Privacy Notice

Last updated: 22/12/2022

We are Visage, Inc. (“Visage”). This Privacy Notice explains who we are, how we collect, use and disclose your personal data and how you can exercise your privacy rights. If you have any questions or concerns about our use of your personal data, or would like a printable version of this Privacy Notice, then please contact us using the details provided at the bottom of this Privacy Notice. If you are located in the European Union or the United Kingdom, the controller of your personal data is Visage, Inc.

  1. About us

Visage provides a crowdsourcing solution that uses advanced AI to help recruiters (our “Clients”) find the best talent for their roles. We obtain data about professionals and prospective candidates from publicly available sources and from our community of over 4,000 global sourcers. You can find more about us and the services we provide here.

  1. What does this Privacy Notice cover?

This Privacy Notice applies to our collection, use and disclosure of personal data that relates to:

(a) individuals who visit our website at visage.jobs or register to use our services in order to source candidates for their roles, and individuals who sign up to receive communications from us or attend our events (“Users”);

(b) professionals and prospective candidates that we source on behalf of our Clients in connection with our services (“Professionals”); and

(c) individuals who help us to identify or provide intelligence about Professionals for our Clients in connection with our services (“Sourcers”).

Please note that this Privacy Notice only applies where we are processing personal data as a data controller. In certain circumstances, we process personal data as a data processor on behalf of our Clients, for example where they have provided us with information relating to their candidates. This Privacy Notice does not apply to the personal data we receive and process as a processor on behalf of our Clients, and you should contact the relevant company or organization if you have any questions about their privacy practices.

In addition, please also note that this Privacy Notice does not apply to the actions or activities of third party companies or organizations that we work with or any third party websites or platforms that link to or can be accessed through our website or services.

  1.  What personal data do we collect?
  2. A) Information about Users

We need to collect and use information about you in the course of providing our services to you and your organization. The personal data that we may collect about you broadly falls into the following categories:

Information you provide voluntarily: We ask you to provide certain information voluntarily. This typically includes:

  • Log-in credentials, such as your username and password;
  • Identification data, such as name, company, job title, location and photograph;
  • Contact data, such as email address;
  • Payment information, such as your credit card information and billing address where you pay for our services;
  • Communications data, such as chat messages;
  • Support data, such as information about a technical issue you have reported.

We will also generate a unique Visage ID that we use to identify you when you are using the services.

If we ask you to provide any other personal data not described above, then the personal data we will ask you to provide, and the reasons why we ask you to provide it, will be made clear to you at the point we collect the information.

Information we collect automatically: Like most companies that offer online services, we may also collect certain information automatically about your computer or device and usage of our services using cookies and similar tracking technology. In some countries, including countries in the European Economic Area and the United Kingdom, this information may be considered personal data under applicable data protection laws. This includes:

  • Device information, such as your IP address, operating system, device type and manufacturer and browser type;
  • Usage data, such as the dates and times you access the services and your browsing activities (such as what portions of the services you use, session durations, links clicked, non-sensitive text entered, and mouse movements).

Please see the section “Cookies and similar tracking technology” https://visage.jobs/cookie-policy below for more information.

Information we obtain from third party sources: From time to time, we may receive certain personal data about you from third party sources (such as Intercom), but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal data to us. The types of information we collect from third parties include your location (based on IP address), browser type and version, operating system, device type and pages visited. We use this information to better understand your use of our services.

  1. B) Information about Professionals

We collect, use and disclose information about Professionals in the course of providing our services to our Clients. The personal data that we may collect about you broadly falls into the following categories:

Information we obtain from third party sources and our Sourcers: If you are a prospective candidate, we may obtain personal data about you from publicly available sources (such as LinkedIn, news reports, press releases and social media platforms), our third party data providers (such as FullContact) or from Sourcers that provide information to use in connection with our services. Whenever we obtain information from third parties (including our third party data providers and Sourcers), we take appropriate steps to ensure that such third parties have obtained your information lawfully.

