Trust center
Privacy Policy
Understand what information WorkWay Connect collects, why it is used, who receives it, how long it is kept, and the choices available to you.
Scope and operator
This policy applies to the WorkWay Connect mobile application, public website, backend services, and related Candidate and Company features. WorkWay Connect is the product and developer name used in the application and store listing. The privacy contact is WorkWay Connect
Eligibility and availability
Users must be adults who are at least 18. Company representatives must be adults authorized to act for their organization. The initial release is not intentionally offered in the European Economic Area, United Kingdom, or Switzerland. Availability elsewhere remains subject to local law and product support.
Information collected
- Account and identity: name, email, phone number, account role, authentication identifiers, policy acceptance, and account status.
- Candidate information: headline, biography, location, work preferences, education, employment history, skills, certifications, availability, work authorization, portfolio responses, profile image, and resume details.
- Company information: legal and display names, website, registration number, Company profile, industry, size, locations, roles, hiring criteria, benefits, recruiter contact details, verification status, and team membership.
- Media and files: profile images, recorded or selected video and audio, captions, thumbnails, and resumes or other documents a user chooses to provide.
- Jobs and hiring activity: job postings, applications, interview and pipeline stages, notes, saves, introductions, decisions, and compatibility indicators.
- Communications and safety: messages, notifications, support requests, feedback, reports, blocks, moderation records, and enforcement history.
- Usage and device information: app interactions, navigation events, searches, video views, likes, device platform, app version, push token, derived device identifier, IP/network information, diagnostics, and crash data.
- Purchase information: selected access plan, product identifier, provider, purchase status, expiration, checkout or transaction identifiers, store receipt data, and hashed purchase or transaction identifiers. WorkWay Connect does not receive a complete payment card number from Apple, Google Play, or Stripe.
Sources
Information comes from users and Company team members; from interactions with the service; from device and operating-system interfaces; from Apple, Google Play, Stripe, Firebase, Google Cloud, and configured email providers; and from other users when they communicate, apply, report, or collaborate through the service.
Purposes
- Create and secure accounts and verify Company workspaces.
- Operate profiles, portfolios, video delivery, jobs, applications, hiring pipelines, and messaging.
- Provide search, recommendations, compatibility indicators, Company shortlists, and saved searches.
- Process and verify purchases, prevent duplicate claims, and enforce access.
- Send transactional email, push notifications, and user-selected alerts.
- Detect fraud, investigate reports, enforce blocks and policies, and protect users.
- Measure feature use, diagnose crashes, maintain reliability, and improve the service.
- Meet legal, tax, accounting, platform, and lawful authority requirements.
Profile and content visibility
Visibility depends on account role and the product surface. Company profiles and approved Company media may be visible to signed-in Candidates. In-app discovery of approved Candidate profiles and media is limited to the Candidate and verified Company workspaces with active Candidate access. Media links should not be redistributed and may remain usable by someone who retained a link. Messages are limited to their participants. Workspace, payment, device, and account records are not public. Resume files remain private to their owner; an application currently shares the resume filename, not the file itself.
Device permissions
Camera access supports profile photos and video recording. Microphone access enables the app to record audio for videos. Existing images or videos may be selected through an operating-system picker or photo-library permission, depending on the platform. Notification permission supports message, application, and hiring alerts. These permissions can be denied or changed in device settings, although the related feature may then be unavailable. WorkWay Connect does not request device geolocation, contacts, call logs, or SMS permissions in the Android launch build.
Matching and automated processing
WorkWay Connect uses rules-based systems for applications, Discover, and feed ordering. Depending on the surface, signals may include professional profile and job text, role and culture preferences, location, remote status, availability, selected filters, qualification settings, resume or video presence, and interaction history. When automated processing succeeds, a new job application receives a rules-based compatibility score after submission. Current scoring code does not analyze video frames or audio and does not make employment decisions. See Matching Transparency.
Disclosure and service providers
Information is disclosed as directed by the user, between authorized participants in a hiring workflow, and to service providers operating the service. Providers include Firebase and Google Cloud for authentication, hosting, storage, databases, analytics, crash reporting, App Check, and notifications; Google Mobile Ads for contextual advertising when enabled; Apple for iOS purchases; Google Play for Android purchases; Stripe for supported checkout outside the mobile apps; and configured email providers for transactional messages. Providers process information under their own terms and applicable service-provider arrangements.
Information may also be disclosed to protect rights and safety, investigate fraud or abuse, comply with valid legal process, complete a business transaction with appropriate safeguards, or enforce the Terms.
Advertising
WorkWay Connect does not currently show banner ads to Candidate or Company accounts. If ads are introduced later, the implementation will request contextual, non-personalized ads rather than ads based on a user’s past behavior.
When an ad request is enabled, Google Mobile Ads may automatically collect and disclose a device IP address used to estimate general location, app and ad interactions, diagnostic information, and device or account identifiers such as an app set ID. Google uses this information for advertising delivery, analytics, and fraud prevention. WorkWay Connect removes Android advertising-ID and AdServices identifier permissions from the launch manifest and disables ad-personalization signals, but provider handling can change with SDK updates.
WorkWay Connect does not sell personal information and does not share personal information for cross-context behavioral advertising. When ads are enabled, Settings shows Ad privacy choices and opens Google's privacy-options form when Google reports that one is required.
International processing
Service providers may process information in the United States and other countries where they operate. Those countries may have different data-protection rules. WorkWay Connect will use legally required safeguards before intentionally offering the service in a jurisdiction that requires a specific transfer mechanism.
Retention
Account records covered by in-app deletion are removed when the deletion request succeeds. External requests are handled after required account verification. Provider-controlled data, backups, security records, safety records, payment records, disputes, and legally required records may be retained according to operational or legal needs. See Data Retention.
Deletion
Users can delete an account in Settings or submit an external request through Delete Your Account. Successful in-app deletion removes the authentication account and the specific profile, upload, message, application, company-owned workspace, access, and report records handled by the deletion service. Some participant-side, provider, safety, payment, dispute, or legally required records may remain. Recurring App Store and Google Play purchases must be canceled separately through the applicable store.
Privacy rights
Depending on applicable law, a user may have rights to access, know, correct, delete, export, object, restrict processing, appeal a decision, or avoid unlawful discrimination for exercising a right. Instructions are available in Privacy Rights.
Children and teen users
WorkWay Connect is only for adults who are at least 18. The service is not directed to children. Suspected child exploitation should be reported under the Child Safety Standards.
Security
Safeguards include authenticated access, HTTPS transport, Firestore and Storage access rules, App Check support, restricted storage paths, server-side purchase verification, secret management, and account deletion controls. No service can guarantee absolute security. Report suspected account compromise or a vulnerability to WorkWay Connect
Changes
This policy may be updated as the service, providers, or law changes. Material changes will be communicated through the app, website, email, or another appropriate channel. The effective date identifies the current version.
Contact
Email WorkWay Connect and include the account email and country or state when relevant. Do not send passwords, authentication codes, payment credentials, or unnecessary identity documents.