Privacy Notice

1. About this notice

IntroDirectly LLC (“IntroDirectly,” “we,” or “us”) provides a recruiting workspace. This notice covers our website and service, including information about account users, business contacts, and candidates who may not have an account.

We determine how information is used to operate our service and manage our own business relationships. When we handle recruiting information solely on a customer’s instructions, that customer is responsible for the recruiting purpose and its own privacy notices. Our responsibility depends on the activity; not all candidate information is processed solely on a customer’s behalf.

2. Information we collect and use

The information we handle depends on how you or a customer use the service.

Account and business information

Names, work email addresses, organizations, account credentials, permissions, and correspondence. We use these to provide access, manage customer relationships, answer requests, and protect accounts.

Candidate professional information

Names, professional profiles, work and education history, skills, general location, contact details, uploaded files, and recruiting notes or assessments. We use these to organize professional profiles, support candidate review, and facilitate recruiting communications.

Connected accounts and communications

Mailbox identity and authorization information, message recipients and content used in outreach, and message, delivery, reply, and opt-out records. We use these to provide authorized communications and conversation-related features. See Connected accounts below.

Technical and security information

Browser and device information, IP-related records, usage events, cookies, and diagnostic logs. We use these to operate, secure, troubleshoot, and improve the service.

We receive information directly from you, from customers and their authorized users, from uploaded files or authorized browser tools, and from professional information providers and publicly available professional sources. Recruiting assessments may be created by customers through the service.

We also use relevant information to meet legal obligations, handle disputes, and prevent misuse. IntroDirectly does not make final hiring decisions; customers remain responsible for their evaluations and employment decisions.

Legal bases, where applicable

Where data-protection law requires a legal basis, we rely on contract to provide accounts and requested services; legitimate interests to operate a secure business, support professional recruiting, and prevent abuse; consent where required; and legal obligations. These bases depend on the purpose and our role. You may object to processing based on legitimate interests or withdraw consent as described below.

3. Connected accounts

Connecting a mailbox authorizes access within the permissions shown during connection. We use this information to send authorized messages, associate communications with recruiting activity, and detect replies, delivery failures, and opt-outs. The content available to us depends on the connection and features used.

Our use and transfer of Google API data follows the Google API Services User Data Policy and its Limited Use requirements. Such data is used only for permitted user-facing features, security, and legal purposes—not advertising, sale, or general-purpose AI model training. Human access is limited to consented assistance or other exceptions permitted by that policy. These restrictions also apply to our service providers and take precedence over broader language in this notice.

You can revoke access through your email provider’s account settings. For Google, visit your account connections. Revocation stops future authorized access; it does not automatically delete records already held. Contact us to request deletion, subject to the retention needs below.

4. How we disclose information

• Customers and authorized users: relevant professional information, recruiting activity, and communications to support the workspaces and opportunities they manage.
• Service providers: information needed for hosting, communications, professional-data services, security, and support, subject to applicable contractual restrictions.
• Legal and business purposes: relevant information to advisers, authorities, or other parties when needed to meet legal obligations, protect rights or safety, or carry out a business transaction such as a merger or sale, subject to applicable protections.

IntroDirectly does not sell personal information or share it for cross-context behavioral advertising. We do not use candidate records to advertise unrelated products. Connected-account data remains subject to the additional restrictions in Section 3.

5. Retention and security

We keep information for as long as needed for the purposes in this notice. The period depends on the information, the customer relationship and instructions, whether a recruiting activity is ongoing, and applicable legal or dispute-related requirements.

Account records support access and administration; professional and communication records support relevant recruiting activity; security records support abuse prevention and investigations. Limited opt-out records may be retained to prevent further unwanted contact. Backup copies and records subject to legal preservation may remain after deletion from active systems.

We use technical and organizational safeguards designed to protect personal information. No service can guarantee absolute security. Information may be processed in the United States and other countries where we or our providers operate. Where applicable law requires transfer safeguards, those requirements apply; contact us for information about the safeguards relevant to your data.

Cookies and browser signals

We use essential cookies for sign-in, account verification, and security. Blocking these cookies may prevent those features from working. We do not use third-party advertising cookies or cross-site advertising trackers. Our site does not change its behavior in response to a browser’s “Do Not Track” signal; that signal is distinct from legally recognized privacy preference signals.

6. Your privacy choices

Depending on your location and the applicable law, you may request access to or a copy of your information, correction, deletion, portability, or restriction of processing. You may also object to certain uses, withdraw consent without affecting earlier lawful processing, or complain to your local data-protection authority.

We may request information reasonably needed to verify your identity or an authorized agent’s authority. We use that information to handle the request. Where a customer is responsible, we will direct you to it or assist it in responding. Rights are subject to applicable exceptions; we will explain if we cannot fulfill a request. To appeal a decision where that right applies, reply to our response and ask for a review. You will not be discriminated against for exercising applicable rights.

Stop recruiting messages

Use the unsubscribe link in a recruiting email, reply to the sender, or contact us. Unsubscribing applies to the relevant recruiting sender or customer; tell us if you want to make a broader privacy request. Essential account or security messages may still be sent to account users.

7. California residents

Where the California Consumer Privacy Act applies, you may request to know or access personal information, correct it, delete it, and exercise applicable opt-out or sensitive-information rights without discrimination. You may use an authorized agent, subject to verification of authority.

The categories described in Section 2 include identifiers, professional and education information, recruiting assessments, internet or network activity, and, where applicable, sensitive information such as account access credentials and communications. The sources and purposes are described there; recipient categories and business purposes are described in Section 4; retention criteria are in Section 5. These descriptions cover our current practices and the preceding 12 months to the extent we operated the service during that period.

We do not sell or share personal information for cross-context behavioral advertising, including information about people under 16. We use sensitive information to provide requested services, maintain security, and meet legal obligations, not to infer personal characteristics. Submit applicable requests using the contact methods in this notice.

8. Updates and contact

The service is intended for professional use, not for children under 16. If you believe a child has provided personal information, please contact us so we can address it.

We may update this notice as our practices or legal requirements change. We will update the date above and provide additional notice or request consent where required.

For questions or privacy requests, email hello@introdirectly.com or write to IntroDirectly LLC, 1401 21st St, Ste R, Sacramento, CA 95811.