Candidate Data and Consent
This policy is part of the Terms of Service and explains the minimum requirements for candidate information in recruiter workflows.
Lawful basis and notice
Before submitting candidate information, you must have the candidate’s explicit permission or another lawful basis applicable to the specific recruiting purpose. You are responsible for providing required privacy notices and honoring the candidate’s choices.
Purpose limitation
Use candidate information only for a defined professional recruitment or candidate-marketing workflow. Do not build unrelated profiles, use sensitive characteristics for unlawful discrimination, or make a solely automated employment decision from MandateSignal output.
Data minimization and accuracy
Submit only information needed for the workflow. Avoid government identifiers, financial information, medical information, or other highly sensitive data. Review candidate information and generated recommendations for accuracy before outreach or disclosure.
Sharing and security
Limit access to authorized team members and recipients with a legitimate need. Do not publish, resell, or circulate candidate material as a general-purpose database. Use reasonable security and remove access when it is no longer needed.
Requests and incidents
Promptly honor valid access, correction, deletion, objection, or restriction requests unless law requires retention. Report suspected unauthorized access or disclosure to privacy@mandatesignal.com without undue delay.