1. Introduction and Scope
This Privacy Policy (“Policy”) describes how Appli Solutions (“Company,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects the personal information of individuals (“you,” “your,” or “users”) who access or use our professional networking platform, website, mobile applications, and all related services (collectively, the “Platform”). This Policy applies to all users located in the United States and Canada.
By creating an account, accessing, or using the Platform in any capacity, you acknowledge that you have read, understood, and agree to the collection, use, disclosure, and processing of your personal information as described in this Policy. If you do not agree with any provision of this Policy, you must immediately discontinue use of the Platform and delete your account.
This Policy is incorporated by reference into our Terms of Service. In the event of a conflict between this Policy and the Terms of Service regarding data privacy matters, this Policy shall control.
1.1 Applicable Laws and Regulations
This Policy has been drafted to comply with, and your rights are protected under, the following laws and regulations, to the extent applicable to you based on your jurisdiction of residence:
United States Federal Laws: The Federal Trade Commission Act (FTC Act), Section 5; the Controlling the Assault of Non-Solicited Pornography and Marketing Act (CAN-SPAM Act); the Children’s Online Privacy Protection Act (COPPA); Title VII of the Civil Rights Act of 1964; the Americans with Disabilities Act (ADA); the Age Discrimination in Employment Act (ADEA); the Fair Credit Reporting Act (FCRA); and the Genetic Information Nondiscrimination Act (GINA).
United States State Laws: The California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA); the California Delete Act (SB 362); the Illinois Biometric Information Privacy Act (BIPA); the Illinois Artificial Intelligence Video Interview Act (AIVIA); the Illinois Human Rights Act (as amended by HB 3773); the California Civil Rights Council’s regulations governing automated-decision systems in employment (2 CCR § 11008 et seq.); the Colorado Privacy Act (CPA); Colorado Senate Bill 26-189 concerning automated decision-making technology, which superseded Senate Bill 24-205 and applies to decisions made on or after January 1, 2027; the Connecticut Data Privacy Act (CTDPA); the Virginia Consumer Data Protection Act (VCDPA); the Texas Data Privacy and Security Act (TDPSA); the Oregon Consumer Privacy Act (OCPA); the Maryland Online Data Privacy Act (MODPA); the Delaware Personal Data Privacy Act; the Montana Consumer Data Privacy Act; the New Hampshire Privacy Act; the New Jersey Data Privacy Act; the Minnesota Consumer Data Privacy Act; the Indiana Consumer Data Protection Act (INCDPA); the Kentucky Consumer Data Protection Act (KCDPA); the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA); the Iowa Consumer Data Protection Act (ICDPA); the Tennessee Information Protection Act (TIPA); the Utah Consumer Privacy Act (UCPA); the Arkansas Data Privacy Act; New York City Local Law 144 (Automated Employment Decision Tools); and all other applicable state privacy, biometric, and consumer protection statutes.
Canadian Federal Laws: The Personal Information Protection and Electronic Documents Act (PIPEDA); Canada’s Anti-Spam Legislation (CASL); and the Canadian Human Rights Act.
Canadian Provincial Laws: Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (Law 25); Alberta’s Personal Information Protection Act (PIPA); British Columbia’s Personal Information Protection Act (PIPA); and all other applicable provincial and territorial privacy legislation.
1.2 Definitions
“Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an identifiable individual. This includes, without limitation, names, email addresses, physical addresses, dates of birth, ages, profile content, resumes, video recordings, biometric identifiers, geolocation data, IP addresses, device identifiers, and professional information.
“Biometric Information” means any information based on an individual’s biometric identifiers, including but not limited to facial geometry, voiceprints, and any mathematical representations derived therefrom, used to identify an individual. This definition is intended to be interpreted consistently with the Illinois Biometric Information Privacy Act (740 ILCS 14/10) and all other applicable biometric privacy statutes.
“Sensitive Personal Information” means Personal Information that reveals racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status, genetic or biometric data processed for the purpose of uniquely identifying an individual, Personal Information of a known child, and precise geolocation data.
“Processing” means any operation or set of operations performed on Personal Information, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.
“Work Trial” means the assessment process conducted through the Platform whereby a user interacts with other individuals, completes sample projects, records videos, and engages in activities designed to evaluate the user’s professional capabilities in connection with a specific job application.
“Assessment” means any screening exam, skills test, questionnaire, coding exercise, or other evaluative exercise administered through the Platform, together with your responses to it and the results derived from those responses.
“Evaluation Data” means the Personal Information that we generate about you, rather than receive from you, through the automated analysis described in Section 6 of this Policy. Evaluation Data includes the signal measurements our detectors produce from your submissions, the transcripts generated from your recorded interviews and Work Trial sessions, the per-criterion and composite scores we calculate, your ranking relative to other candidates for a given position, the written evaluation narratives our systems produce, and any other inference we derive about you from your submissions.
“Hiring Manager” means a third-party employer, recruiter, staffing organization, or authorized representative of any of them that accesses your Personal Information through the Platform for the purpose of evaluating you for employment opportunities. This includes both (a) an employer or its representative reviewing your materials in connection with a specific job position to which you have applied or for which you have accepted an invitation, and (b) an employer or its representative that searches, browses, filters, or is presented with recommended or ranked candidate profiles through the Appli Network in order to identify potential candidates, whether or not you have applied to a position with that employer.
2. Information We Collect
We collect the following categories of Personal Information from and about you:
2.1 Information You Provide Directly
- Account Registration Information: Full legal name, email address, password, date of birth, age, physical address, city, state or province, postal code, country of residence, and phone number. Your name, email address, and phone number are provided to Hiring Manager(s) considering your candidacy, as described in Sections 4.3 and 4.4 of this Policy.
- Profile Information: Professional title, employment history, education history, skills, professional certifications, biography, profile photographs, and any other information you choose to include in your public profile.
- Resume and Application Materials: Resumes, curriculum vitae, cover letters, portfolio samples, work history, references, and any supplementary documents you upload to the Platform.
