Privacy Policy

Last Updated : June 04, 2026

We appreciate the importance of your privacy and understand any concern that You may have in entrusting Personal Information to us. This Privacy Policy describes our practices regarding use, maintenance, and disclosure of Personal Information that we collect. You can be assured that any Personal Information that you disclose to us will be treated only in the manner described in this policy.

Whenever this Policy mentions “Recooty” or “we” or “us” or “our”, it refers to Recooty Inc., a company having its principal place of business at Wilmington, United States, which is the entity responsible for your information under this Privacy Policy (the “Data Controller”). Recooty Tech Private Limited, an India-based company, operates the Platform and processes data on behalf of, and at the direction of, Recooty Inc.

We urge you to read this Policy thoroughly. By accessing our website and using our Service, you will have represented your agreement to this policy and bound by its terms. This policy does not apply to third-party websites, products, or services even if they link to our Services, and You should consider the privacy practices of those third-parties carefully.

Scope of the Policy

This Privacy Policy applies to (i) our Site – www.recooty.com, (ii) Recooty: our on-demand Recruitment Platform, tools, and services accessible via our Site, and (iii) configuration, setup and training services, collectively called the “Services” (or the “Platform”). In this privacy policy, we sometimes refer to “You”. “You” may be a visitor to our websites, a subscriber of one or more of our Services (“Subscriber”), or an applicant of an employer Subscriber (“Candidate”). We’ll do our best to clarify who we are referring to at various points in this policy.

This Privacy Policy primarily deals with the Personal Information or personally identifiable information, which means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the person. The dealing and use of personal information collected by us shall be limited to the purpose of providing Service for which the Subscriber has signed up.

Our privacy and security practices in connection with the access and use of our Services are governed by the Master Subscription Agreement, which is a binding contract between the Subscriber (sole proprietor or legal entity which has subscribed to our Platform) and us.

When we collect and process information under the directions of our Subscribers, we act as mere Data Processors and have no direct rapport with individuals whose Personal Information we process. All Candidates or applicants who interact with our Subscribers through our Service are directed to solicit their requests regarding their Personal Information (to amend, rectify, erase, and so forth,) to our Subscribers i.e. the employers who have posted the job vacancy. We are not responsible, and our Subscribers are wholly and solely responsible for their policies and compliances with all the applicable laws and regulations, and other duties relating to the collection and retaining Personal Information from individuals (known as data subjects) in connection with the use of our Platform.

We employ third parties to perform certain tasks to facilitate our Service and to assist us in analyzing its usage. We may transfer certain Personal Information to these third parties, but only to the extent permitted by this Privacy Policy and the Terms of Service and on a lawful basis for the transfer. These third parties have access to your Personal Information albeit only to perform specific tasks on our behalf and are contractually and otherwise obligated not to disclose or use your information for any other purpose.

Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms of Service.

What information we collect

Any personal information voluntarily entered by a user

We collect the Personal Information that you enter into our system voluntarily. We Process this Information and create your identity at Recooty and also to facilitate your use of our Service. This information is required to create your Account, identify and communicate with you, respond to your requests/inquiries, servicing your purchase orders, and improving our Platform.

The information you give when you sign up or start a free trial includes your name, company name, contact number and email. This Personal Information is used to allow you to create your Account and utilize the Service. When you subscribe to a paid plan or purchase add-ons, we collect the payment information needed to process your payments, but we neither transmit nor store full card details on our servers. We use third-party payment processors — primarily Stripe, and in some cases PayPal or Razorpay — to process such payments. These processors are PCI DSS compliant and certified at the highest level (PCI Level 1 Service Provider) available in the payments industry, having been audited by an independent PCI Qualified Security Assessor (QSA). Where Personal Information of individuals located in the EEA, the UK or Switzerland is transferred outside those regions, such transfers are carried out under appropriate safeguards recognised by applicable law, such as the European Commission’s Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework (including the UK Extension and the Swiss-U.S. Data Privacy Framework).

