Privacy Policy

Effective as of July 1, 2026. Last updated August 31, 2026.

Introduction

Recruitcha, Inc (“Company,” “we,” or “us”) respects your privacy and is committed to protecting it through our compliance with this policy.

This policy describes how we collect, use, maintain, protect, and disclose personal information in connection with recruitcha.ai, app.recruitcha.ai, and related sites (the “Website”) and our software-as-a-service products (the “Services”). It covers information about Website visitors, customers and their users, and business contacts whose information appears in the Services (including hiring managers and similar professionals).

This policy applies to information we collect:

• On the Website and in the Services.
• In email, text, and other electronic messages between you and us.
• When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy.
• When we source, enrich, store, or deliver job-posting and business-contact information as part of the Services, including hiring-manager and prospect records associated with customer campaigns and operational caches used to provide those features.

It does not apply to information collected by:

• Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or through the Website, except as described in this policy with respect to our processors and customer-authorized destinations.

If you are a Recruitcha customer, our processing of personal data in your account on your instructions is also governed by our Terms of Service and Data Processing Addendum (Exhibit A). If you do not agree with this policy, do not use the Website or Services. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

The Website and Services are not intended for children under 16 years of age. No one under age 16 may provide any information to or on the Website or Services. We do not knowingly collect personal information from children under 16. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us.

Whose Information This Policy Covers

• Customers and users. People who visit the Website, create an account, or use the Services on behalf of a customer.
• Business contacts. Hiring managers, recruiters, executives, and other professionals whose business-contact information we source, enrich, store, or deliver so customers can identify who is hiring and run outreach. This includes records stored in customer campaigns and in operational caches used to provide the Services.

Candidate information that a customer uploads (for example, a resume used in a campaign) is processed as customer data under the Terms and DPA. We ask customers not to submit special-category data.

Roles: Controller and Processor

We act in more than one role, depending on the processing:

• Controller of personal information about Website visitors and account holders, and of job-posting and business-contact information that we source, cache, or maintain independently in order to operate and provide the Services (including enrichment lookups and operational warehouses).
• Processor of customer-submitted data and of contact records once they are stored in a customer’s account for that customer’s campaigns, exports, and outreach. In that case the customer is the controller (or a processor for its own client) and determines how those records are used, including any messaging. That processing is described in the DPA.

The customer is solely responsible for ensuring that outreach and other use of enriched contact information complies with applicable law, including data-protection, anti-spam, and direct-marketing rules, and with third-party platform terms.

Information We Collect About You and How We Collect It

We collect several types of information, including information:

• By which you may be personally identified, such as name, address, email address, telephone number, business title, financial information, and similar (“personal information”);
• About hiring managers and other business contacts, such as name, title, company, work email, phone number, professional-profile URL, location, photograph, and related enrichment records;
• About job postings and companies associated with those contacts (title, location, workplace type, description, and similar);
• About your internet connection, the equipment you use to access our Website, and usage details.

We collect this information:

• Directly from you when you provide it to us.
• Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.
• From third-party data providers, publicly available sources, professional networks, job boards, and customer-connected accounts, as described below.

Information You Provide to Us

The information we collect on or through our Website and Services may include:

• Information that you provide by filling in forms. This includes information provided at the time of registering to use our Website, subscribing to our service, configuring campaigns, or requesting further services. We may also ask you for information when you enter a contest or promotion sponsored by us, and when you report a problem with our Website.
• Records and copies of your correspondence (including email addresses), if you contact us.
• Your responses to surveys that we might ask you to complete for research purposes.
• Details of transactions you carry out through our Website and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Website.
• Campaign criteria, uploaded lists, resumes or other files you choose to provide, connected-account credentials or tokens, and messaging templates.

You also may provide information to be published or displayed (hereinafter, “posted”) on public areas of the Website, or transmitted to other users of the Website or third parties (collectively, “User Contributions”). Your User Contributions are posted on and transmitted to others at your own risk. Although we limit access to certain pages, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Website with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.

Business Contact and Job-Posting Information

A core function of the Services is to help customers find companies that are hiring and the business contacts associated with those roles. To do that, we collect, store, and use personal information of hiring managers and similar professionals, and information about related job postings. This is personal data even when it appears on a public profile or job board.

Categories of business-contact information typically include:

• Name, job title, seniority, function, and employer;
• Work email address and phone number (we do not send SMS; phone numbers may still be stored);
• Professional-profile URL, location, and profile photograph;
• Associated job-posting and company attributes, and enrichment metadata.