- Video Recordings: Interview videos that include your face, voice, spoken responses, and visual likeness, recorded through the Platform’s video recording functionality. These recordings constitute both audio-visual personal data and, to the extent that facial geometry or voiceprint data is extracted or could be extracted therefrom, Biometric Information.
- Work Trial Data: All communications, messages, chat transcripts, sample project outputs (including but not limited to written reports, presentations, analyses, and creative work), video recordings, screen activity, and any other data generated during the course of a Work Trial conducted on the Platform.
- Exam, Screening, and Assessment Data: Your responses to Assessments administered through the Platform, including your written and multiple-choice answers, submitted files, code, and work product; the time taken to respond; your attempt and completion records; and the raw and scaled results derived from those responses.
- Communications: Messages sent and received through the Platform’s messaging system, including direct messages between users and communications with our support team.
- User-Generated Content: Posts, comments, endorsements, recommendations, and any other content you create or share on the Platform.
2.2 Information Collected Automatically
- Device and Browser Information: IP address, browser type and version, operating system, device type, unique device identifiers, screen resolution, and language preferences.
- Usage Data: Pages viewed, features accessed, links clicked, search queries, session duration, timestamps, referring URLs, and navigation patterns within the Platform.
- Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies as described in Section 12 of this Policy.
- Geolocation Data: Approximate geographic location inferred from your IP address or, with your explicit consent, precise geolocation data from your device.
2.3 Information from Third Parties
- Social Media Platforms: If you link a third-party social media account, we may receive profile information from that platform in accordance with your privacy settings on that platform.
- Hiring Managers and Employers: Feedback, evaluations, and hiring decisions related to Work Trials.
- Service Providers: Analytics providers, identity verification services, and fraud prevention services may provide us with information about you.
2.4 Information We Generate About You
In addition to the Personal Information you provide to us and the Personal Information we collect automatically, we create Personal Information about you. When you submit a resume, complete an Assessment, record a video interview, or participate in a Work Trial, our automated evaluation systems analyze the materials you submit and generate the Evaluation Data defined in Section 1 and described in detail in Section 6 of this Policy.
Under applicable law, this generated information is your Personal Information. It falls within the statutory category of “inferences drawn from…information…to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.” We treat Evaluation Data as Personal Information for all purposes under this Policy, including the rights of access, correction, and deletion described in Section 8 and the retention periods set out in Section 9.
3. How We Use Your Information
We use the Personal Information we collect for the following purposes, each of which constitutes a lawful and legitimate basis for processing:
3.1 Platform Operations and Service Delivery
- To create, maintain, and administer your user account and profile.
- To display your profile information to other users of the Platform, subject to your privacy settings.
- To facilitate connections, messaging, and professional networking between users.
- To enable you to participate in Work Trials, including transmitting your Work Trial data (chat transcripts, project outputs, video recordings, and related materials) to the Hiring Manager(s) associated with the specific job position for which you applied.
- To administer Assessments, to score your responses to them, and to transmit your Assessment responses and results to the Hiring Manager(s) associated with the specific job position for which you applied.
- To provide, maintain, improve, and develop the Platform and its features.
3.2 Communications
- To send you transactional communications, including account confirmations, security alerts, technical notices, support messages, and administrative updates related to your use of the Platform.
- To send you marketing and promotional communications about our products, services, events, and opportunities that may be of interest to you, subject to your opt-in consent where required by law (including CASL and CAN-SPAM Act compliance) and your right to opt out at any time.
- To respond to your inquiries, feedback, and support requests.
3.3 Safety, Security, and Legal Compliance
- To detect, prevent, investigate, and address fraud, unauthorized access, illegal activity, and violations of our Terms of Service.
- To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.
- To protect the rights, property, and safety of the Company, our users, and the public.
- To enforce our Terms of Service and other agreements.
3.4 Analytics and Improvement
- To conduct research, analysis, and reporting to understand user behavior, improve the Platform, and develop new features.
- To aggregate and de-identify data for statistical analysis and benchmarking purposes.
3.5 Hiring and Employment Facilitation
3.6 Automated Evaluation of Your Candidacy
We use your Personal Information to generate Evaluation Data about you and to provide that Evaluation Data to Hiring Manager(s), for the purpose of assisting them in assessing candidates for the positions to which those candidates have applied or for which they are being considered. The categories of Personal Information that affect the Evaluation Data generated about you, the outputs produced, and the recipients of those outputs are described in Section 6 of this Policy.
4. Disclosure of Your Information
We may disclose your Personal Information to the following categories of recipients and for the following purposes:
4.1 Public Profile Information
By default, certain information you provide—including your name, professional title, employment history, education history, skills, profile photograph, and any other information you add to your public profile—will be visible to all users of the Platform and may be indexed by external search engines. You may adjust the visibility of certain profile fields through your account privacy settings. It is your responsibility to review and manage these settings. Any information you choose to make public is disclosed at your own risk.
4.2 Discovery by Employers in the Appli Network
Separately from the disclosures we make when you apply to a specific position, once you have completed your profile setup, your profile is discoverable in the Appli Network by default: Hiring Managers that subscribe to our services may search for, filter, view, and be presented with your profile without your having applied to a particular role, and our systems may score and rank you for their open positions as described in Section 6.1. The Personal Information available in this way includes your profile information. We do not disclose your email address or telephone number as part of Appli Network discovery; Hiring Managers who wish to reach you through the Network do so using the Platform’s messaging and notification features.
We do not currently offer a self-service setting that removes you from Appli Network discovery. You may request removal from Hiring Manager search, scoring, and recommendation results at any time by submitting a request as described in Section 8.1, or through the “Do Not Sell or Share My Personal Information” mechanism described in Section 7; we process these requests manually. Removal will not prevent you from applying directly to positions.
