Privacy Policy

Effective Date: May 29, 2026
Last Updated: May 30, 2026

1. What findable.work does

findable.work helps hiring teams describe roles, create job descriptions, generate job posts, source potential candidates, draft recruiting outreach, and manage candidate pipelines.

The service uses artificial intelligence and third-party professional data providers to help users find people who may match a hiring need. Candidate results may include professional and contact information obtained from third-party data providers, public professional sources, or information provided by our users.

2. Who this policy applies to

This Privacy Policy applies to:

1. Account holders and workspace users, such as founders, hiring managers, recruiters, and other people who create or use a findable.work account.
2. Guest users, who interact with the product before creating an account.
3. Candidates or potential candidates, whose professional information may appear in candidate search results or recruiting pipelines, even if they do not use or sign in to findable.work.
4. Website visitors, who visit our website or interact with our pages.

3. Information we collect

A. Account and login information

When you create an account, we may collect:

• Name, if provided.
• Email address.
• Password credentials, if you use email/password login.
• Google OAuth identity information, if you sign in with Google.
• Account plan, usage limits, credits remaining, and account role.
• Payment-related identifiers, such as Stripe session IDs or billing records.

We do not directly store full payment card numbers. Payments are processed by our payment provider.

B. Guest session information

If you use the guest preview experience, you may chat with our AI assistant before creating an account. Your guest conversation may be stored locally in your browser using session storage. If you create an account, we may associate or "claim" that guest conversation into your account so you can continue your work.

C. Chat, prompts, and recruiting workflow information

When you use findable.work, we collect and store information you submit or generate through the product, including:

• Chat conversations and messages with the AI assistant.
• Job descriptions, job requirements, job titles, locations, compensation ranges, employment type, and other role information.
• AI-generated job posts, outreach drafts, follow-up sequences, and suggested campaign schedules.
• Sourcing project information, candidate shortlists, project status, and usage or credit history.
• Candidate pipeline stages, notes, tags, activity logs, and contact status.
• Internal prompt and task information necessary to operate the service.

Please do not submit sensitive personal information unless it is necessary for your use of the service and you have the right to provide it.

D. Candidate and professional profile information

findable.work may display, process, and store candidate-related information, including:

• Name.
• Current or past role.
• Company.
• Work email.
• Phone number.
• LinkedIn profile or slug.
• Location.
• Professional summary.
• Work experience.
• Education.
• Avatar or profile image.
• Professional identifiers from third-party data providers.
• Match score, pipeline stage, tags, and activity history.
• Contact timestamps and communication channel.

This information may come from third-party professional data providers, public professional sources, enrichment providers, or users of the service.

Candidates are not required to create an account with findable.work for their professional information to appear in the service.

E. Outreach information

If users create outreach through findable.work, we may store:

• Email or LinkedIn outreach drafts.
• Message subjects and bodies.
• Tone, personalization settings, and follow-up sequences.
• Contact timestamps and channel information.
• Reply-pause or send-time rules, if enabled.

Unless we expressly provide sending functionality, findable.work provides drafting and workflow tools. The customer or recruiter remains responsible for deciding whether and how to contact candidates.

F. Technical and usage information

We may collect technical information such as:

• IP address.
• Device and browser information.
• Log data.
• Authentication session information.
• Product usage events.
• Error logs.
• Security and fraud-prevention signals.

We may use cookies, local storage, session storage, or similar technologies to operate authentication, maintain sessions, remember product state, and provide core functionality.

4. How we use information

We use personal information to:

• Create and manage user accounts.
• Authenticate users.
• Provide and improve the findable.work service.
• Generate job descriptions, job posts, outreach drafts, and candidate search queries.
• Source, display, rank, and organize candidate results.
• Track usage, credits, sourcing projects, and billing events.
• Provide customer support.
• Send service-related communications.
• Maintain security and prevent abuse.
• Debug, monitor, and improve product performance.
• Enforce our Terms of Service and acceptable use rules.
• Comply with legal obligations.

We may use aggregated, de-identified, or anonymized information to analyze and improve the service.

5. AI processing

findable.work uses AI models and AI infrastructure providers to provide core product functionality, including chat, clarifying questions, job description drafting, candidate matching assistance, outreach drafting, and workflow automation.

When you use the service, your inputs, job information, messages, candidate snippets, and generated outputs may be sent to AI providers or AI gateway providers for processing.

AI-generated outputs may be inaccurate, incomplete, outdated, biased, or unsuitable for a particular use. Users are responsible for reviewing AI-generated job descriptions, outreach messages, candidate recommendations, match scores, and other outputs before using them.

findable.work does not intentionally use customer content to train public AI models. However, AI providers may process data according to their own data processing terms, security commitments, and retention practices.

