Spark Privacy Notice for job seekers

Who we are

Employ Inc. is the controller of personal data processed in the Spark candidate portal. Spark is a product of Employ Inc..

This notice covers candidate self-registration, the owned profile, job discovery, applications you make through Spark, account closure, and contact suppression. It does not describe employer-controlled applicant files held in an employer's own ATS.

What we collect

When you sign up we collect your name and email address so we can create your account and send you a sign-in link. We may also store a phone number if you provide one.

When we build your owned profile we use information you have already given — application answers, and, if you upload one, text extracted from a resume. The structured profile you review (skills, work history, education, job preferences) is stored as your profile.

We also keep activity records about your use of the portal (for example profile edits, visibility changes, and erasure events) so we can show you that history and demonstrate what we did.

How we use this data

We use your account details to operate your Spark account: sign-in, application tracking, profile, job discovery, and messages we send about those activities.

The legal basis for creating the account is your consent — the participation disclosure you affirm at signup, which names this notice version.

Cross-employer profile visibility is a separate choice. We do not show your owned profile to other employers from signup or from a resume upload alone.

AI-assisted profile drafting

Spark can draft your owned profile with AI from your resume text and application answers. You can review and edit the draft. You own the profile that remains after you review it.

A model reads the resume text at extraction time. We send that text to a model provider to produce the structured draft. That is a processing activity this notice must describe, even when we do not keep the file.

Resumes you upload

If you upload a resume so we can fill your profile, the document is not kept. We do not store the file, and we do not store the resume text lifted out of it.

What we do keep after a successful upload is: the structured profile you reviewed, which file it came from (the filename), when you uploaded it, and a keyed value used only to recognise a repeat upload of the same file. That keyed value is retained; it is not the resume.

No employer sees the upload from the upload alone. Employer-facing visibility of your profile remains a separate consent.

Model providers

Resume text and application answers used to draft your profile are sent to a model provider at extraction time. The primary provider currently configured for this processing is OpenAI. The fallback provider currently configured is Anthropic. Anthropic may be unused in a given environment.

Not yet recorded, and therefore not claimed in this notice: the retention window at either provider, whether those providers train their models on this input, whether they support deletion of that input and on what latency, and whether Employ Inc.'s own model gateway stores prompt bodies. A later version of this notice will state those facts once they are recorded. Until then this notice does not assert a no-training term, a retention period, or a deletion right against those providers.

Closing your account

Closing a Spark account is access closure plus contact suppression. Records are retained. Storage of retained records is processing; this notice does not claim that we stop processing your data, and it does not claim that we delete everything we hold about you.

After closure, all of the following apply: you cannot log in; you cannot sign up again with the closed account's address; you cannot continue an already-authenticated session; we send no magic link to that address and you cannot redeem one already issued; you cannot redeem an outstanding claim invite; you receive no alert or lifecycle mail; you do not appear in discovery or search; you are excluded from prefill; you are excluded from the employer consented-profile view; and the address is suppressed.

We retain name, email, phone, and resume text stored on the candidate record, and the structured profile and activity history described above, because the intake provenance substrate is append-only by design. Retention here is the intended design.

How you ask us to close an account, who handles that request, and the time we take to complete it have not yet been published. They will appear in a later version of this notice when that request path is reachable. Until then, contact Employ Inc. as described below.

Suppressed addresses

Opting an address out of contact ends account access via that address. You will not receive emails at that address, including sign-in links. Any signed-in session using that address will end.

A suppressed address cannot be used to sign in or to sign up again during the alpha. Re-entry is by a different address. A suppressed address stays suppressed for the alpha; there is no unsuppression flow from that address.

Erasing your profile

Erasing your owned profile is not account closure. It deletes the structured profile we hold for you (skills, work history, education, and job preferences). That profile stays erased: opening the profile page again will not bring it back. Your activity record keeps the erasure event. You can rebuild a fresh draft from your application data when you choose to.

Account closure is the separate control described above.

Who we share data with

Employ Inc. operates the Spark candidate portal, including the model gateway that sends extraction requests to the providers named above.

We use a processor to deliver email (sign-in links, alerts, and other account mail). That processor receives the destination address and the message content needed to send the mail.

We do not sell your personal data.

How to contact us

The controller is Employ Inc.. A dedicated privacy-request address has not yet been published. Until it is, write to Employ Inc. through the contact details at employinc.com and name this notice (Privacy Notice version v1).

Do not treat that channel as a timed SLA. The request-path SLA for account closure has not yet been published.

Changes to this notice

When this notice changes, Employ Inc. publishes a new version at a new address. This version remains at /legal/privacy/v1. A consent grant records the disclosure you affirmed, which names the notice version in force at that moment.