Except where expressly described in this Policy (for example, where an employer initiates a background check), we do not seek to collect sensitive personal information such as racial/ethnic origin, political opinions, religious or philosophical beliefs, trade union affiliation, genetic, biometric data, health data or data concerning sexual orientation from our Subscribers. Any candidate who discloses such information to our Subscriber, with whom he directly interacts with should do so at his own will and on careful reading of the Subscriber’s privacy policies. Because we act as a Data Processor for our Subscribers, documents such as CVs or application responses submitted by candidates may nonetheless contain special categories of data. Where this occurs, we process such data only on the documented instructions of the relevant Subscriber (the Controller), who is responsible for ensuring an appropriate lawful basis and any additional conditions required under applicable law for such processing.

You may also enter some personal information on our Contact Us form, which we use to contact you. You can sign up for providing information about upcoming developments at Recooty by checking the box while on the page. You may opt out of receiving any, or all, of these communications from us by clicking on the unsubscribe link or by following the instructions provided in our emails or by contacting us at [email protected].

You may enter other information on our website such as comments on our blog which information is publicly visible and accessible. In case you wish to remove this information, you may contact us on [email protected].

If you choose to post information through our Service or engage in email, regular mail, telephone or other contact with us, we may retain information disclosed thereby as well.

Information that our system collects

Logs and Analytics

We accumulate information that your browser sends whenever you visit our Website or use our Service (known as ‘Log Data’). This Log Data includes information such as your computer’s Internet Protocol (IP) address, browser type, browser version, internet service provider, URLs of referring/exit pages, operating system, date/time stamp, the information you search for, local and language preferences, identification numbers associated with your devices, your mobile carrier, and system configuration information, the time spent on those pages usage information, and other statistics.

We use third-party service providers of analytics service (view our list of sub-processors), that collect, monitor and analyze anonymous Log Data to assist us to increase our Platform’s functionality and market. We also use error-tracking and application-monitoring services (such as Sentry and Laravel Nightwatch) to detect, diagnose and resolve bugs, errors and performance issues; these services may process technical log data and limited information about your interactions with the Services.

We may occasionally connect the Log Data with personal information that you enter to better our Service, enhance the design of the website and make it friendlier to use. Additionally, Passive Information help us know information about how many people visit our Site, when they visit and how they use our service. We make sure that all this data is treated in the same manner as Personal Information voluntarily disclosed by you, under this Privacy Policy.

Cookies and other Tracking Technologies

We use cookies and other tracking technologies to ensure that You have the best possible experience while using our Service. These technologies may provide us with personal information, information about devices and networks you utilize to access our Websites, and other information regarding your interactions with our Websites.

Cookies are small pieces of data sent from us and stored on the Your web browser. Cookies facilitate and enhance communication and interaction with the service offered by us. We use cookies to customize your visit for authentication, functional services (such as survey and chats), analytics, and advertising.

We feature third-party widgets of social media service providers to enable the subscriber to integrate with them. These third-parties may also use cookies to function correctly. You may review their privacy policies to understand why they use these cookies.

We use remarketing services to advertise on third party websites after you visited our website. We may also use and place third-party cookies on your browser from third-party vendors in connection with the service or association with our advertising and marketing. Our third-party vendors (such as Google, Facebook, and Adroll) use cookies to inform, optimize and serve advertisements based on your past visits to our website.

Without your knowledge and consent, neither we nor our advertisers/business partners use cookies to automatically retrieve personally identifiable information from your computer.

As a Subscriber, you have an option to restrict the placement of cookies on your browser or remove them from your browser by changing your browser settings. Google, Facebook, and AdRoll provide an opt-out option for their visitors on their respective websites. The Help feature on most standard browsers offers information on how to accept cookies, disable cookies or to notify you when receiving a new cookie.

Kindly note that in case you opt to decline cookies and flush out the cookies from your computer, it will reduce the functionality of our Platform.

