Privacy

Information in Worth Finding

Depending on your role and the recruiting work involved, Worth Finding may hold account and sign-in details; candidate contact information, professional background, preferences, profile revisions, resumes, referrals, and consent choices; client and contact details, requisitions, and candidate nominations; and staff notes, matches, presentations, recruiting communications, decisions, and outcomes. A candidate record may exist without a candidate account.

The application also creates session and security records and limited operational logs and traces to support sign-in, service operation, and investigation of failures. These are separate from the authoritative recruiting history kept for the recruiting work.

Adults-only participation

Worth Finding is intended for adults age 18 and older. It is not intended for children or minors and does not intentionally solicit personal information from children. Worth Finding does not collect date of birth or a numeric age merely to enforce this participation rule.

How recruiting information is used

Worth Finding helps authorized recruiting staff understand candidate experience and preferences, work with client needs, make deliberate human match and presentation decisions, and preserve relevant recruiting history. It is not a public candidate directory. Private resume source documents are for internal review and are not shown to clients as resumes.

Worth Finding puts a candidate forward to a company, with a reviewed profile that leaves out the candidate’s name and contact details, only after the candidate has allowed anonymous profile sharing, and only for a specific role. Identifying information is disclosed only through the candidate consent process for the specific company and opportunity. A different company or a new recruiting episode requires a new consent decision. Turning off anonymous profile sharing stops further sharing through Worth Finding; it cannot recall what a company has already seen, and a name already shared stays with that company.

Service providers

Railway is the selected hosting platform, and PostgreSQL is the application database. The production email adapter is built for Resend. Resume storage currently uses a configured local storage directory; private object storage is tracked separately. Production region, database deployment, storage provider, Resend account and sending setup, and processing locations must be verified and reflected in the final notice before launch.

Transactional email sends recipient addresses and the message content needed to deliver account and recruiting workflow messages through the configured provider. The current product does not include email-open or link-click tracking.

The server can export privacy-minimized operational traces when a deployment configures an OpenTelemetry collector. No production collector or retention arrangement is established by this repository, so that deployment choice also needs review before launch.

Cookies and tracking

The current application uses first-party cookies for signed-in sessions, security checks, account recovery and verification, invitations, and carrying a referral into candidate registration. These support account and recruiting workflows.

No browser-based web analytics, advertising tags, or cross-site advertising trackers are included in the current application code. The product does retain internal recruiting history and operational traces; those are not browser analytics cookies. The deployed site and hosting configuration must be checked before launch to confirm they match this tracking decision. The current product does not show a cookie-preference banner because it does not include nonessential browser tracking.

Account deactivation and retention

Deactivating an account stops that account’s ordinary access; it does not delete the account, candidate or client associations, or historical recruiting records. Worth Finding preserves recruiting history as part of its operating model. Exact retention periods, deletion eligibility, and legal-hold rules have not yet been finalized, so this page does not promise a deletion timeline or physical erasure.

Privacy questions and requests

A public privacy contact has not yet been configured. The Contact page records that launch requirement; it does not yet accept a privacy request. A real contact method and request-handling process must be confirmed before production launch.