This Privacy Policy describes how Ganloss Inc. (“Ganloss”, “we”) collects, uses, shares, and protects personal information when you use ganloss.com and related services (the “Platform”). The Platform is an AI and technology hiring marketplace serving primarily users in the United States.
1. Data controller
Ganloss Inc.
228 Park Avenue S, PMB 45678, New York, NY 10003, United States
Email: support@ganloss.com
2. Scope
This Policy applies to candidates, recruiters, visitors, and newsletter subscribers. Recruiters who receive candidate applications may also be independent controllers of that data—see Section 8.
3. Information we collect
3.1 Account and identity
- Name, email address, password (stored hashed), account role (candidate / recruiter / affiliate).
- Optional profile photo or avatar.
- Authentication tokens and session identifiers.
3.2 Candidate professional data
- Location and remote preferences.
- Professional title, bio, skills, languages, certifications.
- Work experience, education, projects, portfolio links.
- Resume/CV uploads and parsed fields.
- LinkedIn, GitHub, or other profile URLs you provide.
- Salary expectations or compensation notes, if provided.
- Availability, employment preferences, and work authorization information, if provided.
- Applications, cover messages, and application history.
- Job alerts and saved searches.
3.3 Recruiter and employer data
- Company name, slug, description, logo, website.
- Job listings, pipeline notes, and messaging related to hiring.
- Billing contact, subscription status, payment metadata from our payment processor (we do not store full card numbers).
3.4 Technical and usage data
- Server logs (IP address, user agent, timestamps, pages requested).
- Security logs, abuse prevention signals, and error diagnostics.
- Essential cookies (see Cookie Policy).
4. Who can see your information
Candidate profile visibility depends on product settings and features. In general:
- Public — Information you publish to the public talent directory (when enabled) may be visible to anyone on the internet, indexed by search engines, and displayed on Ganloss pages. This may include name, title, location, skills, portfolio links, and selected experience—never your password.
- Recruiter-visible — Registered recruiters may see professional information needed to evaluate candidates (profile, resume fields, application materials) according to Platform features and your visibility choices.
- Private / not in directory — If you do not enable public discovery, your profile may not appear in public search or the talent directory; recruiters may still see data when you apply to their listings or when you explicitly share your profile.
We do not sell your personal information as “personal information” under the California Consumer Privacy Act (CCPA/CPRA) in the sense of selling data for monetary consideration. We use data to operate the marketplace as described below.
5. Purposes and legal bases (including EEA/UK users)
We process personal information to:
- Provide the Platform — accounts, listings, applications, alerts, dashboards (contract / legitimate interest / consent where required).
- Security and fraud prevention — protect users and the integrity of listings (legitimate interest).
- Improve the product — analytics in aggregate, SEO for public job pages, quality monitoring (legitimate interest).
- Communications — service emails, application updates, newsletters if you opt in (consent or legitimate interest).
- Legal compliance — respond to lawful requests, enforce Terms (legal obligation / legitimate interest).
- Billing — process recruiter subscriptions via our payment processor (contract).
Where GDPR applies, our legal bases are listed above. You may withdraw consent for optional communications at any time.
6. Retention
- Active accounts — while your account exists and as needed to provide the service.
- After last activity — up to 3 years for account-related records unless a longer period is required by law or dispute.
- Applications — up to 2 years unless deleted earlier or required longer for legal claims.
- Closed job listings — may be aggregated or anonymized after ~12 months where feasible.
- Logs — typically rolling retention (e.g., 30–90 days) unless needed for security investigations.
7. Recipients and processors
We share data with service providers that help us operate the Platform, such as:
- Hosting and database providers (United States).
- Email delivery providers.
- Payment processor (e.g., Stripe) for subscriptions.
- Authentication and social login providers if you choose them (Google, LinkedIn).
Providers are bound by contractual confidentiality and security obligations. We may disclose information if required by law or to protect rights, safety, and integrity of the Platform.
8. Recruiters as separate parties
When you apply to a job, the recruiter receiving your application may process your data under their own privacy notice and employment laws. Ganloss transmits applications on your instruction but does not control recruiters’ subsequent use.
9. International transfers
Ganloss is operated from the United States. Our primary database is hosted in the United States. If you access the Platform from the European Economic Area, United Kingdom, or other regions with data transfer rules, your information may be transferred to the US and other countries where our providers operate.
Where GDPR requires safeguards, we rely on appropriate mechanisms such as Standard Contractual Clauses (SCCs) with processors and supplementary measures where applicable. Contact support@ganloss.com for a copy of relevant safeguards or to discuss transfer impact assessments.
10. Your rights
Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to processing, and to lodge a complaint with a supervisory authority (EEA/UK).
- US state laws — residents of California, Colorado, Virginia, and other states with privacy laws may have additional rights (know, delete, correct, opt out of certain processing). We do not sell personal information for cross-context behavioral advertising as defined under CPRA without offering required opt-outs.
To exercise rights, email support@ganloss.com. We may verify your request. Authorized agents may submit requests where permitted by law.
11. Security
We use industry-standard measures (encryption in transit, hashed passwords, access controls). No method is 100% secure; report suspected incidents to support@ganloss.com.
12. Children
The Platform is not directed to children under 16. We do not knowingly collect data from children under 16.
13. Cookies
See our Cookie Policy.
14. Changes
We may update this Policy. Material changes will be posted with a new “Last updated” date and, where appropriate, notified in-product or by email.
15. Contact
Privacy inquiries: support@ganloss.com