Candidate Consent Agreement

This Candidate Consent Agreement (this Agreement) is entered into between you (Candidate) and Recruitable Software Inc. doing business as Recruitable (Recruitable). By ticking the consent checkbox on a job application form, an AI Resume Builder form, or any other Recruitable-powered interface, you confirm that you have read and understood this Agreement and that you freely, specifically, and unambiguously consent to the collection and use of your personal data as described below. This Agreement applies globally to all candidates regardless of the country they are located in. If you do not consent, you may not use the relevant feature or submit the relevant application.

Who Is Collecting Your Data and Who Is Responsible

Your personal data is collected and stored by Recruitable Software Inc. doing business as Recruitable, with its principal place of business at 1 King Street West, Toronto, ON M5H 1A1, Canada. Recruitable operates a cloud-based recruitment platform used by recruitment agencies to manage candidates, clients, and job placements. Recruitable acts solely as a Data Processor and technology platform. It does not make recruitment decisions, assess candidates, or determine the outcome of any job application. Recruitable is not responsible for the actions, decisions, or data practices of the recruitment agencies that use its platform. Each recruitment agency is independently responsible for its own compliance with applicable employment laws, data protection laws, and anti-discrimination legislation in the jurisdictions where it operates. If you have concerns about how a specific recruitment agency is using your data, how your application is being handled, or how a recruitment decision was made, you should contact that agency directly. Candidate-consent is your right; if you use a resume builder or apply for a job on a recruitment agency website, that agency is also a Data Controller for your application data and is independently responsible for its own legal obligations to you as a candidate. Recruitable is a separate legal entity from every recruitment agency that uses its platform. Recruitable is not the employer and is not party to any employment relationship or recruitment arrangement between you and any recruitment agency or any hiring company.

What Data We Collect

By candidate consent to this Agreement, you agree that Recruitable may collect and store the following categories of your personal data: (a) your full name; (b) email address; (c) phone number including mobile and direct numbers; (d) home or correspondence address; (e) resume or CV including work history, education, qualifications, and skills; (f) professional profile links including LinkedIn URL; (g) interview recordings and transcripts if you participate in a recorded interview through the Recruitable platform; (h) any notes or assessments added by recruiters in connection with your application; (i) job preferences, salary expectations, and availability; (j) data entered into an AI Resume Builder including career history, qualifications, and skills; and (k) any additional information you voluntarily provide. In some cases your data may have been collected from publicly available professional sources such as LinkedIn or other professional networks by a recruiter who then imported it into the Recruitable platform without your prior contact. If this applies to you, your rights under Section 9 of this Agreement still apply in full.

How We Use Your Data

Recruitable and the recruitment agencies that use the Recruitable platform will use your personal data for the following purposes:

(a) to process your application for a specific job role

(b) to match you with other relevant job opportunities through recruitment agencies that use the Recruitable platform

(c) to contact you by email, phone, or SMS regarding current and future recruitment opportunities

(d) to make your verified contact details including personal email addresses and direct phone numbers available to recruiters on the Recruitable platform through the platform data enrichment feature, so that recruiters can contact you in connection with live recruitment mandates

(e) to generate AI-powered candidate profiles based on your resume and interview transcripts for submission to potential employers

(f) to store your resume and profile in the Recruitable candidate database for ongoing recruitment matching

(g) to improve Recruitable’s AI features using anonymized and aggregated data only, never personally identifiable information.

AI Resume Builder and White-Label Transparency

If you use an AI Resume Builder on a recruitment agency website, that resume builder may be powered by Recruitable even if the Recruitable name is not displayed. The recruitment agency has licensed this technology from Recruitable and presents it under its own branding. In accordance with our transparency obligations under applicable data protection law globally, we confirm that if you use an AI Resume Builder on any recruitment agency website the underlying technology is operated by Recruitable and your data is collected, stored, and processed by Recruitable subject to this Agreement. The recruitment agency is also a Data Controller for the purposes of your use of the resume builder. Your completed resume data is stored in the Recruitable platform and is transmitted to the recruitment agency on whose website the builder is hosted. The same data rights described in Section 9 apply to resume builder data.

Data Enrichment and Contact Details

You specifically consent to Recruitable storing and making available your personal email address and direct phone number to recruiters who use the Recruitable platform. This means that a recruiter you have not previously been in contact with may contact you directly using these details in connection
with a job opportunity they believe is relevant to your background. Recruitable takes reasonable steps to ensure that only active recruitment agencies with legitimate recruitment mandates can access candidate contact details through the platform. You may withdraw this specific consent at any
time by emailing privacy@www.recruitablehr.com and we will remove your contact details from the data enrichment database within thirty (30) days.

