At Workly, your career data and personal contact information belong exclusively to you. We strictly govern how candidate data is transmitted and stored.

1. Information We Collect

When you use Workly or submit an application through our direct modal, we may collect:

  • Candidate Contact Details: Full name, verified email address, phone number, and LinkedIn/portfolio URLs.
  • Application Documents: Resume/CV attachments, cover letters, and employment history submitted voluntarily.
  • Technical Telemetry: Anonymized browser headers, regional preference selections (US vs. UK), and theme toggle preferences (stored solely in your local browser storage).

2. How Your Information Is Handled

All candidate submissions made through our direct application pipeline are:

  • Transmitted securely using encrypted TLS 1.3 endpoints.
  • Routed exclusively to the verified employer hiring pipeline designated on the vacancy.
  • Never sold or leased: We do not monetize candidate data through third-party advertising networks, data brokers, or automated robo-calling lists.

3. Your Legal Rights (GDPR & CCPA)

Under UK GDPR and California Consumer Privacy Act (CCPA) regulations, job seekers possess the fundamental rights to:

  • Request full disclosure of any application records associated with their email address.
  • Request immediate deletion ("Right to be Forgotten") of submitted resume materials.
  • Withdraw consent at any time regarding ongoing job notification updates.

4. Data Retention Limits

Candidate submission logs and temporary uploaded artifacts are systematically pruned every 90 days to prevent redundant data retention.