Information collected for identity verification

To help create and maintain a trusted environment, we may collect information related to you or your organisation which is normally listed on public forums and from third parties, such as business partners, marketers, researchers, analysts, and other parties that we may use to supplement the information that we collect directly from you.

Information collected from other sources

In order to provide a hassle-free experience to our Subscribers, We give them an option to integrate with third parties (e.g. Google, Facebook, linkedin) such as service providers of social media or authentication services. When our Subscriber opts for this service, he allows access to us of his information including personal information which is entrusted such third parties. Using these features will authenticate your identity, provide you with the option to share specific personal information with us, and pre-populate our sign up form. This information varies and is controlled by that third party service or as authorized by you via your privacy settings at that service. Authorisation procedures of the third party social media or authentication service determine the extent of access to your information. Subscribers are encouraged to examine their privacy settings to change any information sent to us through these third parties.

Google Workspace (Gmail and Calendar) Integration

If you choose to connect your Google account, we request access to Gmail and/or Google Calendar in order to provide recruitment features such as sending and tracking candidate communications and scheduling interviews. You can grant or revoke this access at any time through your Google account settings.

Recooty’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, data obtained from Gmail or Google Calendar is used only to provide and improve the user-facing features you have enabled; is not transferred to or sold to others for advertising, market research or other unrelated purposes; is not used to develop, improve, or train generalized artificial intelligence or machine-learning models; and is not read by humans except where you have given consent, where necessary for security purposes or to comply with applicable law, or where the data has been aggregated and anonymized.

Microsoft and Zoom (Calendar and Meetings) Integrations

If you choose to connect Microsoft 365 / Microsoft Teams or Zoom, we access calendar and meeting information in order to provide scheduling and video-meeting features (for example, creating interview events and generating meeting links). We use this information only to provide those features, and our use of data obtained through the Microsoft Graph API and the Zoom API is subject to those providers’ applicable terms and developer policies.

Background Checks

Where an employer (our Subscriber) chooses to run a background check on a candidate in the United States, the check is performed by our background-check partner, Checkr, which acts as a consumer reporting agency. To facilitate the check, relevant candidate information is shared with Checkr, and the results (which may include criminal-record and other sensitive information) are made available to the employer. These checks are initiated and controlled by the employer, who is responsible for obtaining the candidate’s authorization, providing all notices required under the U.S. Fair Credit Reporting Act (FCRA) and applicable state laws, and following the adverse-action process. Recooty processes this information only to facilitate the check on the employer’s instructions, and Checkr’s handling of personal information is also governed by Checkr’s own privacy policy.

Microsoft Clarity and Advertising

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Artificial Intelligence Features

Some features of our Platform use third-party artificial intelligence service providers (such as OpenAI) to provide functionality such as generating or summarizing job descriptions, screening assistance, and similar productivity tools. Where you use such features, the content you submit may be processed by these providers solely to deliver the feature to you. These providers act as our sub-processors, are contractually bound to protect your information, and do not use it to train their own models except as permitted under our agreements with them. You can review our current providers in our list of sub-processors.

Where AI-assisted features are used in connection with recruitment, the employer (our Subscriber) acts as the controller and decides how those features are used in its hiring process. If you are a candidate and wish to exercise rights relating to automated decision-making — such as obtaining information about, or human review of, a decision that may have been supported by these features — please direct your request to the employer to whom you applied. Recooty does not make hiring decisions and processes such data only on the employer’s instructions.

How we use/process information that we collect

This Privacy Policy details the purposes for which we uses/processes any Personal Information that it receives. For more precise understanding, the purposes are enumerated below. The list is not an exhaustive one. We use the information for a catena of purposes including the following:

Provide, Improve and Develop Recooty Platform:
  1. Providing, operating, maintaining, improving, and promoting our Service;
  2. Enabling access and use of our Services;
  3. Processing and completion of transactions, and sending related information, including intimations of purchase and invoices;
  4. Sending transactional messages, including responses to your comments, questions, and requests; providing customer service and support; and sending technical notices, updates, security alerts, and support and administrative messages;

Create and Maintain a Trusted and Safe Environment:
  1. Detect and prevent fraud, spam, abuse, security incidents, and other harmful activity.
  2. Conduct security investigations and risk assessments.
  3. Verify or authenticate information or identifications provided by you (such as to verify your identity)
  4. Comply with our legal obligations.
  5. Enforce our Terms of Service and other policies.

