Privacy Policy

Effective Date: October 9, 2026

Last Updated: October 9, 2026

At Corkyy, your privacy is a top priority. We're committed to transparency, user empowerment, and building a platform that respects your personal information. This Privacy Policy outlines how we collect, use, share, and protect your data when you use Corkyy's website and services.

1. Who This Policy Covers

• Users: People who apply for jobs, share application links, or refer others to apply.
• Recruiters: Individuals who opt in to support hiring efforts by endorsing candidates, screening applicants, and referring or sharing jobs.
• Screeners: Recruiters who are designated to pre-qualify applicants by reviewing applications and providing screening notes to hiring teams.
• Hiring Users: Employers, recruiters, or company representatives who post jobs and evaluate applicants.
• Visitors: Individuals who browse Corkyy's platform without creating an account or logging in.

2. What We Collect

• Personal Details: Name, email, phone number, and (if applicable) job titles, company details, and resumes.
• Account Information: Username, password, and limited payment or subscription details (for hiring users).
• Profile & Job Info: Professional background, endorsements, referrals, and job-related submissions.
• Screening Data: For screener feature users, we collect screening questions created by hiring users, screening notes and assessments provided by screeners (up to 5,000 characters), answers to screening questions, and screening completion status.
• Notes and Suggestions: Notes you write about applicants and other people on the Platform, and the suggestions our agents make to you, including whether you accepted or dismissed them.
• Images: Company logos and user profile photos (if provided).
• Location Information: Addresses, city, and state for job postings and company locations to enable location-based job searches.
• Tax Information: For users receiving rewards or payouts exceeding $600 per year, our payment processor (Stripe) collects Social Security Numbers (SSN) or Employer Identification Numbers (EIN) directly from you for IRS tax reporting purposes (1099-NEC forms). Corkyy does not store or access this information.
• Usage Data: IP address, device/browser info, page interactions, and cookies (see Section 10).
• Support History: Messages and support interactions with our team.

We do not collect real-time GPS location, track your movements, or access your camera or microphone.

Contacts: We do not look at your contacts unless you ask us to. If you choose to import them, we read names, email addresses and phone numbers, and nothing else. We use the email addresses to find people you already know who are on Corkyy; phone numbers are only shown back to you and are never used for matching. Nothing is sent to anyone. We do not message your contacts, and we do not tell them you imported them. The list is yours alone: it never becomes a company's property, it is never used to serve anyone but you, and closing your account deletes it with you. Someone who is not on Corkyy can ask us to remove their details at any time by contacting us.

3. How We Use Your Information

• Operate and improve our platform and user experience.
• Enable job applications, referrals, and endorsements.
• Process payments (via Stripe, our secure third-party payment processor).
• Communicate with you about activity, updates, or support.
• Send marketing content (only if you’ve opted in).
• Detect fraud or security threats and meet legal obligations.
• Conduct internal research and analytics (aggregated and anonymized).
• Provide agent suggestions, such as who to invite to a job and who to endorse, which a person then decides on.

We never use AI or automated decision-making to reject candidates. Human judgment is always involved. We use AI to suggest, never to decide. Our agents can suggest who to invite to a job and who to endorse, and can draft a short reason for a suggestion.

4. Your Privacy Rights

General Rights (All Users):

• Access & Correction: View and edit your personal data at any time through your account settings.
• Deletion: Request deletion of your data (subject to legal and operational exceptions such as tax records, dispute resolution, and contract fulfillment).
• Data Portability: Receive your data in a common, machine-readable format (CSV or JSON).
• Opt-Out: Unsubscribe from marketing emails anytime by clicking the unsubscribe link in any email or contacting us.

California Residents (CCPA):

• Right to Know: Request disclosure of what personal information we collect, use, and share.
• Right to Delete: Request deletion of your personal information.
• Right to Opt-Out of Sale: We do NOT sell your personal information. We do not and will not sell user data to third parties.
• Non-Discrimination: You have the right to exercise these rights without discriminatory treatment.

EU/EEA Residents (GDPR):

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion (subject to legal obligations).
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Object: Object to processing based on legitimate interests.
• Right to Data Portability: Receive your data in a portable format.
• Right to Lodge a Complaint: Contact your local data protection authority if you have concerns.

Legal Basis for Processing (GDPR):

We process your data based on: (1) Contract: to provide platform services you've signed up for; (2) Consent: for marketing communications (opt-in only); (3) Legitimate Interest: for fraud prevention, platform improvements, and business operations.

To exercise your rights, contact us at help@corkyy.com. We may verify your identity before processing requests to protect your privacy and security.

5. How We Share Data

• With other users: As needed (e.g., job seekers with hiring companies, endorsements with candidates).
• With the company you apply to: your application and the information in it may be sent to the company that posted the job and to the systems that company uses to receive applications. Those systems are the company's, and their terms govern what they do with it.
• With service providers: Including email, hosting, and payment processors, bound by strict confidentiality.
• With our AI service provider: Corkyy may send user content (résumés, profiles, job descriptions, applicant activity, messages, notes, and agent training) to its AI provider (Anthropic) strictly through the API, which contractually does not retain the data beyond processing and never uses it to train models. We only send the minimum needed for each feature. Corkyy never asks for or collects gender, race, or ethnicity.
• Internal monitoring: Platform-generated emails are copied to our internal monitoring system for quality assurance, support, and compliance purposes.
• With legal authorities: If required to comply with the law or protect safety.
• During business transitions: Such as mergers or acquisitions, under confidentiality safeguards.
• At your direction or with your consent.

6. Data Retention

• Active accounts: Data is retained while you actively use the platform to provide ongoing functionality.
• Inactive accounts: We may delete or anonymize account data after 2 years of inactivity (no logins, applications, or platform activity).
• Tax and payment records: Retained for 7 years to comply with IRS and financial regulations.
• Screening notes and assessments: Retained as long as the associated job posting is active, plus 1 year after job closure for hiring team reference.
• AI processing records: We do not store the content we send to our AI provider. We keep only usage records, such as which feature made the request, when it happened, and how much processing it used.
• Legal and compliance data: Retained only as long as necessary for legal obligations, dispute resolution, or fraud prevention.
• Referrals: Minimal data kept and purged if unused within 90 days.

When data is no longer needed, we securely delete or anonymize it.

7. International Transfers

• Location: Corkyy operates in the U.S., and your data may be processed there.
• Safeguards: We use standard legal protections (e.g., SCCs, encryption) for international data transfers to ensure your data is safeguarded wherever processed.

8. Children's Privacy

• Not for children under 13.
• No knowingly collected data from minors.
• Deletion on discovery.
• Contact us: Parents or guardians may request removal.

9. Security Measures

• Encryption
• Secure servers
• Access controls

While no internet service is 100% secure, we take security seriously and monitor for threats. You should also protect your password and avoid sharing it with others.

10. Cookies & Tracking

Cookie Types We Use:

• Session cookies: Keep you logged in and maintain your session. These expire when you close your browser.
• Preference cookies: Remember your settings and preferences (e.g., language, display options). These persist until you clear them.
• Analytics cookies (Google Analytics): Track page views, user flows, and platform usage to help us improve. These expire after 2 years.

User Control Options:

You can disable cookies through your browser settings: • Chrome > Settings > Privacy and Security > Cookies • Firefox > Settings > Privacy & Security • Safari > Preferences > Privacy Disabling cookies may affect login functionality and some platform features.

What We Do NOT Do:

• We do NOT use cookies for cross-site tracking, behavioral advertising, or third-party ad networks.
• We do NOT sell cookie data to third parties.

11. Third-Party Links

• External sites: Our site may link to third-party websites.
• No responsibility: We are not responsible for their privacy practices.
• Review policies: Please review their terms before sharing information.

12. Automated Tools (Limited Use)

• No AI-based hiring decisions.
• No automated profiling with legal consequences.
• Right to challenge: You can reasonably contest any automated action.
• Agents suggest, people decide: our agents suggest who to invite to a job and who to endorse. A person always makes the decision.
• What our agents never do: they do not reject candidates, rank candidates out, or make hiring decisions.
• Applicants from share links: when someone shares a job link and you apply through it, our agent may review your application in order to suggest to that person whether to endorse you. Endorsing is their decision.

13. Updates to This Policy

• Policy changes: We may update this policy as needed.
• Advance notice: Major changes will be communicated directly or posted on our site.
• Continued use: Using Corkyy after updates implies acceptance.

14. Contact Us

Questions or concerns? Reach out anytime: help@corkyy.com