will give notice by email or in the Services where the law requires or where reasonably possible. Your continued use of the Services after the effective date means you accept the updated policy.

21. Contact

Questions, privacy requests, and complaints go to:

iRecruit.co Inc.
Attn: Privacy
600 1st Ave, Ste 330
Seattle, Washington 98104
info@irecruit.co