The information we obtain typically includes:

  • Identification data, such as your name, location, time zone and social media URL or username;
  • Contact data, such as your email address;
  • Professional profile data, such as your current job title, employment type, seniority, employer, company industry and CV.

Information we obtain from our Clients: Our Clients may also provide us with personal data about you in connection with our services (for example, if they provide us with a list of their existing candidates). We use this information to provide the services to our Clients and only as instructed by the Clients. Under these circumstances, we process your information as a processor on our Clients’ behalf and it our Clients, as the controllers of the information, that determine what information we process about you and how we use it. If you have any privacy-related questions or concerns about one of our Client’s privacy practices, or the choices a Client has made to share your information with us, you should contact that company or organization directly. We are not responsible for the privacy or security practices of our Clients, which may differ from those described in this Privacy Notice.

  1. C) Information about Sourcers

We need to collect and use information about you in the course of providing our services to you. The personal data that we may collect broadly falls into the following categories:

Information you provide voluntarily: We ask you to provide certain information voluntarily. This typically includes:

  • Log-in credentials, such as your username and password;
  • Identification data, such as name, company, job title, location and photograph;
  • Contact data, such as email address;
  • Payment information, such as your bank account information where we pay you for identifying Professionals for us;
  • Communications data, such as chat messages;
  • Support data, such as information about a technical issue you have reported.

We will also generate a unique Visage ID that we use to identify you when you are using the services.

If we ask you to provide any other personal data not described above, then the personal data we will ask you to provide, and the reasons why we ask you to provide it, will be made clear to you at the point we collect your personal data.

Information we collect automatically: Like most companies that offer online services, we may also collect certain information automatically about your computer or device and usage of our services using cookies and similar tracking technology.  In some countries, including countries in the European Economic Area and the United Kingdom, this information may be considered personal data under applicable data protection laws. This includes:

  • Device information, such as your IP address, operating system, device type and manufacturer and browser type;
  • Usage data, such as the dates and times you access the services and your browsing activities (such as what portions of the services you use, session durations, links clicked, non-sensitive text entered, and mouse movements).

Please see the section “Cookies and similar tracking technology” https://visage.jobs/cookie-policy below for more information.

Information we obtain from third party sources: When you log into our services using a third party account (such as LinkedIn), we may also collect certain information from the third party necessary to authenticate your account, such as your email address and any other information you allow the third party to share with us.

  1. How do we use your personal data?

We use personal data about you for the following purposes:

  • Provide, maintain and improve our services;
  • Enable Users and Sourcers to register to use our platform and create and maintain their profile;
  • Share information about Professionals with our Clients so that they can visualize the professional profiles of Professionals and decide upon their adequacy for a given job opportunity;
  • Contact Professionals on behalf of our Clients to tell them about a job opportunity that may be of interest to them;
  • Send out technical notices, updates, security alerts, and support and administrative messages to our Users and Sourcers;
  • Respond to comments, questions, and requests from those who interact with Visage, as well as providing customer support to our Users and Sourcers;
  • Communicate with our Users and Sourcers about news and information relating to our services;
  • Provide information about our services in accordance with your marketing preferences;
  • Monitor and analyze trends, usage, and activities in connection with our services;
  • Personalize and improve our services;
  • Detect, prevent and respond to potential fraud, violations of our terms and conditions or other misuse of our services;
  • Comply with our legal obligations.

In general, we will use the personal data we collect from you only for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your personal data.  However, we may also use your personal data for other purposes that are not incompatible with the purposes we have disclosed to you if and where this is permitted by applicable data protection laws.