SMS Communications

By providing your phone number, you consent to receiving SMS messages from Recruitable and from recruitment agencies using the Recruitable platform in connection with job applications, interview confirmations, and interview reminders. SMS messages will be sent from the Recruitable platform number. You may opt out of SMS communications at any time by replying STOP to any message or by emailing privacy@www.recruitablehr.com.

Automated Processing

The Recruitable platform uses AI tools to assist recruiters including AI-generated candidate profiles, AI-generated interview questions, and AI-powered candidate summaries. These AI outputs are tools provided to recruiters and are not autonomous decisions. All recruitment decisions including whether
to contact a candidate, shortlist them, or progress their application are made by human recruiters who use these AI outputs as an aid. Recruitable does not make any automated decisions about candidates that produce legal or similarly significant effects without human involvement. If you believe that an automated process has produced an output that has significantly affected you, you have the right to request that a human reviews that output by contacting privacy@www.recruitablehr.com. This right applies to all candidates regardless of location.

How Long We Keep Your Data

Recruitable will retain your personal data indefinitely for the purpose of ongoing recruitment matching unless you request deletion. You may request deletion of your data at any time by emailing privacy@www.recruitablehr.com with the subject line Data Deletion Request. We will process your request
within thirty (30) days. Deletion from the Recruitable platform does not automatically delete data held by the recruitment agency that is the Data Controller for your application. You should contact those agencies separately. Where retention of your data is required by applicable law in any jurisdiction, Recruitable will retain only the minimum data required to comply with that legal obligation.

Your Rights

You have the following rights in relation to your personal data held by Recruitable, regardless of which country you are located in: (a) Right to access: request a copy of the data we hold about you; (b) Right to deletion: request that we delete your data from the Recruitable platform; (c) Right to correction:
request that we correct inaccurate data; (d) Right to withdraw consent: withdraw your consent under this Agreement at any time, which will stop future processing but does not affect processing already carried out; (e) Right to data portability: receive your data in a commonly used machine-readable
format; (f) Right to object to processing: object to your data being processed for a specific purpose; (g) Right to request human review of any automated processing that has significantly affected you. To exercise any of these rights email privacy@www.recruitablehr.com with the subject line Candidate Rights Request and include your full name, email address, and where applicable the name of the recruitment agency through which you applied or used the resume builder. We will respond within thirty (30) days.

Withdrawing Consent

You may withdraw your consent under this Agreement at any time without giving a reason by emailing privacy@www.recruitablehr.com with the subject line Withdraw Candidate Consent. Upon receipt of your withdrawal: (a) Recruitable will stop using your data for recruitment matching and data enrichment
within thirty (30) days; (b) your contact details will be removed from the data enrichment database; (c) your profile will be flagged for deletion unless you request to keep your application on file with a specific agency. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal. Active job applications already in progress at the time of withdrawal may continue to be processed by the relevant recruitment agency as they are the independent Data Controller for that application.

Who Else May Access Your Data

Your personal data may be accessed by: (a) recruitment agencies that are active subscribers to the Recruitable platform, in connection with live recruitment mandates and through the data enrichment feature whereyou have consented; (b) Recruitable’s trusted subprocessors who assist in delivering the platform, including cloud infrastructure providers, SMS providers, and email delivery services, all bound by data protection agreements; and (c) regulatory authorities or law enforcement where required by law. Recruitable does not sell your personal data to any third party under any circumstances. Recruitable is not responsible for how recruitment agencies use your data beyond the Recruitable platform. Each agency is subject to its own privacy obligations and terms with you.

Data Storage and International Transfers

Recruitable hosts its platform in the United States. Regardless of which country you are located in, your personal data will be transferred to and stored in the United States. Recruitable implements appropriate data transfer mechanisms to protect your data in accordance with the laws of the country
you are located in, including the UK International Data Transfer Agreement for UK data subjects, Standard Contractual Clauses for EU and EEA data subjects, contractual protections for Australian, Canadian, and other international data subjects, and individual consent obtained through this
Agreement. By ticking the consent checkbox and providing your data, you acknowledge and consent to this transfer to the United States under the protections described in this Agreement.