Interview video recordings you record in connection with a specific job application, your Work Trial recordings and materials, your Assessment responses and results, and the Evaluation Data derived from them are disclosed only to the Hiring Manager(s) for the position in connection with which they were created, and are not made available to other employers through Appli Network discovery. Separately, if you record a profile interview video, that video is displayed on your public profile and is viewable by anyone who can view that profile, including people who are not signed in. This setting is on by default; you may turn it off at any time using the visibility control on the interview section of your profile.
4.3 Hiring Managers and Employers
When you apply to a job position, complete an Assessment, or participate in a Work Trial, the following categories of Personal Information will be shared with the Hiring Manager(s) designated for that position: your resume and application materials; your profile information; your name, email address, and phone number; your responses to, and the raw and scaled results of, any Assessment you complete; your Work Trial chat transcripts, sample project outputs, video recordings, screen activity, and all other data generated during the Work Trial; your interview video recordings and the transcripts derived from them; and the Evaluation Data we generate about you, as described in Sections 2.4 and 6 of this Policy. You provide your express consent to this disclosure each time you initiate an application, an Assessment, or a Work Trial.
4.4 Direct Contact by Hiring Managers; Hiring Managers as Independent Controllers
Direct contact. Hiring Managers that receive your Personal Information may contact you directly, including by email, telephone, and text message, and including outside the Platform. Messages concerning a specific role, an interview, an Assessment, or an offer are recruiting communications initiated by the Hiring Manager. Where a Hiring Manager contacts you from its own systems, we neither send nor control those messages. Where a Hiring Manager initiates contact through the Platform, we transmit the message on the Hiring Manager’s behalf—by email from our systems, by in-Platform message, or by notification—and Sections 14.1 and 14.2 apply to our transmission of it. We do not consent on your behalf to receive any commercial electronic message, and a Hiring Manager that wishes to send you marketing or promotional messages must obtain your consent directly.
Independent controller. Once a Hiring Manager receives your Personal Information, that Hiring Manager independently determines the purposes and means of its own processing and acts as a separate and independent controller in its own right—including in deciding whether to interview, assess, contact, reject, or hire you, and in retaining your Personal Information in its own systems under its own retention policies. We are not responsible for a Hiring Manager’s use of your Personal Information once it has been disclosed. That Hiring Manager’s own privacy notice, and not this Policy, governs from that point.
Limits of your requests. Requests to access, correct, or delete Personal Information held by a Hiring Manager, and requests that a Hiring Manager cease contacting you, must be directed to that Hiring Manager. Where you ask us to delete or correct your Personal Information, we will do so in our own systems, will instruct our service providers to do the same, and will notify Hiring Managers to which we have disclosed your Personal Information of your request; however, we cannot compel an independent Hiring Manager to act on it. Closing your account, withdrawing an application, unsubscribing from our communications, or opting out of the disclosures described in Section 7 will not delete Personal Information a Hiring Manager has already received, will not require a Hiring Manager to cease processing it, and will not prevent a Hiring Manager from contacting you.
4.5 Service Providers and Processors
We engage third-party service providers who perform services on our behalf, including but not limited to cloud hosting, data storage, email delivery, analytics, payment processing, customer support, and security monitoring. These service providers are contractually obligated to process your Personal Information only as directed by us and in accordance with this Policy, and are prohibited from using your Personal Information for their own purposes. We require all service providers to maintain appropriate technical and organizational security measures.
4.6 Email Address Sharing with Affiliated Platforms and Marketing Partners
Separately from the disclosures to Hiring Managers described in Sections 4.2 through 4.4, we may share your email address with affiliated platforms and marketing partners for the purposes of facilitating professional opportunities, delivering relevant communications, and supporting the operation of the Platform. You provide your express, informed consent to this sharing when you create your account, and you may withdraw this consent at any time as described in Section 8 of this Policy. Upon withdrawal of consent, we will cease sharing your email address with new third parties within thirty (30) calendar days, though we cannot retroactively retrieve email addresses already disclosed to third parties prior to your withdrawal.
4.7 Legal and Regulatory Disclosures
We may disclose your Personal Information to government authorities, law enforcement agencies, courts, regulatory bodies, or other third parties where we believe in good faith that disclosure is required by applicable law, regulation, legal process, or enforceable governmental request; necessary to protect the rights, property, or safety of the Company, our users, or the public; necessary to detect, prevent, or address fraud, security, or technical issues; or made in connection with any merger, acquisition, reorganization, bankruptcy, asset sale, or similar transaction.
4.8 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, dissolution, asset sale, or similar transaction involving the Company, your Personal Information may be transferred as part of the transaction. We will provide notice before your Personal Information is transferred and becomes subject to a different privacy policy, and we will use reasonable efforts to ensure the successor entity honors this Policy.
4.9 De-Identified and Aggregated Data
We may disclose de-identified or aggregated data that cannot reasonably be used to identify you to any third party for any purpose. We maintain technical safeguards and business processes to prevent re-identification.
4.10 With Your Consent
We may disclose your Personal Information to other third parties when we have obtained your specific, informed consent. Where required by applicable law, such consent will be obtained in writing (including electronic consent).
5. Biometric Information Notice and Consent
5.1 Collection of Biometric Information
When you upload or record interview videos through the Platform, the video recordings capture your facial geometry, visual likeness, and voice. To the extent that facial geometry scans, voiceprints, or other biometric identifiers or biometric information (as those terms are defined under BIPA) are collected, captured, or otherwise obtained from such recordings, we provide the following disclosures:
- Purpose: Biometric Information is collected solely for the purpose of facilitating the job application and Work Trial evaluation process, including the transmission of your video recordings to applicable Hiring Managers and the automated evaluation of those recordings described in Section 6 of this Policy. We do not use Biometric Information to identify you, to match you against any facial recognition database or watchlist, to monitor you outside the recorded session, or for any purpose unrelated to the specific employment opportunity for which you have applied. Within a recorded session, our systems measure head position, gaze direction, facial expression, posture, and hand movement over time, as described in Section 6.1.
