Privacy Statement

1. Introduction

This Privacy Statement explains how Qualifyr Jobs LLC ("Qualifyr," "we," "us," or "our") collects, uses, shares, and protects personal information when you use our skills-based hiring platform at qualifyrjobs.com (the "Platform" or "Services").

This Statement applies to all users: job candidates ("Candidates"), employers and hiring professionals ("Employers"), and website visitors ("Visitors"). We have designed this statement to comply with applicable privacy laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act as amended by CPRA (CCPA/CPRA), Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable regulations.

By using our Services, you acknowledge that you have read and understood this Privacy Statement.

2. Who We Are

Qualifyr Jobs LLC operates qualifyrjobs.com, a skills-based hiring platform connecting employers with candidates through job-specific challenges and AI-assisted evaluation.

Our Role as Data Controller and Processor

• Data Controller: We are the data controller for information collected directly from users for our own purposes (account registration, platform operations, marketing, analytics).
• Data Processor: When processing candidate application data on behalf of employer clients, we act as a data processor. The employer is the data controller in these cases.

3. Information We Collect

3.1 Information You Provide

Candidate Information

• Identity: Name, email, phone, professional photo
• Professional: Work history, education, skills, certifications, resume
• Submissions: Challenge responses including text, code, documents
• Payment: Bank account details for challenge rewards
• Tax: Tax identification numbers for compliance

Employer Information

• Business: Company name, address, industry, size, website
• Contact: Name, email, phone, job title of team members
• Content: Job descriptions, challenge details, compensation info
• Payment: Billing and payment method information

3.2 Automatically Collected Information

• Device: Device type, OS, browser, screen resolution
• Network: IP address, ISP, approximate location
• Usage: Pages visited, features used, time on pages, clickstream
• Cookies: Information via cookies and similar technologies

3.3 Third-Party Sources

• Authentication: Profile info from Google sign-in
• Payments: Transaction data from Stripe
• Analytics: Aggregated data from Google Analytics

3.4 Sensitive Personal Information

We generally do not collect sensitive personal information (race, health, biometrics). If voluntarily included in submissions, we process it solely to provide Services. We do not use sensitive information for inference purposes.

4. How We Use Your Information

4.1 Service Operations

• Account creation and management
• Facilitating job applications and connections
• Processing challenge submissions for AI evaluation
• Processing payments (rewards and platform fees)
• Customer support

4.2 Platform Improvement

• Usage analysis and UX improvement
• Feature development
• AI evaluation system enhancement
• Performance testing

4.3 Communications

• Transactional messages (confirmations, updates, receipts)
• Service announcements
• Marketing (with consent where required)

4.4 Security and Compliance

• Fraud prevention and security monitoring
• Terms enforcement
• Legal compliance and tax reporting

5. Legal Bases for Processing

6. Information Sharing and Disclosure

6.1 With Employers (Candidates)

When you apply, employers receive your profile, challenge submission, AI-generated scorecard, and contact information. Employers are contractually bound to use data only for hiring purposes.

6.2 Service Providers

• Firebase (Google Cloud): Hosting, database, authentication
• Anthropic: AI evaluation and scoring
• Stripe: Payment processing
• Resend: Email delivery
• Google Analytics: Usage analysis

6.3 Legal Requirements

We may disclose information to comply with laws, respond to lawful requests, protect rights/property/safety, investigate violations, or address security issues.

6.4 Business Transfers

Information may be transferred in connection with mergers, acquisitions, or asset sales. We will provide notice before information becomes subject to a different privacy policy.

7. International Data Transfers

Qualifyr is headquartered in the United States. If you access Services from outside the US, your information may be transferred to, stored, and processed in the US and other countries.

Safeguards

For transfers from the EEA, UK, or Switzerland to countries without adequacy decisions, we implement:

• EU Commission-approved Standard Contractual Clauses (SCCs)
• EU-U.S. Data Privacy Framework certifications (where applicable)
• Supplementary technical and organizational measures

You may request copies of transfer mechanisms at [email protected].

8. Data Retention

When retention periods expire, we delete or anonymize your information. We may retain data longer if required by law, for legal proceedings, or with your consent.

9. Your Rights and Choices

To exercise rights: Update via account settings or email [email protected]. We respond within 30 days. For employer-controlled data, we may coordinate with the employer. We will not discriminate for exercising rights.

10. California Privacy Rights (CCPA/CPRA)

Categories Collected (Past 12 Months)

• Identifiers: Name, email, phone, IP address, credentials
• Professional: Employment history, education, skills
• Commercial: Transaction history, payment records
• Internet Activity: Browsing history, platform interactions
• Geolocation: Approximate location from IP
• Inferences: AI-generated skills assessments

Your California Rights

• Know/Access: What we collect and how we use it
• Delete: Request deletion (with exceptions)
• Correct: Fix inaccurate information
• Non-discrimination: Equal service regardless of rights exercised

Sale/Sharing: We do not sell personal information or share for cross-context behavioral advertising. No opt-out is necessary.

Authorized Agents: You may designate an agent with proof of authorization.

Contact: [email protected] (Subject: "California Privacy Request")

11. AI and Automated Processing

How We Use AI

We use Anthropic's Claude to evaluate challenge submissions, generate scores and feedback, and create scorecards for employers.

Data Sent to AI

Challenge submission content, job requirements, and evaluation criteria. We minimize personal information sent. Anthropic is bound by confidentiality and security obligations.

Fairness

We design evaluations for objective, job-relevant skills; monitor for bias; and provide analytics to identify patterns.

Your Rights

• Request human review of AI evaluations
• Provide additional context for submissions
• Contest evaluations believed inaccurate
• Request information about automated processing logic

12. Cookies and Tracking

Third-Party Services

• Google Analytics: Privacy Policy
• Firebase: Privacy Policy
• Stripe: Privacy Policy

Managing Cookies

Control via browser settings, our cookie preferences (where provided), or the Google Analytics Opt-out Add-on. Blocking cookies may affect functionality.

13. Data Security

Security Measures

• Encryption: TLS/SSL in transit, industry-standard encryption at rest
• Access Controls: Strict authentication requirements
• Infrastructure: Google Cloud Platform (Firebase) security
• Vendor Security: Contractual security requirements
• Training: Team privacy and security training

Your Responsibility

Use strong passwords, don't share credentials, log out on shared devices, report suspected unauthorized access immediately.

Breach Response

We maintain incident response procedures and will notify affected individuals and authorities as required by law.

14. Children's Privacy

Our Services are not directed to individuals under 16. We do not knowingly collect information from children under 16. If we learn we have collected such information, we will delete it promptly. Contact [email protected] if you believe we have collected information from a child.

15. Changes to This Statement

We may update this Statement to reflect changes in practices, technology, or legal requirements. When we make changes:

• We update the "Last Updated" date
• For material changes, we provide prominent notice (email or platform banner)
• We retain prior versions for reference

Continued use after changes constitutes acceptance. We review this Statement at least annually.

16. Contact Us

Response Time: Within 30 days. Complex requests may take longer.

EU Authorities: edpb.europa.eu

Canadian Commissioner: priv.gc.ca