Your Rights by Country

The following sets out specific rights and regulator contacts for major jurisdictions. These rights are in addition to the general rights in Section 9. United Kingdom: you have full rights under UK GDPR including the right to complain to the Information Commissioner’s Office at ico.org.uk. European Union and EEA: you have full rights under EU GDPR and may contact the data protection authority in your country of residence. Canada: you have rights under PIPEDA and, if in Quebec, under Quebec Law 25 including data portability rights. You may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca. Australia: you have rights under the Privacy Act 1988 and the Australian Privacy Principles. You may contact the Office of the Australian Information Commissioner at oaic.gov.au. India: you have rights under the Digital Personal Data Protection Act 2023. You may contact the Data Protection Board of India once established. Singapore: you have rights under the Personal Data Protection Act 2012. You may contact the Personal Data Protection Commission at pdpc.gov.sg. United Arab Emirates: you have rights under Federal Decree-Law No. 45 of 2021. You may contact the UAE Data Office. Japan: you have rights under the Act on the Protection of Personal Information. You may contact the Personal Information Protection Commission Japan at ppc.go.jp. All other countries: you retain the rights described in Section 9 of this Agreement and may contact privacy@www.recruitablehr.com to exercise them. Recruitable commits to responding to all data rights requests regardless of the country the request originates from.

Liability Limitation

Recruitable is a technology platform and Data Processor. Recruitable’s liability to candidates arising from this Agreement or from the processing of candidate data is limited to the maximum extent permitted by applicable law in each jurisdiction. In particular: (a) Recruitable is not liable for any recruitment decision made by a recruitment agency using the platform, including any decision not to progress a candidate application; (b) Recruitable is not liable for any discriminatory treatment by a recruitment agency; (c) Recruitable is not liable for how a recruiter communicates with or treats
a candidate; (d) Recruitable is not liable for inaccurate data imported into the platform by a recruiter; and (e) Recruitable’s maximum liability to any individual candidate arising from any claim under this Agreement shall not exceed the sum of one hundred dollars (USD 100) or the equivalent in local currency. Nothing in this Section limits any rights you may have under applicable consumer protection or data protection legislation that cannot be excluded by contract, including rights under UK GDPR, EU GDPR, the Australian Privacy Act 1988, PIPEDA, or equivalent legislation.

Age Restriction

The Recruitable platform and all services described in this Agreement are intended exclusively for individuals aged eighteen (18) years and over. By consenting to this Agreement you confirm that you are at least eighteen (18) years old. If you are under eighteen (18) years of age you must not use the Service or submit your personal data through any Recruitable-powered form or interface. If Recruitable becomes aware that personal data has been submitted by a person under eighteen (18) it will delete that data promptly. If you believe a person under eighteen (18) has submitted data through the platform, please notify us at privacy@www.recruitablehr.com.

Language of Consent

This Agreement is written in English. By ticking the consent checkbox you confirm that you have read, understood, and agreed to the terms of this Agreement in English. If you do not understand English, you should seek a translation of this Agreement before providing consent. Recruitable does not
accept liability for any misunderstanding arising from a language barrier where consent was given without sufficient understanding of the terms. A translation of this Agreement may be requested by emailing privacy@www.recruitablehr.com.

Cookies and Tracking

The job application form, AI Resume Builder, or other Recruitable-powered interface through which you provide consent may use cookies and tracking technologies including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag on the hosting website. These tracking technologies are operated by
the website owner and by Recruitable for analytics purposes. For full details on how tracking technologies are used on Recruitable-powered interfaces, please refer to Recruitable’s Privacy Policy at www.recruitablehr.com/privacy. By using any Recruitable-powered form or interface you acknowledge that tracking technologies may be active on that page in accordance with the applicable cookie consent mechanism.

Security

Recruitable implements commercially appropriate technical and organizational security measures to protect your personal data, including end-to-end encryption of data in transit and at rest, role-based access controls, and regular security assessments. In the event of a personal data breach affecting your
data, Recruitable will notify relevant regulatory authorities and where required, affected individuals, in accordance with applicable law.

Governing Law

This Agreement is governed by the laws of the Province of Ontario, Canada, without regard to conflict of law principles. For UK data subjects, nothing in this Agreement limits your rights under UK GDPR or the Data Protection Act 2018. For EU and EEA data subjects, nothing limits your rights under EU
GDPR. For Australian data subjects, nothing limits your rights under the Privacy Act 1988. For Canadian data subjects, nothing limits your rights under PIPEDA or applicable provincial privacy legislation. For all other data subjects, nothing in this Agreement limits any mandatory rights provided to you by the data protection or privacy legislation of your country of residence.

Contact Us

For any questions about this Agreement or to exercise your rights, contact us at: privacy@www.recruitablehr.com or Recruitable Software Inc., 1 King Street West, Toronto, ON M5H 1A1, Canada. We aim to respond to all requests within thirty (30) days.