- Retention: We will retain your Biometric Information for no longer than three (3) years from the date of your last interaction with the Platform, or until the purpose for which the Biometric Information was collected has been satisfied, whichever occurs first. Upon expiration of the retention period, we will permanently destroy your Biometric Information using commercially reasonable methods within thirty (30) days.
- Written Policy: We maintain a publicly available written policy establishing a retention schedule and guidelines for the permanent destruction of Biometric Information in compliance with BIPA Section 15(a).
- No Sale or Profit: We will never sell, lease, trade, or otherwise profit from your Biometric Information. This prohibition is absolute and without exception.
- No Disclosure Without Consent: We will not disclose, redistribute, or otherwise disseminate your Biometric Information to any third party unless: (a) you have provided your informed, written consent to the specific disclosure; (b) the disclosure is required by law, regulation, or valid legal process; or (c) the disclosure is necessary to complete a financial transaction that you have authorized.
5.2 Consent
By recording or uploading a video through the Platform, you acknowledge that you have read this Biometric Information Notice, you understand the purposes and duration for which your Biometric Information will be collected, stored, and used, and you provide your informed, written consent (via electronic acceptance) to the collection, storage, use, and limited disclosure of your Biometric Information as described herein. You have the right to withhold or withdraw this consent at any time; however, withholding or withdrawing consent may prevent you from using the video recording and Work Trial features of the Platform. Withdrawal of consent does not affect the lawfulness of processing conducted prior to the withdrawal.
5.3 Security of Biometric Information
We store and transmit Biometric Information using a standard of security that is equal to or more protective than the manner in which we store and transmit other confidential and sensitive personal information. Security measures include, at minimum, encryption in transit (TLS 1.2 or higher) and at rest (AES-256 or equivalent), access controls restricted to authorized personnel, multi-factor authentication, regular security audits, and intrusion detection systems.
6. Automated Evaluation, Artificial Intelligence, and Automated Decision-Making
This Section provides the notices required under the Illinois Artificial Intelligence Video Interview Act (820 ILCS 42), the Illinois Human Rights Act as amended by HB 3773, the California Civil Rights Council’s automated-decision-system regulations (2 CCR § 11008 et seq.), Quebec’s Act respecting the protection of personal information in the private sector, and other applicable laws governing automated decision-making in employment contexts.
6.1 How We Evaluate Candidates
- What we analyze: When you submit a resume, complete an Assessment, record a video interview, or participate in a Work Trial, our systems analyze the materials you submit. This includes the substantive content of your written and spoken answers; the correctness and quality of the code, project work, and other work product you submit; the content and timing of your messages and on-screen activity during a Work Trial; where a Work Trial is conducted in Google Drive documents we provide, the file metadata, revision history, comments, activity events, and the structure and content of the files you create or edit for that Work Trial; measured characteristics of your spoken delivery, including speech rate, pitch variation, and vocal energy; and measured visual signals during recorded sessions, including head position and gaze direction, facial expression, posture, and hand movement and gesture, derived from facial and hand landmark geometry.
- Evaluation without an application: Whether or not you have applied to a position, once your profile is discoverable in the Appli Network our systems also analyze your profile—including your employment history, education, skills, and location—to score and rank you against Hiring Managers’ open positions, as described in Section 4.2.
- How we analyze it: Analysis is performed by automated signal detectors that we operate, by third-party speech-recognition services that transcribe your recorded audio, including AssemblyAI, and by large language models operated by our artificial intelligence service providers, including Google. Your recordings, your other submissions, and the transcripts derived from them are processed by those providers on our behalf and under contract.
- The characteristics evaluated: Depending on the role and the stage of the process, the evaluation criteria may include communication, English fluency, professionalism, confidence, leadership, extraversion, achievement orientation, willingness to learn, work ethic, sales ability, analytical thinking, problem solving, technical ability, execution, collaboration, initiative, the depth and relevance of your work experience, your education and credentials, the continuity of your employment history, your geographic fit for the role, and your fit with a Hiring Manager’s stated requirements and working culture. For Work Trials, our systems may additionally generate an indicative personality-type classification, indicators relating to retention and to team fit, estimated compensation and onboarding cost ranges, and an assessment of your competitiveness relative to other candidates.
- What we produce: The systems generate numerical scores on a 0–100 scale against defined evaluation criteria, an overall composite score, a ranking of you relative to other candidates for the same position, a written narrative describing and explaining those scores, and automatically generated integrity signals that flag patterns such as extended downward glances, unusually immediate answers, delivery consistent with reading from a script, the apparent use of a phone or other device, and statements that appear to conflict with your resume. These signals identify patterns only; they are not findings of misconduct.
- Who receives it: This Evaluation Data is provided to the Hiring Manager(s) considering you, together with your resume, profile, Assessment results, and Work Trial materials, and may influence whether you are interviewed, advanced, or hired.
- What it is not: Evaluation Data consists of estimates produced from limited evidence. It is not a determination of your ability, competence, or suitability for employment, and we do not represent it to be free from error.
6.2 Notice and Consent Before a Recorded Interview, Assessment, or Work Trial
This Section 6 is the notice of our automated evaluation practices. Your acceptance of this Policy when you create your account, and your election to proceed with an Assessment, a recorded video interview, or a Work Trial, constitute your consent to the automated evaluation described in Section 6.1.
Where applicable law requires a separate, activity-specific notice and consent before an interview, Assessment, or Work Trial is analyzed by artificial intelligence, we will present that notice before the activity begins and will obtain your consent separately from your acceptance of this Policy and our Terms of Service. That notice will identify the Personal Information to be collected in the activity, the automated analysis that will be applied to it, the Hiring Manager(s) with whom the resulting materials and Evaluation Data will be shared, and the potential consequences for your candidacy. We will not apply artificial intelligence analysis to the video interview of any applicant from whom such consent is required and has not been obtained.
