1. Introduction

Workscaler Inc., operating the Resumas platform at resumas.com ( “Workscaler,” “Resumas,” “we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or use our website (resumas.com), any associated mobile applications, and our career‑support, outplacement, and job‑seeker services (collectively, the “Services”).

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, you should not use the Services. This Privacy Policy works together with our California Privacy Policy, which provides additional disclosures and rights for California residents.

We comply with applicable privacy laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the California Online Privacy Protection Act (CalOPPA), Assembly Bill 947, and Senate Bill 446 (when effective).

“Personal Information” means information that identifies, relates to, describes, or could reasonably be linked with a particular consumer or household.

“Sensitive Personal Information” (“SPI”) means a subset of Personal Information defined under the CPRA, including, for example, government identifiers, financial account information, precise geolocation, health data, certain demographic information, and the contents of certain communications.

“Service Provider” and “Contractor” mean third parties that process Personal Information for us under written contracts that limit use to specified business purposes and prohibit selling or sharing the information.

“Sale” and “Sharing” of Personal Information have the meanings given in the CCPA/CPRA, including disclosure for monetary or other valuable consideration or for cross‑context behavioral advertising.

“Deidentified Data” means data that cannot reasonably be linked to a particular consumer or household when appropriate safeguards are maintained.

3.1 Information You Provide

We collect Personal Information you provide directly, such as:

• Account registration details (name, email, password, contact details, profile information).
• Resume/CV content, job history, skills, education, and career preferences.
• Information provided during career coaching, assessments, outplacement programs, and job‑search workflows.
• Billing and payment details (processed through PCI‑compliant third‑party processors; we do not store full card numbers).
• Communications you send to us (support requests, surveys, feedback, questionnaires, or forms).

3.2 Information Collected Automatically

When you use the Services, we automatically collect:

• Device data (type, OS, browser, device IDs, settings, and network information).
• Usage data (pages viewed, features used, links clicked, time on page, referral source, interaction patterns, and search queries).
• General location from IP address (e.g., city, region); precise location only if you explicitly enable it.
• Cookie and similar tracking data (see Section 3.4).

3.3 Information from Third Parties

We receive Personal Information from:

• Service providers (e.g., payment processors, email and analytics providers, hosting, and support tools).
• Business partners and integrations you authorize (e.g., productivity tools or job‑search platforms).
• Public sources or professional profiles where permitted by law.

3.4 Cookies and Similar Technologies

We use cookies, pixels, and similar technologies to operate and improve the Services, remember settings, analyze usage, and measure performance and campaigns.

You can manage cookies through your browser settings; disabling cookies may affect functionality (e.g., login persistence or personalization). We currently do not respond to “Do Not Track” browser signals but provide other opt‑out mechanisms described in this Policy and our California Privacy Policy.

We process Personal Information for:

• Service Delivery: Providing, operating, maintaining, and improving the Services; managing accounts, subscriptions, and billing; delivering career tools, outplacement services, and coaching.
• Communication: Responding to inquiries; sending transactional messages, security alerts, and important updates.
• Analytics and Improvement: Understanding usage, running experiments, improving features, training and tuning models (including in deidentified or aggregated form).
• Marketing (where permitted): Sending optional promotional communications you can opt out of at any time.
• Security and Fraud Prevention: Detecting and preventing fraud, abuse, security incidents, and system misuse.
• Legal Compliance: Meeting obligations under laws, regulations, court orders, and regulatory requests; enforcing our Terms and other agreements.

We rely on one or more of the following legal bases: performance of a contract, your consent (where required), legitimate interests (balanced with your rights), and compliance with legal obligations. Sensitive Personal Information is processed only where permitted by law or with your consent and only as necessary for specified purposes.

We use Personal Information to:

• Provide personalized career content (including AI‑generated suggestions and human coaching) based on your profile and inputs.
• Match or recommend opportunities, tools, or resources aligned with your stated goals, where supported by your data.
• Operate and secure our infrastructure and conduct troubleshooting, debugging, and incident response.
• Perform aggregated and deidentified analytics on usage, market trends, and career patterns, which do not identify individual users.

We maintain data retention schedules by category (for example, keeping account data for limited periods after closure and payment records for legally required durations). Details align with the retention table in your California Privacy Policy.