6. Google user data

findable.work integrates with Gmail and Google Calendar to help users send recruiting outreach, read replies from candidates, and schedule interviews. This section describes how we access, use, store, and share data obtained from Google APIs. This use is in addition to the disclosures elsewhere in this Privacy Policy.

A. Google services and OAuth scopes we request

We only request the scopes needed to deliver user-facing recruiting features. Access is granted by the signed-in user through Google's OAuth consent screen and can be revoked at any time.

• gmail.send — send recruiting outreach emails on the user's behalf from their connected Gmail account.
• gmail.modify — manage labels and update the state of outreach threads created by findable (for example, mark threads read or apply labels).
• gmail.readonly — read replies to outreach threads so the user can see candidate responses inside findable.
• calendar.readonly — read free/busy and existing calendar events to suggest interview times.
• calendar.events — create, update, and cancel interview events that the user schedules through findable.

B. How we access Google user data

We only access Google user data after the signed-in user explicitly connects Gmail and/or Google Calendar through Google's OAuth flow from Settings → Connections. The user can disconnect at any time from the same screen, which revokes findable's access and deletes the stored OAuth tokens.

C. How we use Google user data

We use Google user data solely to provide the user-facing recruiting features the user has connected: sending outreach from the user's Gmail account, surfacing candidate replies inside findable, and reading or scheduling interview events on the user's Google Calendar. We do not use Google user data to train AI or machine learning models, to show it to other users outside the user's workspace, or for advertising.

D. How we store Google user data

• OAuth tokens are stored encrypted and used only to call Google APIs on the user's behalf.
• Message metadata and reply content needed to display the outreach inbox are stored in our database under the user's account.
• Calendar events read or created through findable are stored only as needed to display them and manage scheduling in the product.

E. How we share Google user data

We do not sell Google user data and we do not share it with third parties for their own purposes. Google user data is processed only by our infrastructure subprocessors (hosting, database, and AI providers used to draft outreach) to deliver the features the user requested, and only to the extent necessary to do so.

F. Retention and deletion

Google user data is retained while the Google connection is active. Disconnecting Gmail or Google Calendar from Settings → Connections revokes findable's access and deletes the stored OAuth tokens. Users can also revoke findable's access at any time from myaccount.google.com/permissions. Deleting your findable account removes associated Google user data within a reasonable period, subject to legal retention obligations.

G. Limited Use disclosure

findable.work's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Legal bases for processing

Where applicable law requires a legal basis, we process personal information under one or more of the following legal bases:

• Contract: to provide the service you requested, including account access, workspace functionality, and billing.
• Legitimate interests: to operate, secure, improve, and market the service; prevent abuse; support recruiting workflows; and provide business-to-business recruiting functionality.
• Consent: where we ask for consent, such as for certain optional communications or cookies.
• Legal obligation: to comply with applicable laws, accounting rules, tax requirements, or lawful requests.
• Customer instructions: where we process candidate data on behalf of a customer who uses findable.work for recruiting purposes.

8. Candidate data and customer responsibility

For account information and product operations, Virgilio Technologies LLC generally acts as the controller of personal information.

For candidate information that a customer sources, stores, organizes, contacts, or otherwise processes through findable.work, the customer is generally the controller of that candidate information, and findable.work acts as a processor or service provider acting on the customer's instructions.

Customers are responsible for ensuring that they have a lawful basis to process candidate information, contact candidates, use recruiting outreach, and make hiring-related decisions. Customers must not use findable.work to discriminate, process unlawful hiring criteria, send spam, violate recruiting or communications laws, or violate the rights of candidates.

9. How we share information

We may share personal information with:

A. Service providers and subprocessors

We use third-party service providers to operate findable.work. These may include:

• Hosting, database, and authentication providers.
• Serverless infrastructure providers.
• AI model and AI gateway providers.
• Candidate data and enrichment providers.
• Payment processors.
• Email and transactional message providers.
• Security, logging, analytics, and support tools.

These providers process information to help us deliver the service.

B. Third-party candidate data providers

Candidate information may be obtained from or enriched through third-party professional data providers. These providers may maintain their own privacy notices, data rights processes, and opt-out mechanisms.

C. Customers and workspace users

Candidate records, job information, messages, notes, outreach drafts, and pipeline activity may be visible to authorized users within the relevant customer workspace.

D. Legal and safety disclosures

We may disclose information if we believe it is necessary to:

• Comply with law or legal process.
• Protect the rights, safety, or property of findable.work, our users, candidates, or others.
• Investigate fraud, abuse, security incidents, or violations of our Terms.
• Enforce our agreements.

E. Business transfers

If we are involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be disclosed or transferred as part of that transaction, subject to appropriate safeguards.