6.3 Illinois Applicants — Artificial Intelligence Video Interview Act
Where you are considered for a position based in Illinois and are asked to record a video interview, we will, before the interview: (a) notify you that artificial intelligence may be used to analyze your video interview and to consider your fitness for the position; (b) provide you with information explaining how that artificial intelligence works and the general types of characteristics it uses to evaluate applicants, as described in Section 6.1; and (c) request and obtain your consent to be evaluated by the artificial intelligence program so described. We will not apply artificial intelligence analysis to the video interview of any applicant who has not consented.
We share applicant video interviews only with persons whose expertise or technology is necessary in order to evaluate your fitness for the position to which you applied. Upon your request, we will delete your video interviews within thirty (30) days after receipt of the request, and will instruct every other person who received copies of those video interviews to delete them, including all electronically generated backup copies. Requests may be submitted to the contact provided in Section 16.
6.4 Human Review and Questioning an Automated Result
You have the right to request that any evaluation generated about you by an automated or artificial intelligence system be supplemented or replaced by human review. You may also ask us to explain a result. On request, we will tell you the reason the evaluation produced the result it did, including which criteria drove the outcome; allow you to review the Personal Information used in the evaluation; and, where feasible, tell you what you may do to obtain a different result in the future. If an evaluation was based on Personal Information that was inaccurate, incomplete, or incorrectly attributed to you, we will correct that Personal Information and re-evaluate on the corrected data, as described in Section 8.
We may withhold specific information where it constitutes a trade secret or is otherwise protected from disclosure under applicable law, or where disclosure would compromise our ability to prevent, detect, or investigate security incidents or fraudulent or malicious activity. Where we withhold information on any of those bases, we will tell you that information has been withheld and the basis for withholding it. We do not make hiring decisions; a request for human review of our Evaluation Data does not oblige a Hiring Manager to reconsider its own decision.
6.5 Deletion of Interview and Work Trial Recordings
You may request that your video interview recordings, and your Work Trial recordings and materials, be deleted at any time, subject to any legal retention obligations described in Section 9, by contacting us at the address provided in Section 16.
6.6 Non-Discrimination
We are committed to ensuring that the Platform and all features, including Assessments, Work Trials, video interviews, and the automated evaluation systems described in Section 6.1, are operated in compliance with all applicable federal, state, provincial, and local anti-discrimination laws, including but not limited to Title VII of the Civil Rights Act of 1964, the Americans with Disabilities Act, the Age Discrimination in Employment Act, the Illinois Human Rights Act, the Canadian Human Rights Act, and all applicable state and provincial human rights legislation. We do not use or permit the use of any tool, algorithm, or process on the Platform that intentionally or knowingly discriminates against any individual on the basis of race, color, religion, sex (including gender identity and sexual orientation), national origin, age, disability, genetic information, veteran status, or any other characteristic protected by applicable law.
6.7 Reasonable Accommodations and Alternative Assessment Formats
Our Assessments and interviews may include the automated analysis of video, audio, speech, and behavioral signals. If a disability or medical condition may affect your ability to complete an Assessment, video interview, or Work Trial in its standard format, or may affect how such signals are recorded or interpreted, you may request a reasonable accommodation or an alternative assessment format at any time before or during the activity by contacting us at the address provided in Section 16. We will engage in a timely, good-faith interactive process with you and, where necessary, with the applicable Hiring Manager, to provide an accessible alternative.
You are not required to disclose a diagnosis in order to request a format accommodation. A request for accommodation is not disclosed to the Hiring Manager as an indication of disability and is not used as a factor in any Evaluation Data generated about you.
7. Sale of Personal Information and Targeted Advertising
7.1 Sale of Personal Information
Under the CCPA/CPRA and other applicable state privacy laws, the term “sale” is broadly defined to include the disclosure of Personal Information to a third party for monetary or other valuable consideration. To the extent that any disclosure described in this Policy constitutes a “sale” as defined under applicable law, we provide you with the right to opt out of such sales as described in Section 8.
7.2 Targeted Advertising
We may use your Personal Information for targeted or cross-context behavioral advertising purposes. Under applicable state privacy laws, you have the right to opt out of the processing of your Personal Information for targeted advertising. You may exercise this right as described in Section 8.
7.3 Do Not Sell or Share My Personal Information
We honor “Do Not Sell or Share My Personal Information” requests. You may submit such a request through the methods described in Section 8. We also recognize and honor Global Privacy Control (GPC) signals and other universal opt-out mechanisms (UOOMs) as valid opt-out requests, as required by applicable state law, including but not limited to the CCPA/CPRA, CTDPA, OCPA, and all other statutes mandating recognition of such signals.
8. Your Privacy Rights
Depending on your jurisdiction of residence, you may have the following rights with respect to your Personal Information. We will honor all applicable rights regardless of whether you reside in a jurisdiction that has enacted comprehensive privacy legislation:
- Right to Know and Access: You have the right to request confirmation of whether we are processing your Personal Information and to access the specific categories and pieces of Personal Information we have collected about you.
- Right to Correction: You have the right to request that we correct inaccurate Personal Information we maintain about you.
- Access to Evaluation Data: Your right to know and access extends to the Evaluation Data we generate about you, including your per-criterion scores, composite scores, ranking, and written evaluation narratives. We will withhold information only to the extent that it constitutes a trade secret or is otherwise protected from disclosure under applicable law, or where disclosure would compromise our ability to prevent, detect, or investigate security incidents, resist fraudulent or malicious activity, or ensure physical safety. Where we withhold information on any of those bases, we will tell you that information has been withheld and the basis for withholding it.
- Correction of Evaluation Data: Where you demonstrate that Personal Information used to generate an evaluation of you was inaccurate, incomplete, or incorrectly attributed to you, we will use commercially reasonable efforts to correct that Personal Information and to re-generate the affected Evaluation Data. Where you dispute an evaluation itself rather than the Personal Information on which it was based, we will record the substance of the unresolved challenge alongside that Evaluation Data.