Provide, Personalise and Improve our Advertising and Marketing:
  1. Sending promotional communications, such as providing information about our products and services, features, surveys, newsletters, offers, promotions, contests, and events; and providing other news or information about our partners and us.
  2. Monitoring and analyzing usage, and activities in connection with the Websites and Services and for marketing or advertising purposes;
  3. Investigating and preventing fraudulent transactions, unauthorized access to the Services, and other illegal activities;
  4. Personalizing the Websites and Services,
  5. To contact you about changes to our site and Service, new Service, features or products we offer, or other information we think you might find valuable, as well as to provide or enhance features of our Site and Service.

Where you have provided consent, we use/process your information for any other purposes.

Legal Basis for Processing the information (In compliance with GDPR)

We process personal information only in the specific context in which we collect it. Depending on the activity, we rely on one or more of the following legal bases:

  1. Performance of a contract — to provide, operate and support the Services for our Subscribers and to administer your account and billing.
  2. Consent — for optional activities such as marketing communications, non-essential cookies and similar tracking technologies, and any processing of special categories of data where consent is required. You may withdraw consent at any time.
  3. Legitimate interests — to secure, maintain, analyze and improve the Services, prevent fraud and abuse, and conduct direct marketing to business contacts, balanced against your rights and interests.
  4. Compliance with a legal obligation — to meet our legal, tax, accounting and regulatory requirements and to respond to lawful requests from authorities.

Where we rely on legitimate interests, you may request further information about the balancing test we have carried out. Where processing is based on consent, withdrawing consent will not affect the lawfulness of any processing carried out before the withdrawal.

If you need further clarification concerning the legal basis on which we collect and use your Personal Information, you may contact us at the addresses given further below.

Security: How we protect your information

The security of your Personal Information is important to us. Therefore, we have implemented and are continuously implementing and updating appropriate administrative, technical, organisational and physical security measures of commercially acceptable security standards to help protect your information against unauthorized access, loss, destruction, use, alteration or disclosure of any information we store. Some of the safeguards we use to protect your information are firewalls and data encryption, and information access controls. If you know or have reason to believe that your Recooty Account credentials have been lost, stolen, misappropriated, or otherwise compromised or in case of any actual or suspected unauthorized use of your Recooty Account, please contact us following the instructions in the Contact us section below.

Disclosure & Sharing of Information

Disclosure to third parties

We use third-party service providers for backup, storage, payment processing and other services (view our list of sub-processors). We share data which may include your Personal Information with such select third parties so that they can access and process the information for providing these services to us. These third parties are contractually and otherwise legally bound not to disclose or use your Personal Information for a purpose other than in connection with providing the service to us.

When you initiate a connection with a third-party integration through the Platform (for example, automation tools such as Zapier), we will share information about you that is required to enable your use of the third-party integration through the Platform.

When you (or your employer) choose to publish or broadcast a job posting through the Platform, we share the job posting and related information with third-party job boards and distribution partners (such as LinkedIn, Indeed, and other job boards) so that the posting can be displayed on their services and so that candidate applications can be received. These partners are independent controllers of any personal information they collect through their own services, and their use of that information is governed by their own privacy policies.

Recooty makes it possible for you to upload and share comments or feedback publicly with others, such as on the Recooty blog. Any information that you submit through such public features is not confidential, and Recooty may use it for any purpose (including in testimonials or other Recooty marketing materials). Any information you post openly in these ways will be available to the public at large and potentially accessible through third-party search engines. Such information can be read, collected and/or used by other users, and it could be used to send you unsolicited messages. Accordingly, please take care when using these features of the Platform.

