Privacy Policy
Last updated: January 2025
1. Information We Collect
We collect information you provide directly: name, email, phone, company, job postings, resumes, certifications, and messages. We also collect usage data (pages visited, features used, match interactions) and device information (IP address, browser type).
2. How We Use Your Data
For candidates: to match you with jobs, provide career coaching, and send relevant opportunities. For employers: to screen candidates, fill roles, and provide market intelligence. We also use data to improve our AI models, prevent fraud, and comply with legal obligations.
3. Data We Never Sell
We do not sell candidate personal data to third parties — ever. We do not share candidate contact information with employers until a mutual match is established and the candidate opts in.
4. Data Sharing
We share data with: (a) service providers who help us operate (cloud hosting, background checks, credential verification); (b) employers when a candidate opts into a match; (c) authorities when required by law. All service providers are bound by data processing agreements.
5. AI & Automated Decision-Making
Our AI scores candidate-job matches and generates coaching advice. Candidates have the right to request human review of any AI-generated assessment, opt out of automated matching, and receive an explanation of how a score was calculated. Contact privacy@imogl.com to exercise these rights.
6. Your Rights (CCPA / GDPR)
You have the right to: access your data, correct inaccuracies, delete your data, export your data in a portable format, and opt out of marketing communications. California residents may request information about data sold or shared (none, currently). EU residents have additional GDPR rights including the right to lodge a complaint with a supervisory authority.
7. Data Retention
Candidate profiles are retained for 24 months after last activity, then anonymized. Employer data is retained for the subscription term plus 90 days. Resume data is deleted on request or upon profile deletion. Chat messages with the Career Copilot are retained for 12 months for quality improvement.
8. Security
We use AES-256 encryption at rest, TLS 1.3 in transit, and SOC 2 Type II controls. See our Security page for details. Breach notification is provided within 72 hours of confirmation per GDPR Article 34.
9. Children's Privacy
iMOGL is not directed to individuals under 18. We do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us for prompt deletion.
10. Changes to This Policy
We may update this policy with 30 days' notice. Material changes will be communicated via email and in-app notification. Continued use after the effective date constitutes acceptance.