- Right to Human Review and to Question an Automated Result: Where your Personal Information has been evaluated by an automated or artificial intelligence system in furtherance of a decision producing a legal or similarly significant effect concerning you, you may request human review of that evaluation and ask us to explain the result, as described in Section 6.4.
- Right to Deletion: You have the right to request that we delete Personal Information we have collected from you, subject to certain exceptions permitted by law (such as legal retention obligations, ongoing legal disputes, security purposes, and the completion of transactions you have initiated).
- Right to Data Portability: You have the right to receive a copy of your Personal Information in a structured, commonly used, and machine-readable format, and to transmit that information to another controller.
- Right to Opt Out of Sale and Sharing: You have the right to opt out of the sale of your Personal Information and the sharing of your Personal Information for cross-context behavioral advertising or targeted advertising purposes.
- Right to Opt Out of Profiling: You have the right to opt out of processing of your Personal Information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
- Right to Restrict or Limit Processing: You have the right to restrict or limit our use of your Sensitive Personal Information to only those uses necessary to perform the services you have requested.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights under applicable law. We will not deny you services, charge you different prices, provide you a different level of service, or suggest that you will receive a different price or level of service for exercising your rights.
- Right to Withdraw Consent: Where we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to the withdrawal.
- Right to Appeal: If we deny your privacy request, you have the right to appeal our decision by contacting us at the address provided in Section 16. If your appeal is denied, you may contact your state Attorney General, the Office of the Privacy Commissioner of Canada, or the applicable provincial privacy commissioner to file a complaint.
8.1 How to Exercise Your Rights
You may exercise any of your privacy rights by: (a) emailing us at info@applisolutions.com; (b) submitting a request through the “Privacy Rights” page on our Platform; or (c) mailing a written request to 72 Burling Pl, Newmarket, ON L3Y 5W4, Canada. We will respond to all verified requests within the timeframes required by applicable law. Under U.S. state privacy laws, that is generally forty-five (45) calendar days from receipt, with a possible extension of an additional forty-five (45) days upon notice to you if reasonably necessary. Under PIPEDA and Quebec’s Law 25, we will respond no later than thirty (30) days from receipt; if we extend that period as permitted by section 8(4) of PIPEDA, we will notify you of the extension, the reason for it, and your right to complain to the Office of the Privacy Commissioner of Canada.
8.2 Verification
To protect your privacy and security, we will verify your identity before fulfilling any privacy request. Verification may require you to provide your name, email address, and other information sufficient to match you to our records. We will not fulfill a request if we are unable to verify your identity. Authorized agents may submit requests on your behalf with proper written authorization and verification of both the agent’s and the consumer’s identity.
9. Data Retention
We retain your Personal Information only for as long as is reasonably necessary to fulfill the purposes for which it was collected, as described in this Policy, and to comply with our legal, regulatory, and contractual obligations. Specific retention periods are as follows:
- Account and Profile Information: Retained for the duration of your account and for a period of three (3) years following account deletion, to comply with legal obligations and to resolve disputes.
- Resumes and Application Materials: Retained for two (2) years following your last application activity, unless you request earlier deletion.
- Interview Video Recordings and Biometric Information: Retained for no longer than three (3) years from your last interaction with the Platform, or until the purpose for collection has been satisfied, whichever is earlier, in compliance with BIPA and other biometric privacy laws.
- Work Trial Data: Retained for two (2) years following completion of the Work Trial, or as required by the applicable Hiring Manager’s record retention obligations, whichever is longer.
- Exam and Assessment Responses and Results: Retained for the period stated below for Evaluation Data, because Assessment responses and results form part of the selection criteria and automated-decision-system records we are required to preserve.
- Evaluation Data: Detector signal measurements, transcripts, per-criterion scores, composite scores, rankings, and evaluation narratives are retained for not less than four (4) years from the date the record was made or the date of the personnel action involved, whichever occurs later, as required by applicable automated-decision-system recordkeeping rules. Where a complaint, claim, or legal proceeding relating to your candidacy is filed, we retain all records relevant to that complaint, including Evaluation Data, until the later of the expiration of the applicable limitation period or the final disposition of all proceedings.
- Communications and Messages: Retained for the duration of your account and for one (1) year following account deletion.
- Usage Data and Logs: Retained for up to two (2) years for analytics and security purposes.
- Consent Records: Retained for a minimum of three (3) years following the expiration or withdrawal of consent, as required by CASL and other applicable laws.
Upon expiration of the applicable retention period, your Personal Information will be permanently deleted or irreversibly de-identified using commercially reasonable methods. We conduct periodic reviews of our data retention practices to ensure compliance with applicable laws.
10. Data Security
We implement and maintain commercially reasonable administrative, technical, and physical security measures designed to protect your Personal Information from unauthorized access, disclosure, alteration, destruction, and misuse. These measures include but are not limited to:
- Encryption of Personal Information in transit using TLS 1.2 or higher and at rest using AES-256 encryption or equivalent.
- Access controls, including role-based access and the principle of least privilege, restricting access to Personal Information to authorized personnel who require access for legitimate business purposes.
- Multi-factor authentication for all administrative and internal systems.
- Regular security assessments, vulnerability scans, and penetration testing conducted by qualified independent third parties.
- Intrusion detection and prevention systems, firewalls, and continuous monitoring of our systems and networks.
- Employee training on data protection, privacy, and security best practices.
- Incident response procedures designed to promptly detect, contain, investigate, and remediate security incidents.
- Physical security measures at data centers, including access controls, surveillance, and environmental protections.
Notwithstanding the foregoing, no method of transmission over the Internet and no method of electronic storage is completely secure. While we strive to protect your Personal Information, we cannot guarantee its absolute security. In the event of a data breach involving your Personal Information, we will notify you and the appropriate regulatory authorities in accordance with all applicable breach notification laws, including but not limited to the PIPEDA breach notification requirements, CCPA/CPRA, and all applicable state breach notification statutes.