Sources include:

• Third-party data providers that supply professional-profile, people-search, email, and phone information.
• Publicly available sources, including public job boards, applicant-tracking system career pages, company sites, and professional-networking pages that are accessible without a customer login.
• Job-posting data partners and operational warehouses we maintain so that hiring-signal search does not depend on a live fetch for every query.
• Customer-connected accounts, such as professional-network, email, or CRM destinations the customer enables.
• Customers themselves, when they upload lists or import contacts.

We persist these records in customer campaign tables and in shared operational caches (including company-people and hiring-manager caches) so we can provide, speed up, and improve the Services. Enrichment results are provided “as-is,” may be incomplete or inaccurate, and are not independently verified by Recruitcha, Inc. You (if you are a customer) are responsible for ensuring that any use of this information complies with applicable data-protection, anti-spam, and direct-marketing laws.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
• Information about your computer and internet connection, including your IP address, operating system, and browser type.

The information we collect automatically may include personal information. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize our Website according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website. For information about managing your privacy and security settings for cookies, see Choices About How We Use and Disclose Your Information.
• Web Beacons. Pages of our Website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Website are served by third-parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our website. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see Choices About How We Use and Disclose Your Information.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

• To present our Website and its contents to you.
• To provide you with information, products, or services that you request from us.
• To operate the Services, including discovering hiring signals, qualifying companies, identifying and enriching hiring managers and other business contacts, storing campaign records, and exporting contacts to destinations a customer enables.
• To maintain operational caches and warehouses of job postings and business-contact information so that we can provide those features reliably and without repeating every lookup.
• To fulfill any other purpose for which you provide it.
• To provide you with notices about your account, including expiration and renewal notices.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• To notify you about changes to our Website or any products or services we offer or provide though it.
• To transmit query inputs (such as a name, title, company, or domain) to third-party enrichment and people-search providers in order to return business-contact information.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.

We may also use your information to contact you about services that may be of interest to you. If you do not want us to use your information in this way, please opt-out through the link in any of our communications. For more information, see Choices About How We Use and Disclose Your Information.

We may use the information we have collected from you to enable us to display advertisements to our advertisers’ target audiences. Even though we do not disclose your personal information for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.

Legal Basis for Processing Your Information

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal information only when we have a valid legal basis to do so. These may include:

• Performance of a contract — to provide the Services you request and manage your account.
• Legitimate interests — to operate, improve, and secure our Services, including sourcing and caching publicly associated business-contact and job-posting information for B2B hiring-signal and prospecting features, where these interests are not overridden by your rights. We do not use legitimate interest as a basis to send electronic marketing where applicable ePrivacy rules require consent.
• Legal obligations — when required to comply with applicable laws or regulatory requests.
• Consent — when you choose to provide it for specific purposes, which you may withdraw at any time.
• Customer instructions — when we process customer-account data as a processor under the DPA, the customer is responsible for its lawful basis.

Processors and Service Providers

We use vendors to host the Services, enrich contacts, send or export outreach, and operate product features. They process personal information only as needed for those purposes and under contractual obligations to protect it. We use the following categories of processors (specific vendors may change):

• Infrastructure: cloud hosting, database, authentication, background compute, and payment processing.
• Enrichment and discovery: people-search, contact-enrichment, data-collection, and job-posting data providers.
• Outreach and connectivity: email delivery, professional-network connectivity and messaging, and CRM, ATS, or spreadsheet destinations a customer enables.
• AI and operations: language-model providers used to operate product features, and application monitoring.

A fuller description of subprocessors we use when acting as a processor is in Schedule C of the DPA. Customer-connected destinations process information on the customer’s instructions; those providers’ own policies also apply.

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our business (including the processors listed above) and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
• To the customer on whose behalf we identified or enriched a business contact, and to Third-Party Platforms that customer enables for export or outreach.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Recruitcha, Inc’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Recruitcha, Inc about our Website users or Services data is among the assets transferred.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our terms of service and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Recruitcha, Inc, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
• To transmit limited query inputs (such as a name, title, or company domain) to third-party data enrichment providers in order to return business-contact information as part of our contact-finding features.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

• Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.
• Promotional Offers from the Company. If you do not wish to have your email address used by the Company to promote our own or third parties’ products or services, you can opt-out in any of our communications. If we have sent you a promotional email, you may send us a return email asking to be omitted from future email distributions. This opt-out does not apply to information provided to the Company as a result of a product purchase, warranty registration, product service experience or other transactions.
• Business contacts. If you are a hiring manager or other professional whose information we hold, you may request access, correction, deletion, or objection as described in Accessing, Correcting, and Deleting Your Information. Opting out of a customer’s outreach must generally be directed to that customer (or via that customer’s unsubscribe mechanism); we will assist where we are the processor.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website.

Residents of certain states may have additional personal information rights and choices. Please see Your State Privacy Rights for more information.