We may also disclose your information to third parties with your consent to do so. For example, we will display your Personal Information on your profile page and elsewhere on the Platform in accordance with the preferences you set in your account. You can review and revise your Profile information at any time.

Compliance With Laws

We are bound to disclose your Personal Information where required to do so by law or compelled by any legal process. We will disclose your Personal Information if we believe that the disclosure is necessary to comply with the law and the reasonable requests of law enforcement or to protect the security or integrity of Our Service.

How long we retain your Personal Information

We retain your personal information for as long as is needed to fulfill the objects outlined in this Policy unless a more extended retention period is mandatory or permitted by laws. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

In determining the appropriate retention period, we consider the amount, nature and sensitivity of the personal information, the purposes for which we process it, whether we can achieve those purposes by other means, our contractual commitments to our Subscribers, and applicable legal, tax, accounting and regulatory requirements. For example, account and billing records are typically retained for the duration of the subscription and for a limited period afterwards to meet legal and accounting obligations, while candidate data processed on behalf of a Subscriber is retained according to that Subscriber’s instructions and configured retention settings.

For personal information that we process on behalf of our Subscribers, we will retain such personal information by the terms of our agreement with them, subject to applicable law.

International Transfer

Recooty Inc. is incorporated in the United States and is the entity responsible for your information; it operates the Platform together with its affiliate Recooty Tech Private Limited (India), which processes data on Recooty Inc.’s behalf. Our software development and customer support services are provided from India by Recooty Tech Private Limited, and authorised personnel there may access your information to provide, maintain and support the Services, subject to appropriate safeguards including the Standard Contractual Clauses. We store and process your information primarily on servers located in the United States. To provide our Services, and in accordance with this Privacy Policy, we may transfer your information to, and maintain it on, computers located outside of your state, province, country or other governmental jurisdiction, where the data protection laws may differ from those of your jurisdiction.

If you are located in the EEA, the United Kingdom or Switzerland, your Personal Information may be transferred to and processed in countries outside your region, including the United States and India, which may not provide the same level of data protection as your home jurisdiction. Where we make such transfers, we rely on appropriate safeguards recognised under applicable law — principally the European Commission’s Standard Contractual Clauses (together with the UK International Data Transfer Addendum where applicable) and, where applicable, the EU-U.S. Data Privacy Framework — to ensure an adequate level of protection for your Personal Information. You may request more information about these safeguards by contacting us at [email protected].

Your Rights

  1. Visitors, Subscribers and Candidates have a right to request their own Personal Information, that we hold or process on behalf of a third party and we will provide it to you.
  2. Subscribers have a right to request change/rectification of any Personal Information entrusted to us as Account Information or complete any incomplete Personal Information.
  3. Subscribers also have a right to have their personal information maintained by us removed from our systems or returned. Provided that, notwithstanding such request, this data may be retained for as long as you maintain an account for our Services, or as needed to provide you with our Services, comply with our legal obligations, resolve disputes and enforce our agreements.

Visitors and Subscribers may direct any of the above requests to [email protected], and we will handle such requests to access, change, or remove your information within thirty days. We will retain personal information that we store and process on behalf of our Subscribers for as long as needed to provide the Services to our Subscribers. We will retain and use this Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Candidates directly interact with our Subscribers and should direct their requests to access, change, remove or correct your Personal Information that we process/store on behalf of the Subscriber, through the concerned Subscriber. Upon receipt of the request from the Subscriber, we will respond to their request within thirty days.

Where you have provided your consent to the processing of your personal information by Recooty you may withdraw your consent at any time by changing your Account settings or by sending a communication to Recooty specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal. Additionally, in some jurisdictions, applicable law may give you the right to limit the ways in which we use your personal information, in particular where (i) you contest the accuracy of your personal information; (ii) the processing is unlawful and you oppose the erasure of your personal information; or (iii) we no longer need your personal information for the purposes of the processing, but you require the information for the establishment, exercise or defence of legal claims.