11. Cross-Border Data Transfers
Your Personal Information may be processed and stored in the United States, Canada, or other countries where our service providers maintain facilities. These countries may have data protection laws that differ from those in your jurisdiction of residence.
Where your Personal Information is transferred across national borders, we ensure that appropriate safeguards are in place, including contractual data protection clauses, privacy certifications, or other mechanisms recognized under applicable law. For transfers of Personal Information from Canada, we comply with PIPEDA’s requirements for cross-border data transfers, including ensuring that contractual or other means are in place to provide a comparable level of protection. We remain accountable for your Personal Information regardless of where it is processed.
For transfers from the European Economic Area, the United Kingdom, or Switzerland, we rely on applicable adequacy decisions and standard contractual clauses approved by the relevant authorities.
12. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect information about your use of the Platform. Cookies are small text files placed on your device that help us recognize your browser, remember your preferences, and improve your experience.
12.1 Types of Cookies We Use
- Strictly Necessary Cookies: Required for the operation of the Platform, including session management and security. These cookies cannot be disabled.
- Functional Cookies: Enable personalized features such as remembering your language preferences and settings.
- Analytics Cookies: Help us understand how users interact with the Platform, including page views, session duration, and navigation patterns. We use third-party analytics providers, such as Google Analytics, to collect and analyze this data.
- Advertising and Targeting Cookies: Used to deliver advertisements relevant to your interests and to measure the effectiveness of advertising campaigns. These cookies may track your activity across different websites.
12.2 Your Cookie Choices
You may manage your cookie preferences through the cookie consent banner displayed upon your first visit to the Platform, through your browser settings, or by adjusting your preferences in the “Cookie Settings” section of your account. Please note that disabling certain cookies may limit the functionality of the Platform. We honor GPC signals as a valid opt-out of cookies used for targeted advertising, as required by applicable law.
13. Children’s Privacy
The Platform is not intended for use by individuals under the age of sixteen (16). We do not knowingly collect Personal Information from individuals under sixteen (16) years of age. If we become aware that we have inadvertently collected Personal Information from a child under the applicable minimum age, we will promptly delete such information from our records. If you believe that a child under sixteen (16) has provided us with Personal Information, please contact us immediately at the address provided in Section 16.
For users between the ages of sixteen (16) and eighteen (18), or the age of majority in their jurisdiction, parental or guardian consent may be required for certain features. We comply with COPPA, the CCPA’s enhanced protections for minors, the CTDPA’s age-appropriate design code requirements, and all other applicable laws governing the collection and processing of minors’ personal data.
We will never sell or share the Personal Information of users known to be under the age of eighteen (18) for targeted advertising purposes.
14. Commercial Electronic Messages and Anti-Spam Compliance
14.1 CAN-SPAM Act Compliance (United States)
All commercial electronic messages sent by us comply with the CAN-SPAM Act of 2003. Each commercial message will: (a) accurately identify us as the sender; (b) include a clear and conspicuous subject line that is not deceptive or misleading; (c) include our valid physical postal address; (d) include a clear and conspicuous mechanism for you to opt out of receiving future commercial messages from us; and (e) honor opt-out requests within ten (10) business days of receipt.
14.2 CASL Compliance (Canada)
All commercial electronic messages sent to recipients in Canada comply with Canada’s Anti-Spam Legislation (CASL). We will not send you commercial electronic messages unless: (a) we have obtained your express consent through a clear, affirmative opt-in mechanism that identifies us, describes the purpose of the messages, and includes our contact information; or (b) we have implied consent based on an existing business relationship or other ground recognized under CASL. Each commercial electronic message will: (i) clearly identify us as the sender; (ii) include our contact information (mailing address and either a phone number, email address, or web address); and (iii) include a clear and functional unsubscribe mechanism. We will honor unsubscribe requests within ten (10) business days. We maintain records of all consents for a minimum of three (3) years following the expiration or withdrawal of consent.
14.3 Messages Sent by Hiring Managers
Sections 14.1 and 14.2 govern commercial electronic messages sent by us, including messages we transmit on a Hiring Manager’s behalf. They do not govern messages a Hiring Manager sends you from its own systems. Unsubscribing from our messages does not prevent a Hiring Manager from contacting you directly, and a request that a Hiring Manager cease contacting you must be directed to that Hiring Manager, as described in Section 4.4 of this Policy.
15. Jurisdiction-Specific Disclosures
15.1 California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. In the preceding twelve (12) months, we have collected, disclosed for a business purpose, and may have sold the categories of Personal Information described in this Policy. You have the right to: know what Personal Information we collect and how it is used and shared; request deletion of your Personal Information; opt out of the sale and sharing of your Personal Information; limit the use of your Sensitive Personal Information; correct inaccurate Personal Information; and receive equal service and pricing regardless of whether you exercise your rights. California residents may designate an authorized agent to submit requests on their behalf by providing a signed, written authorization. We do not use or disclose Sensitive Personal Information for purposes other than those permitted under the CCPA/CPRA.
15.2 Illinois Residents (BIPA and AIVIA)
If you are an Illinois resident, you have additional rights under the Biometric Information Privacy Act (BIPA) and the Artificial Intelligence Video Interview Act (AIVIA). Your rights under BIPA are described in Section 5 of this Policy, and your rights under AIVIA — including notice, the explanation of how our artificial intelligence works and what characteristics it evaluates, consent before any artificial intelligence analysis, the limitation on sharing your video interview, and destruction of your video recordings within thirty (30) days of your request — are described in Section 6.3.
Under Illinois HB 3773, effective January 1, 2026, we notify you that we use artificial intelligence in connection with recruitment and hiring on the Platform, as described in Section 6.1, and we will not use artificial intelligence in any manner that results in discrimination based on any protected class under the Illinois Human Rights Act. We do not use zip codes as a proxy for any class protected under that Act.