Accessing, Correcting, and Deleting Your Information

If you have an account, you can review and change certain personal information by logging into the Website and visiting your account profile page.

You may also email us at legal@recruitcha.com to request access to, correction of, deletion of, or information about personal information that we hold, including business-contact records in operational caches or warehouses. Please include your name, employer, work email, and (if known) a professional-profile URL so we can locate relevant records. We may need to verify your identity. We may not accommodate a request if we believe it would violate any law or legal requirement, prevent us from providing the Services to a customer, or cause the information to be incorrect.

If your information is stored in a customer’s campaign or was processed only on that customer’s instructions, that customer is the controller. We will notify or direct you to the relevant customer where appropriate and will assist the customer in responding, consistent with the DPA. Deleting a record from our operational caches does not delete copies a customer has already exported to an email tool, professional-network tool, CRM, or other destination.

We cannot delete your account-holder personal information except by also deleting your user account, except where Applicable Data Protection Law requires otherwise. If you delete your User Contributions from the Website, copies of your User Contributions may remain viewable in cached and archived pages, or might have been copied or stored by other Website users. Proper access and use of information provided on the Website, including User Contributions, is governed by our Terms of Service.

Where We Transfer Your Information

Recruitcha, Inc is a US-based company and we provide our Services globally. This means that your personal information may be transferred to, stored in, or processed in countries outside of your country of residence, including the United States.

Typical transfers may include:

• Cloud hosting and storage providers that help us operate, maintain, and secure our services.
• Payment processing partners that handle billing and transactions.
• Analytics, communication, and support tools that assist us in improving the Website and responding to inquiries.
• Third-party data enrichment, people-search, job-posting, outreach, and AI providers described in Processors and Service Providers.

Regardless of where your information is processed, we apply technical, administrative, and contractual measures designed to ensure that your personal information is handled securely and in accordance with appropriate safeguards, including the Standard Contractual Clauses where they apply as described in the DPA.

Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.

California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Correct inaccuracies in their personal information, taking into account the information’s nature and processing purpose (excluding Iowa and Utah).
• Data portability.
• Opt-out of personal data processing for:
  • targeted advertising (excluding Iowa);
  • sales; or
  • profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
• Either limit (opt-out of) or require consent to process sensitive personal data.

We do not sell personal information for money to data brokers. We do share business-contact information with customers as part of the paid Services, and we disclose personal information to processors as described above. Depending on the commercial relationship, some U.S. state laws may treat that disclosure as a “sale” or “share.” You may opt out by emailing legal@recruitcha.com with the subject line “Do Not Sell or Share.”

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have certain rights regarding your personal information under applicable data protection laws. These may include the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Delete your personal information in certain circumstances.
• Restrict or object to our processing of your personal information, including processing based on legitimate interests.
• Withdraw consent at any time when we rely on consent to process your information.
• Data portability, allowing you to obtain and reuse your personal information in a structured, commonly used, and machine-readable format.
• Lodge a complaint with a supervisory authority in your country of residence.

The exact scope of these rights may vary by jurisdiction. To exercise any of these rights please email us at legal@recruitcha.com. Authorized agents may submit a request with proof of authorization. We will not discriminate against you for exercising privacy rights.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure, as further described in Schedule B to the DPA. All information you provide to us is stored on our secure servers behind firewalls. All data is encrypted using SSL technology in transit.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including providing our Services, meeting legal, accounting, or reporting requirements, resolving disputes, and enforcing our agreements.

• Customer accounts and campaign leads. Account data, campaign configuration, and hiring-manager or prospect records stored for a customer are retained for the customer’s subscription. After the account or subscription ends, we may delete that customer data any time after thirty (30) days, as described in the Terms, unless a longer period is required by law. Customers should export any records they need to keep before termination.
• Operational caches and warehouses. Job postings and business-contact records that we maintain as controller (including shared company-people and hiring-manager caches) are retained as reasonably necessary to provide, speed up, and improve the Services, then deleted or anonymized. Cache-freshness windows used in product logic (for example, treating a stored person record as stale after a limited number of days) are operational controls and do not by themselves constitute a deletion commitment.
• Backups and legal holds. Residual copies may remain in routine backups for a limited period, and we may retain information as required for legal claims, security, or compliance.

When personal information is no longer required, we delete it or take steps to anonymize it in accordance with applicable laws.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page with a notice that the privacy policy has been updated on the Website home page. If we make material changes to how we treat our users’ personal information, we will notify you by email to the primary email address specified in your account or through a notice on the Website home page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this privacy policy to check for any changes.

Contact Information

To ask questions or comment about this privacy policy, exercise a privacy right, or inquire about business-contact records we may hold, contact us at: