Endploy ← Back

Privacy Policy

Last Updated: July 13, 2026

Summary: This policy covers two types of users: Both user types can request immediate deletion anytime.

Who This Policy Applies To

This privacy policy applies to:

1. What Data We Collect

A. Job Seekers (Widget Users)

When you use the Endploy widget on a company's career page, we collect:

B. Dashboard Users (Company Accounts)

When you create a dashboard account, we collect:

2. How We Use Your Data

We use your information to:

2A. Artificial Intelligence & Automated Processing

Endploy uses artificial intelligence and machine learning — including large-language and embedding models accessed through our service providers — to parse resumes and job descriptions and to generate semantic match scores, rankings, and short AI-generated summaries.

2B. Legal Basis for Processing (EEA/UK Users)

Where the GDPR or UK GDPR applies, we process personal data on these bases: (i) your consent, which you provide when you upload a resume through the widget and which you may withdraw at any time; (ii) our legitimate interests in operating, securing, and improving the service; and (iii) performance of a contract with dashboard and company users. Companies that use Endploy to process candidate data act as data controllers and are responsible for establishing their own legal basis and providing any required notices to candidates.

3. Data Retention

A. Job Seekers (Widget Users)

Your resume data is retained while the company account is active. Your data is deleted when:

Demo Mode: If you use the widget on a demo or testing page, your data is automatically deleted after 24 hours.

Cross-Company Note: If you uploaded the same resume to multiple companies, deleting from one company does not affect others. Request deletion via email to remove from all companies.

What we keep vs. delete:

B. Dashboard Users (Company Accounts)

Sandbox/Testing Data: Data uploaded through the API sandbox or testing tools is automatically deleted after 24 hours.

We retain your account data as follows:

Compliance Records: For legal and billing purposes, we retain minimal audit records (user ID, email, deletion timestamp) for up to 7 years after account deletion, as required for tax and billing dispute resolution.

4. Data Sharing

We do NOT sell your data. We are NOT a data broker.

Data Isolation: Your resume is only shared with the company whose career page you used. We do not share your personal information across companies or sell access to your profile.

We only share your information with:

Our role. For candidate resumes uploaded through a company's widget, that company is the data controller and Endploy acts as its processor. For business customers subject to the GDPR, UK GDPR, or CCPA/CPRA, a Data Processing Addendum is available on request at privacy@endploy.com.

5. Your Rights (GDPR & CCPA)

A. Job Seekers (Widget Users)

You have the right to:

To exercise these rights, email us at: privacy@endploy.com with your email address and resume filename. We currently process these requests through our privacy/admin workflow and aim to respond within 30 days.

B. Dashboard Users (Company Accounts)

You have the right to:

Dashboard users can exercise most rights directly through their account settings. For help, email: privacy@endploy.com

6. Security

We protect your data using:

6a. Cross-Company Deduplication

To improve efficiency and reduce processing costs, we use a hash-based deduplication system:

7. Cookies & Tracking

The Endploy widget does NOT use cookies or tracking pixels. We only collect data you explicitly provide by uploading your resume.

8. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect data from children.

9. International Data Transfers

Your data is stored on Google Cloud servers located in the United States and may be processed by our service providers in the United States. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses (with the UK Addendum where applicable) and, where relevant, our service providers' certification under the EU–U.S. Data Privacy Framework. A copy of the relevant safeguards is available on request at privacy@endploy.com.

10. Changes to This Policy

We may update this policy occasionally. We'll notify you of significant changes by updating the "Last Updated" date.

11. Contact Us

Questions about this privacy policy? Contact us:

© 2026 Endploy. All rights reserved.