  1.  Who do we share your information with?

We may disclose your personal data to the following categories of recipients:

  • We may share your information with our third party service providers and partners who provide data processing services to us (such as data storage providers, analytics services, marketing services, and external consultants and professional advisers) or who otherwise process personal data for purposes that are described in this Privacy Notice or notified to you when we collect your personal data. A list of our current third party service providers is available here;
  • For Professionals, we may share your information with our Clients in order to provide our services to them and for the purposes described in this Privacy Notice;
  • For Professionals, we may share some of your information with our Sourcers with whom we liaise in connection with providing the services to our Clients;
  • We may share your information with any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
  • We may share your information with a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal data only for the purposes disclosed in this Privacy Notice;
  • We may share your information with any other person with your consent to the disclosure.
  1.  What is our legal basis to process your information? (European individuals only)

If you are located in the European Union or the United Kingdom, we need a legal basis to collect, use and disclose your personal data. Our legal basis for collecting, using and disclosing your information will depend on the information concerned and the context in which it is processed.

Users and Sourcers: We may process your personal data in order to perform a contract with you (such as to register and maintain your account and process your payment information). In other circumstances, we may process your information where the processing is in our legitimate interests (such as to communicate with you about news and information relating to our services, monitor and analyze usage trends, and personalize and improve our services).

When required, we will process your personal data only where we have your consent to do so (for example, if we need to collect and process any sensitive personal data about you). In limited cases, it may be necessary for us to process your information to comply with a legal obligation to which we are subject (such as to share your information with a law enforcement body or regulatory agency where disclosure is required by law, or to exercise, establish or defend our legal rights).

Professionals: We will usually process your information where the processing is in our legitimate interests (such as when we share certain information about you with our Clients or when we contact you on behalf of our Clients to tell you about a job opportunity that may be of interest to you). We only share your contact information with our Clients where we have your consent to do so.

In limited cases, it may be necessary for us to process your information to comply with a legal obligation to which we are subject (such as to share your information with a law enforcement body or regulatory agency where disclosure is required by law, or to exercise, establish or defend our legal rights).

If you have questions about or need further information concerning the legal basis on which we collect and use your information, please contact us at privacy@visage.jobs.

  1.  Cookies and similar tracking technologies

We use cookies and similar tracking technologies to collect and use personal data about you on our website and through the services.  Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how you have interacted with our website and services, including the pages accessed and links clicked, session duration, non-sensitive text entered, and mouse movements. Collecting this information enables us to better understand how people are using our website and services and we use the information for our internal analytics purposes to improve the quality and relevance of our services.

Google Analytics: We may use cookies served by Google Analytics to collect limited data directly from you to enable us to better understand your use of our website, including making use of the demographics and interests reports services of Google Analytics. Further information on how Google collects and uses this data can be found at www.google.com/policies/privacy/partners/. You can opt-out of all Google supported analytics within the services by visiting https://tools.google.com/dlpage/gaoptout.

Posthog: We may use Posthog to record and collect certain information about how you’re using the services. This allows us to see what you’re doing so that we can give you accurate and helpful assistance and to generate useful analytics. You can opt-out of all Posthog supported tracking within the services by login to Visage, and disable the tracking in your privacy settings.

For further information about the types of cookies and similar tracking technologies other we use, why, and how you can control them, please see our Cookie Notice https://visage.jobs/cookie-policy.

  1.  International data transfers

Your personal data may be transferred to, and processed in, countries other than the country in which you are located. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).

Specifically, Visage is headquartered in the United States and our servers are located in Oregon. Our third party service providers and partners also operate in the United States and in Europe. This means that when we collect your personal data we may process it in any of these countries.

However, we’ve taken appropriate safeguards to require that your personal data will remain protected in accordance with this Privacy Notice and applicable data protection laws. If you are located in the EEA, United Kingdom or Switzerland these measures include transferring your information to a country that the European Commission or UK authorities (as applicable) have determined provides an adequate level of protection for personal data, or by implementing standard contractual clauses with our Clients, third party service providers and partners. Where appropriate, we also use additional safeguards to ensure that your information remains protected in accordance with applicable law.

  1.  Data retention

We retain personal data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible. In particular, if you are a prospective candidate we will delete your personal data within 28 days if we do not receive any feedback from you. 

