Candid

1. Introduction

Tally Software, Inc. (doing business as "Candid," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at trycandid.com, use our platform, or otherwise interact with our Services.

This Policy applies to all users of our Services, including job-seeking candidates ("Candidates") and companies seeking to hire ("Companies"). By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Our Address:
Tally Software, Inc.
2261 Market Street STE 22950
San Francisco, CA 94114

2. Geographic Scope

Our Services are currently available only to users located in the United States and Canada. By using our Services, you represent and warrant that you are located in one of these jurisdictions. We do not knowingly collect or process personal information from individuals located outside of the United States and Canada.

3. Information We Collect

3.1 Information You Provide Directly

When you register for an account or use our Services, we may collect the following categories of information:

For Candidates:

Contact information (name, email address, phone number)
Professional information (resume, work history, job titles, employers, skills, education, certifications, awards, publications, patents)
LinkedIn profile URL and publicly available LinkedIn data
Profile photographs
Career preferences (desired roles, locations, salary expectations, work arrangement preferences)
Availability and start date preferences
Visa and work authorization status
Custom job search preferences and non-negotiables
Companies you wish to block from viewing your profile
Payment information for receiving placement bonuses (processed through Stripe)
Any additional information you choose to provide in free-text fields

For Companies:

Company name and business information
Contact information for authorized representatives
Job descriptions and role requirements
Hiring preferences and criteria
Company culture and values information
Billing and payment information

3.2 Information Collected Automatically

When you access our Services, we automatically collect certain information, including:

Device information (device type, operating system, browser type and version)
IP address and approximate geographic location
Usage data (pages visited, features used, time spent on pages, click patterns)
Referral URLs and how you arrived at our Services
Session information and interaction logs

3.3 Information from Third-Party Sources

We may collect information about you from third-party sources, including:

Publicly available professional profile information (such as LinkedIn)
Data enrichment services that help us complete or verify your professional profile
Information provided by Companies about hiring decisions and outcomes

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Providing and Improving Our Services

Creating and managing your account
Matching Candidates with relevant job opportunities
Facilitating introductions between Candidates and Companies
Processing payments and placement bonuses
Providing customer support
Analyzing usage patterns to improve our Services

4.2 Artificial Intelligence and Automated Processing

We use artificial intelligence ("AI") and machine learning technologies to enhance our Services. Specifically, we use AI for:

Matching Algorithms: Analyzing Candidate profiles and Company requirements to identify and suggest potential matches based on skills, experience, preferences, and cultural fit indicators
Resume Parsing: Automatically extracting and structuring information from uploaded resumes to populate your profile
Generative Resume Creation: If you opt in, generating professionally formatted resumes based on your profile information to share with Companies
Scorecards and Assessments: Creating evaluation summaries and fit assessments for potential matches
Notes and Insights: Generating notes and insights about potential matches to help both Candidates and Companies make informed decisions

4.3 Use of Data for AI Model Improvement

We may use aggregated and de-identified data derived from your use of the Services to improve our AI models and algorithms. This includes analyzing patterns in successful placements, match acceptance rates, and hiring outcomes to enhance the accuracy and effectiveness of our matching technology. We implement appropriate safeguards to ensure that any data used for model improvement cannot be used to identify individual users.

4.4 Communications

Sending you notifications about matches, introductions, and platform activity
Delivering service-related announcements and updates
Sending marketing communications (with your consent, where required)
Responding to your inquiries and support requests

4.5 Legal and Compliance

Complying with applicable laws and regulations
Enforcing our Terms of Service and other agreements
Protecting against fraud, abuse, and security threats
Establishing, exercising, or defending legal claims

5. Information Sharing and Disclosure

5.1 Candidate Profile Confidentiality

Your Candidate profile remains confidential and is not shared with Companies unless and until you affirmatively accept a suggested match. This allows you to explore opportunities incognito without exposing your identity or job search status to potential employers.

5.2 Information Shared with Companies Upon Match Acceptance

When you, as a Candidate, accept a suggested match, the following information may be shared with the relevant Company:

Your name and contact information
Your resume (either your uploaded resume or, if you have opted in, an AI-generated resume based on your profile)
Your professional profile information (work history, skills, education, certifications)
A summary of why you may be a good fit for the role
Your LinkedIn profile URL
Any additional information you have authorized for sharing

5.3 Information We Do NOT Share

We do not share the following information with Companies:

Protected characteristics (race, religion, national origin, age, disability status, veteran status, sexual orientation, gender identity, or other protected classes)
Your salary expectations or current compensation (unless you authorize sharing)
Your list of blocked companies
Other sensitive personal information

5.4 Service Providers and Subprocessors

We share information with third-party service providers who perform services on our behalf. These providers are contractually obligated to protect your information and use it only for the purposes we specify. Our current subprocessors include:

Supabase: Database hosting and authentication services
Amazon Web Services (AWS): Cloud infrastructure and hosting
OpenAI: AI and machine learning services for matching, parsing, and content generation
Google Analytics: Website analytics and usage tracking
Resend: Transactional and marketing email delivery
Stripe: Payment processing for Candidate payouts and Company billing

5.5 Legal Requirements and Protection

We may disclose your information if required to do so by law or in response to valid legal process, including:

Complying with subpoenas, court orders, or other legal requirements
Responding to requests from government or regulatory authorities
Protecting our rights, privacy, safety, or property
Enforcing our Terms of Service
Investigating potential violations of law or our policies

5.6 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.