15.3 Colorado Residents
If you are a Colorado resident, you have additional rights under the Colorado Privacy Act. Colorado Senate Bill 24-205 (the “Colorado AI Act”) never took effect and was superseded by Senate Bill 26-189, which governs automated decision-making technology and applies to decisions made on or after January 1, 2027. From that date, where automated decision-making technology is used to materially influence a decision regarding your employment or an employment opportunity, we will provide clear and conspicuous notice of that use before you interact with the technology. If such technology materially influences a decision that results in an adverse outcome for you, we will, within thirty (30) days of that decision, provide a plain-language description of the role the technology played in reaching it, instructions for requesting additional information about the technology and the Personal Information it used, and an explanation of your rights. You may request the Personal Information processed in reaching the decision, request correction of Personal Information that is factually incorrect or materially inaccurate, and, where commercially reasonable, request meaningful human review and reconsideration of the decision. You may opt out of profiling and targeted advertising as described in Section 8.
15.4 Canadian Residents (PIPEDA, Law 25, CASL)
If you are a Canadian resident, your Personal Information is protected under PIPEDA and, where applicable, provincial privacy legislation including Quebec’s Law 25, Alberta’s PIPA, and British Columbia’s PIPA. Under PIPEDA’s ten Fair Information Principles, you have the right to: know why your Personal Information is being collected; expect that it will be used only for the purposes for which it was collected; have your Personal Information collected only by fair and lawful means; have your Personal Information protected by appropriate security safeguards; access and request correction of your Personal Information held by us; and challenge our compliance with PIPEDA by filing a complaint with the Office of the Privacy Commissioner of Canada. We have appointed a Privacy Officer who is accountable for our compliance with PIPEDA and who can be contacted at the address provided in Section 16. For Quebec residents, we comply with Law 25’s enhanced requirements regarding consent, automated decision-making, and the right to data portability.
Quebec residents — decisions based exclusively on automated processing. Where we use your Personal Information to render a decision about your application that is based exclusively on automated processing—that is, a decision made without human intervention, such as the automated screening or ranking of your resume, Assessment results, or Work Trial output—we will inform you of that fact no later than at the time we inform you of the decision. On your request, we will inform you of the Personal Information used to render the decision, the reasons and the principal factors and parameters that led to it, and your right to have the Personal Information used to render the decision corrected. You will in every case be given the opportunity to submit your observations to a member of our personnel who is in a position to review the decision. The decision whether to interview or hire you is made by the Hiring Manager and not by us.
Personal Information collected through our video interview and Work Trial tools may be communicated outside Quebec, including to our service providers in the United States and to the artificial intelligence service providers identified in Section 6.1.
15.5 Other U.S. State Residents
Residents of Virginia, Connecticut, Oregon, Montana, Texas, Delaware, New Hampshire, New Jersey, Maryland, Minnesota, Indiana, Kentucky, Rhode Island, Iowa, Tennessee, Utah, Arkansas, and all other states with applicable comprehensive privacy laws have the rights described in Section 8 of this Policy, in addition to any state-specific rights provided under their respective statutes. We honor all such rights to the fullest extent required by law. If you are uncertain about your rights, please contact us at the address provided in Section 16.
16. Contact Information and Privacy Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please contact us:
- Privacy Officer
- Kyan Chiang, Appli Solutions
- info@applisolutions.com
- Mailing Address
- 72 Burling Pl, Newmarket, ON L3Y 5W4, Canada
- Online Form
- Privacy Rights Request Form
For complaints regarding our compliance with PIPEDA, you may also contact the Office of the Privacy Commissioner of Canada at 30 Victoria Street, Gatineau, Quebec K1A 1H3, or at 1-800-282-1376. For complaints regarding provincial privacy laws, you may contact the applicable provincial or territorial privacy commissioner.
17. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. When we make material changes to this Policy, we will: (a) update the “Last Updated” date at the top of this Policy; (b) post a prominent notice on the Platform; (c) send you an email notification at the email address associated with your account at least thirty (30) calendar days before the changes take effect (to the extent required by applicable law); and (d) where required by applicable law, obtain your consent to the changes before they take effect. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the changes. If you do not agree with any changes, you must discontinue use of the Platform and delete your account.
18. Governing Law and Dispute Resolution
This Privacy Policy and any disputes arising out of or related to this Policy or our data practices shall be governed by and construed in accordance with the laws of the jurisdiction in which you reside, to the extent that such laws provide mandatory protections that cannot be waived by contract. Nothing in this Policy shall be construed to limit, restrict, or waive any rights you have under applicable privacy laws.
For users residing in Canada, you may file a complaint with the Office of the Privacy Commissioner of Canada or the applicable provincial privacy commissioner. For users residing in the United States, you may file a complaint with your state Attorney General or the Federal Trade Commission. Where permitted by applicable law, disputes may also be resolved through binding arbitration, as described in our Terms of Service, except that you shall not be required to arbitrate any claim arising under a state or federal privacy statute that prohibits mandatory arbitration.
19. Accessibility
We are committed to ensuring that this Privacy Policy is accessible to individuals with disabilities. If you require this Policy in an alternative format (such as large print, braille, or audio), please contact us at the address provided in Section 16, and we will provide it to you within a reasonable timeframe at no additional cost.
20. Severability
If any provision of this Privacy Policy is found to be unlawful, void, or unenforceable by a court of competent jurisdiction, that provision shall be severed from this Policy and shall not affect the validity and enforceability of the remaining provisions, which shall continue in full force and effect.
21. Entire Agreement
This Privacy Policy, together with our Terms of Service and any supplemental privacy notices provided at the time of data collection, constitutes the entire agreement between you and the Company with respect to the collection, use, disclosure, and processing of your Personal Information through the Platform. This Policy supersedes all prior and contemporaneous understandings, agreements, representations, and warranties, both written and oral, regarding the subject matter hereof.
© 2026 Appli Solutions. All rights reserved.