  1. Your privacy rights

Depending on your location and applicable data protection laws, you may have certain rights with regard to the personal data we control about you.

  • Right of access. You may have the right to confirm whether we are processing your personal data and obtain a copy of your personal data.   
  • Right of correction. You may have the right to request that we correct any inaccurate personal data that we process about you, subject to certain exceptions. 
  • Right to deletion. You may have the right to request that we delete your personal data, subject to certain exceptions. 
  • Right to data portability. You may be able to request portability of your personal data by obtaining a copy of your data in a portable, read-usable format. 
  • Right to object and restrict processing. If you are located in the European Union or United Kingdom, you can object to processing of your personal data or ask us to restrict processing of your personal data. 
  • Opt-out from marketing. You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you or by contacting us as described below.
  • Withdrawing consent. If we have collected and process your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent. 

If you are located in Colorado, Connecticut, Virginia, or Utah, you also have the right to opt out from the “sale” of your personal data. This term is defined broadly and may apply to our sharing of personal data about Professionals with our Clients. If you are a Professional, we may have “sold” your identification data, contact data, and/or professional profile data (as described above) to our Clients. 

How to exercise your rights. If you wish to exercise your rights, you can do so at any time by emailing us at privacy@visage.jobs or by contacting us using the details provided in the “How to contact us” section below. In some cases, you may also authorize an agent to submit a request on your behalf.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. To help protect the security of your information, we may ask you to provide additional information to verify your identity before responding. In addition, if you authorize an agent to make a request on your behalf, we may require the agent to provide proof of authorization or require you to confirm that you gave the agent permission to submit the request. If we are unable to verify your identity, or confirm your agent’s authorization, we may not be able to fulfil your request. 

Appeals and complaints. If you are unhappy with how we have handled your request, you may have the right to appeal our decision under applicable data protection laws. In order to do so, please email us at privacy@visage.jobs or contact us using the details provided in the “How to contact us” section below, and enclose a copy of our decision so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable data protection laws. Similarly, you may also have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority. Contact details for data protection authorities in the European Economic Area are available here and contact details for the data protection authority in the UK are available here. Please note that we will not discriminate against you for exercising any of your rights under applicable data protection laws.

  1. Additional information for California residents

If you are a California resident, the following information also applies to you and supplements the information contained elsewhere in this Privacy Notice. The term “personal information” is defined as any information that identifies, relates to, describes, or could reasonably be linked to a particular California resident or household.

Information we collect and sources of information

Our Privacy Notice already describes the personal information we collect about Users, Professionals and Sourcers and the sources of information. This section organizes that information around the personal information categories of personal information set out in the California Consumer Privacy Act (CCPA) as modified by the California Privacy Rights Act (CPRA).

In the past 12 months, we have collected the following information from the following sources:

  • Identifiers, such as your name, company, job title, email address, IP address, unique personal identifier, account username, third party account names and other online identifiers. We obtain this information when you provide it to us or otherwise automatically in the course of your interactions with our services.
  • Internet and other electronic network activity information, such as browser type, operating system, device type, manufacturer and browser type, browsing activities and other information regarding your interactions with our services. We obtain this information automatically in the course of your interactions with our services.
  • Commercial information, such as records of services purchased. We obtain this information directly from you or otherwise automatically in the course of your interactions with our services.
  • Geo-location data, such as your general location information (based on your IP address). We obtain this information when you provide it to us or otherwise automatically in the course of your interactions with our Services.
  • Electronic and visual information, such as chat messages and any interactions that you may have with us (such as for customer service purposes), photographs, and feedback or testimonials you provide about our services. We obtain this information when you provide it to us or otherwise automatically in the course of your interactions with our services.
  • Professional or employment-related information, such as job title, employment type, seniority, employer, company industry and CV. We obtain this information about Professionals on behalf of our Clients in order to provide our services to them.
  • Sensitive personal information as defined by the CCPA/CPRA, such as your account information combined with the log-in credentials. We obtain this information from Users in order to provide our services to them. 

We collect personal information directly from you, automatically from your use of our services and from certain third parties (for example, when you log into our services using a third party account) as described in the section “What personal data do we collect?” above.

How we use and share information

We collect and use personal information for the business and commercial purposes as described in the section “How do we use your personal data?” above. Visage only uses sensitive personal information to provide the services that you have requested, including to maintain your account and ensure the security of the services. Visage does not share your personal information except as approved by you or as otherwise described in this Privacy Notice.

We may also collect aggregate and/or de-identified data. Information that is an aggregate, non-identifiable form or that has been de-identified is not personal information. Where we have de-identified information, we will not attempt to re-identify the information except as permitted by the CCPA/CPRA and applicable law. 

In the preceding 12 months, we have disclosed the categories of personal information described above for the business purposes described in this Privacy Notice.

The CCPA/CPRA gives California residents the right to opt out of the “sale” or “sharing” of their personal information. The concept of “sale” is defined broadly and may apply to our sharing of personal information about Professionals with our Clients. If you are a Professional, we may have “sold” the following categories of personal information about you in the preceding 12 months:

  • Identification data, such as your name, location, time zone and social media URL or username;
  • Contact data, such as your email address;
  • Professional profile data, such as your current job title, employment type, seniority, employer, company industry and CV.

If you are a California resident, you may opt out of such sharing with our Clients as explained below. Please understand that this could result in fewer career opportunities for you.

We do not sell personal information about our Users or Sourcers and do not knowingly sell personal information about California residents under the age of 16.

Your privacy rights

Under the CCPA, California residents have the following rights:

  • Right to know. You have the right to know the personal information that we have collected, disclosed and sold over the past 12 months, and information about our data practices.
  • Right to correct. You have the right to request that we correct inaccurate personal information that we maintain about you. 
  • Right to Delete. You have the right to request deletion of the personal information that we have collected from you.
  • Right to opt out of sale/sharing. You have the right to opt-out of the “sale” or “sharing” of your personal information, as described above.
  • Right to non-discrimination. You have the right not to be discriminated against for exercising your rights under the CCPA. We will not discriminate against you for exercising any of these rights.

California law also permits you to request certain information regarding the disclosure of your personal data by us to third parties for the third parties’ direct marketing purposes.

To exercise any of the above rights, or if you are an agent authorized to exercise a right under the CCPA, please contact us by email at privacy@visage.jobs or by using the contact details provided in the “How to contact us” section below. We will not discriminate against you for exercising any of these rights.

Please note that to protect your information, we may need to verify your identity before processing your request. In some cases, we may need to collect additional information to verify your identity, such as a government issued ID. We will only use such additional information to verify your identity.

Under the CCPA/CPRA, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf. We may request that your authorized agent have written permission from you to make requests on your behalf and may need to verify your authorized agent’s identity.

We do not currently respond to “Do Not Track” signals. However, you are able to opt-out of the use of tracking technologies as explained in the section “Cookies and similar tracking technologies” above.

  1. Updates to this Privacy Notice

We may update this Privacy Notice from time to time. We will take appropriate steps to notify you of any material changes to this Privacy Notice and obtain your consent if and where this is required by applicable data protection laws. You can see when this Privacy Notice was last updated by checking the “last updated” date at the top of this Privacy Notice.

  1. How to contact us

If you have any questions or concerns about our use of your personal data, or would like to submit a rights request, please contact us by email at privacy@visage.jobs or by post at:

Visage Inc., 200 Wylie KuyKendall Ln, Kyle, TX 78640, United States

If you are located in the European Union or the United Kingdom, Visage, Inc. is the data controller responsible for your personal data. You can contact us through the methods described above or by email at privacy@visage.jobs. As explained above, if we have obtained your information from one of our Clients then we process your information on their behalf acting as a data processor. In this context, the Client is the data controller responsible for your personal data and you should contact that company or organization if you have any questions or concerns about their privacy practices.