Additional rights for EEA territories

  1. The right of erasure: You may have a broader right to erasure of personal information that we hold about you in certain circumstances. Such circumstances may include, for example, if the data is no longer necessary in connection to the purposes for which it was initially collected. However, we need to add that we may need to retain certain information to keep records, to complete transactions or to comply with our legal obligations.
  2. The right to restrict processing: In certain circumstances, you may have the right to request that we restrict processing of your personal information such as, where you contest the accuracy of your Personal Information, for a period enabling us to verify the accuracy of such Personal Information. You also have a right to be informed when such restriction is lifted.
  3. The right to data portability: You may have the right to be provided with your personal information in a structured, machine-readable and commonly used format and to request that we transfer the personal information to another data controller without hindrance. You also have a right to request that your Personal Information be directly transferred to another controller where it is technically feasible.
  4. The right to object to processing: You may have the right to request that we should stop processing your personal information and to stop sending you marketing communications.

You also have the right to lodge a complaint with a data protection authority about our collection and use of your personal information. In the United Kingdom this is the Information Commissioner’s Office (ICO); in the EEA you may contact the supervisory authority in your country of residence, place of work, or the place of the alleged infringement. We would, however, appreciate the chance to address your concerns before you approach an authority, so please consider contacting us first at [email protected].

Your U.S. State Privacy Rights (including California)

If you are a resident of California or another U.S. state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut or Utah), you may have the right to: (i) know and access the personal information we collect about you; (ii) request correction or deletion of your personal information; (iii) opt out of the “sale” or “sharing” of personal information and of targeted (cross-context behavioral) advertising; and (iv) not be discriminated against for exercising these rights.

We use certain advertising cookies and similar technologies (for example, through Google, Facebook and AdRoll) that may constitute a “sale” or “sharing” of personal information under these laws. You can exercise your right to opt out by adjusting your cookie preferences, by using our Do Not Sell or Share My Personal Information control, and by enabling a recognized opt-out preference signal such as the Global Privacy Control (GPC) in your browser, which we will honor where required by law.

To exercise any of these rights, contact us at [email protected]. You may use an authorized agent to submit a request on your behalf, and we will verify your identity before responding, as required by law.

Personal Information of Children

Our Service is not directed to, or intended for use by, individuals under the age of 18, and we do not knowingly collect personally identifiable information from children. If you are under the age of 18, please do not submit any Personal Information to us. Our Subscribers (employers) are responsible for ensuring they have an appropriate lawful basis and any parental consent required by applicable law before submitting the personal data of any candidate who is a minor. If you are a parent or guardian, we encourage you to instruct your children not to disclose any Personal Information without your consent. In case you have any reason to believe that a child has provided us his/her Personal Information, please bring it to our notice by emailing us at [email protected]. We will take immediate steps to remove that information from our servers.

Recooty as a data processor

We may collect, use and disclose certain Personal Information about candidates when acting as the Subscriber’s service provider. Our Subscribers are responsible for making sure that their candidate’s privacy rights are respected, including ensuring appropriate disclosures about third party data collection and use. To the extent that we are acting as a Subscriber’s data processor, we will process all Personal Information in accordance with the terms of our agreement with the Subscriber and its lawful instructions.

Links To Other Sites

Our website may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third-party’s website. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services. These Third Party Partners will have their own rules about the collection, use, and disclosure of information. We strongly advise you to review the Privacy Policy of every site you visit.

Changes to the Policy

This Privacy Policy will remain in effect except concerning any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

Any material changes will be notified to you by either posting a prominent notice on the website or through your registered email. Your continued use of our Service after we post any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy. In case you do not wish to comply with the amendments, your remedy is to discontinue the use of our service.

Contact us

If you have questions regarding this Privacy Policy or about our privacy practices, please contact us by email at [email protected]. You may also write to us at: Recooty Inc., 2810 N Church St, PMB 71936, Wilmington, DE 19802-4447, USA.