6.1 No Sale or Sharing for Cross‑Context Behavioral Advertising

We do not sell your Personal Information and do not share it with third parties for cross‑context behavioral or targeted advertising, as those terms are defined under California law. If this changes in the future, we will update this Policy and provide required opt‑outs and “Do Not Sell or Share My Personal Information” mechanisms.

6.2 Service Providers and Contractors

We disclose Personal Information to carefully selected service providers and contractors under written agreements that:

• Limit use to specified business purposes.
• Prohibit selling or using your data for their own marketing.
• Require appropriate security measures and assistance with privacy rights requests.

Typical categories include hosting, storage, payment processing, email and communication tools, analytics, customer support, and professional advisors (such as legal or accounting).

6.3 Business Transfers

If Workscaler is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, Personal Information may be transferred as part of that transaction. We will provide notice where required and outline choices you may have at that time.

6.4 Legal Requirements and Protection

We may disclose Personal Information where we believe it is necessary to:

• Comply with laws, regulations, legal process, or governmental requests.
• Enforce our Terms or other agreements.
• Protect the rights, property, or safety of our users, our company, or others.
• Detect, prevent, or address security, fraud, or technical issues.

7.1 Access, Deletion, and Correction

Depending on your location (including if you are a California resident), you may have rights to:

• Request access to Personal Information we hold about you.
• Request deletion of Personal Information, subject to legal exemptions.
• Request correction of inaccurate Personal Information.

You can also update some information directly in your account settings. Requests may be subject to verification steps to confirm your identity or authority. Response timelines and detailed rights for California residents are described in our California Privacy Policy.

7.2 Marketing Preferences

You may opt out of marketing emails at any time by using the “unsubscribe” link in those emails or by contacting us. We may still send important transactional or service‑related emails even if you opt out of marketing.

7.3 Cookies and Analytics

You can manage cookies and similar technologies via your browser or device settings, and may use opt‑out tools offered by some analytics providers. Disabling cookies may impact certain features or performance.

We use reasonable technical and organizational safeguards designed to protect Personal Information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These controls include encryption in transit, restricted access based on role, network security measures, vendor due diligence, and employee training.

No system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and notifying us promptly if you suspect unauthorized use of your account.

Where required by law (including California’s SB 446 when effective), we will notify you and, if applicable, regulators of certain data breaches within the timelines and with the content specified by law.

The Services are not directed to children under the age of 16, and we do not knowingly collect Personal Information from children under 16. If we learn that we have collected Personal Information from a child under 16, we will delete it and take appropriate steps to close any related accounts. If you believe this has occurred, please contact us using the details below.

The Services may contain links to third‑party websites, services, or integrations that are not owned or controlled by Resumas. This Privacy Policy does not apply to those third parties, and we are not responsible for their content, policies, or practices. You should review their privacy policies before providing them with Personal Information or connecting accounts.

When you connect a third‑party service to your Resumas account, we will access only the information you authorize and use it consistent with this Privacy Policy and any applicable integration description.

The Services are operated from the United States. If you access the Services from outside the United States, your Personal Information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your jurisdiction.

By using the Services, you consent to these transfers and processing activities as described in this Privacy Policy and our California Privacy Policy, to the extent permitted by applicable law.

If you are a California resident, additional rights and disclosures under the CCPA and CPRA apply, including the right to know, delete, correct, and, where applicable, limit use of Sensitive Personal Information, along with non‑discrimination protections when you exercise those rights.

Those California‑specific details—including categories of Personal Information collected, purposes, disclosures, and rights request procedures—are set out in our separate California Privacy Policy, which should be read together with this Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the “Last Updated” date at the top of this page and, where required, provide additional notice (such as by email or prominent in‑product notice).

Your continued use of the Services after an update becomes effective means you accept the updated Privacy Policy.

If you have questions about this Privacy Policy, our privacy practices, or your Personal Information, please contact:

Resumas / Workscaler Inc.
Attn: Privacy Team
717 K Street
Sacramento, CA 95814
Email: support@resumas.com

If you are a California resident and believe your rights under California privacy laws have been violated, you may also contact the California Privacy Protection Agency or the California Attorney General, as described in our California Privacy Policy.