10. Payments

Payments, credits, subscriptions, and related billing events may be processed by Stripe or another payment provider. We may store payment-related identifiers, invoices, credit ledger information, plan information, and transaction status. We do not directly store full payment card numbers.

11. Cookies, local storage, and session storage

We may use cookies, local storage, session storage, and similar technologies to:

• Keep you signed in.
• Support authentication and account security.
• Store guest session conversations before signup.
• Remember product state.
• Improve performance and reliability.
• Prevent fraud or abuse.

Guest conversations may be stored in session storage and may be cleared when the browser tab or session ends, depending on browser behavior. If a guest user signs up, the guest conversation may be associated with the new account.

12. Data retention

We retain personal information for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security.

In general:

• Account information is retained while the account is active.
• Chat messages, conversations, jobs, job posts, outreach drafts, sourcing projects, and pipeline information are retained until deleted by the user, deleted by the workspace, or no longer needed.
• Candidate information may remain in a customer workspace until the customer removes it, deletes the workspace, or requests deletion.
• Billing records may be retained as required for tax, accounting, and compliance purposes.
• Logs and security records may be retained for a limited period for security, debugging, and abuse-prevention purposes.
• Backups may retain information for a limited period before being overwritten or deleted according to our backup practices.

13. Security

We use reasonable technical, administrative, and organizational measures designed to protect personal information. These may include access controls, HTTPS encryption in transit, authentication controls, database security rules, role-based access controls, and managed authentication infrastructure.

No system is perfectly secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed.

14. International data transfers

findable.work is operated by a United States company, and our service providers may process information in the United States and other countries. If you access the service from outside the United States, your information may be transferred to, stored in, or processed in countries that may not provide the same level of data protection as your jurisdiction.

Where required, we rely on appropriate safeguards for international transfers, such as contractual protections or standard contractual clauses.

15. Your privacy rights

Depending on your location, you may have rights to:

• Access personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of information.
• Object to or restrict certain processing.
• Request portability of certain information.
• Opt out of certain uses or disclosures.
• Withdraw consent where processing is based on consent.
• Appeal a privacy rights decision where applicable law provides that right.

To exercise your rights, contact us at support@findable.work.

We may need to verify your identity before responding. If you are a candidate whose information appears in a customer workspace, we may need to coordinate with the relevant customer, who may be the controller of your information.

16. Candidate rights and opt-out requests

If you are a candidate or potential candidate and believe your professional information appears in findable.work, you may contact us at support@findable.work to request access, deletion, correction, objection, or suppression.

Please include enough information for us to locate your record, such as your name, work email, LinkedIn profile, current or past employer, and the nature of your request.

Because some candidate information may come from third-party professional data providers, deleting or suppressing information from findable.work may not remove the information from the original third-party provider. You may also need to submit requests directly to the relevant third-party data provider.

We will respond to verified privacy requests as required by applicable law.

17. California privacy notice

If you are a California resident, California law may provide additional rights regarding your personal information, including rights to know, delete, correct, limit, and opt out of certain sharing or sales of personal information.

We do not knowingly sell personal information in the traditional sense of exchanging it for money. However, some privacy laws define "sale" or "sharing" broadly. To the extent our use of third-party candidate data or service providers is considered a sale, sharing, or disclosure under applicable law, you may contact us at support@findable.work to exercise your rights.

We do not knowingly collect, sell, or share personal information of children under 16.

18. European and UK users

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have additional rights under applicable data protection laws.

For account holders, Virgilio Technologies LLC is generally the controller of account and service usage information.

For candidate information processed at the direction of a customer, the customer is generally the controller, and findable.work processes that information as a processor.

You may contact us at support@findable.work to exercise your rights. You may also have the right to lodge a complaint with your local data protection authority.

19. Recruiting, outreach, and communications compliance

Customers are responsible for ensuring that their recruiting activities comply with applicable laws and platform rules, including laws relating to email, electronic communications, privacy, employment, anti-discrimination, and candidate outreach.

findable.work provides tools for drafting, organizing, and managing recruiting activity. Customers are responsible for reviewing outreach messages, confirming lawful basis, honoring opt-outs, and ensuring that candidate communications are appropriate and compliant.

20. Children

findable.work is intended for business and professional use. It is not directed to children under 18, and we do not knowingly collect personal information from children under 18.

21. Do Not Track

Some browsers offer "Do Not Track" signals. There is no uniform industry standard for responding to these signals. Unless required by law, we do not currently respond to Do Not Track signals.

22. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify users by email, in-app notice, or by updating the effective date above. Your continued use of the service after the updated Privacy Policy becomes effective means you acknowledge the updated policy.

23. Contact us

If you have questions or requests regarding this Privacy Policy or your personal information, contact:

Virgilio Technologies LLC
131 Continental Dr, Suite 305
Newark, Delaware 19713
United States

Email: support@findable.work