5.7 No Sale of Personal Information

We do not sell your personal information to third parties for monetary or other valuable consideration.

6. Cookies and Tracking Technologies

6.1 Cookies We Use

We use cookies and similar tracking technologies to collect and store information about your interactions with our Services. The types of cookies we use include:

Essential Cookies: Required for the operation of our Services, including authentication and security
Analytics Cookies: Help us understand how users interact with our Services (we use Google Analytics)
Preference Cookies: Remember your settings and preferences (such as dark/light mode)

6.2 Google Analytics

We use Google Analytics to analyze usage of our Services. Google Analytics uses cookies to collect information about your use of our website, including your IP address. This information is transmitted to and stored by Google. Google may use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website activity and internet usage. For more information on how Google uses data, please visit Google's Privacy Policy.

6.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can typically set your browser to refuse cookies or delete certain cookies. However, if you block or delete cookies, some features of our Services may not function properly.

6.4 Do Not Track

Our Services do not currently respond to "Do Not Track" signals from web browsers. However, you can opt out of certain tracking as described above.

7. Data Retention

7.1 Candidate Data

We retain your Candidate profile and associated data for as long as your account remains active or as needed to provide you with our Services. Because Candidates can toggle their job search status on and off at any time, we maintain your profile data until you request deletion. This allows you to reactivate your job search without having to recreate your profile.

7.2 Company Data

We retain Company account data for as long as the Company maintains an active account. When a Company deactivates or closes their account, they may request deletion of their data.

7.3 Requesting Deletion

You may request deletion of your personal information at any time by contacting us at legal@trycandid.com. We will process your request in accordance with applicable law. Please note that we may retain certain information as required by law or for legitimate business purposes, such as:

Completing any pending transactions
Complying with legal obligations
Resolving disputes
Enforcing our agreements
Maintaining records required for tax, legal, or audit purposes

7.4 Aggregated and De-identified Data

We may retain aggregated or de-identified data that cannot reasonably be used to identify you indefinitely for analytics, research, and service improvement purposes.

8. Data Security

We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Access controls and authentication requirements
Regular security assessments and monitoring
Employee training on data protection
Incident response procedures

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, and you provide information at your own risk.

9. Your Privacy Rights

9.1 Access and Portability

You have the right to request access to the personal information we hold about you. You may also request a copy of your personal information in a portable, machine-readable format.

9.2 Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You can update most of your profile information directly through our platform.

9.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions required by law.

9.4 Opt-Out of Communications

You can opt out of receiving marketing communications from us by following the unsubscribe instructions in those communications or by adjusting your notification preferences in your account settings. Please note that you may still receive transactional or service-related communications.

9.5 Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9.6 Exercising Your Rights

To exercise any of these rights, please contact us at legal@trycandid.com. We will respond to your request within the timeframes required by applicable law. We may need to verify your identity before processing your request.

10. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), including:

The right to know what personal information we collect, use, disclose, and sell
The right to request deletion of your personal information
The right to opt out of the sale or sharing of your personal information (note: we do not sell personal information)
The right to correct inaccurate personal information
The right to limit the use and disclosure of sensitive personal information
The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at legal@trycandid.com.

11. Canadian Privacy Rights

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act ("PIPEDA") and applicable provincial privacy laws, including:

The right to access your personal information
The right to challenge the accuracy and completeness of your information
The right to withdraw consent (subject to legal or contractual restrictions)
The right to complain to the Office of the Privacy Commissioner of Canada

To exercise these rights, please contact us at legal@trycandid.com.

12. Children's Privacy

Our Services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you are under 18 years of age, please do not use our Services or provide any personal information to us. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child under 18, please contact us at legal@trycandid.com.

13. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access through our platform.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Update the "Last updated" date at the top of this Policy
Notify you by email or through a notice on our Services
Where required by law, obtain your consent to material changes

We encourage you to review this Privacy Policy periodically to stay informed about our privacy practices. Your continued use of our Services after any changes constitutes your acceptance of the updated Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Tally Software, Inc.
2261 Market Street STE 22950
San Francisco, CA 94114
Email: legal@trycandid.com

We will respond to your inquiry as promptly as possible and within any timeframes required by applicable law.