About This Privacy Policy
This Privacy Policy describes how GhostRecruiter, Inc. collects, uses, discloses, retains, and otherwise processes personal information through our website and recruiting platform. It also explains the privacy rights available to California consumers and how to exercise them.
GhostRecruiter provides recruiting software to employers. In some situations, an employer using GhostRecruiter determines why and how applicant information is processed. This example focuses on information practices for which GhostRecruiter is acting as a business under the CCPA. Customer-controlled processing would need to be analyzed separately based on the actual relationship and contract.
Last updated: September 26, 2026
Personal Information We Collect
During the preceding 12 months, GhostRecruiter collected the following categories of personal information. The examples below describe the fictional practices used for this sample.
| Category | Examples | Sources |
|---|---|---|
| Identifiers | Name, email address, account identifier, IP address | You, customer organizations, website and platform interactions |
| California customer-record information | Contact information and employment-related details | You and customer organizations |
| Protected classification characteristics | Demographic information when voluntarily provided or supplied through an authorized recruiting workflow | You or customer organizations |
| Internet or electronic activity | Login activity, device information, pages viewed, feature usage, security events | Your browser, device, and use of the service |
| Professional or employment-related information | Employment history, qualifications, job preferences, application materials | You and customer organizations |
| Inferences | Job-match or recruiting recommendations generated from application and professional information | Derived from information processed through the platform |
| Sensitive personal information | Account credentials and, in limited recruiting workflows, information that may reveal protected characteristics | You and customer organizations |
How We Use Personal Information
GhostRecruiter uses personal information to provide and secure accounts, operate recruiting workflows, support applications and communications, provide customer support, maintain and improve the service, detect fraud or misuse, comply with legal obligations, and generate recruiting recommendations where the customer has enabled those features.
This sample assumes GhostRecruiter has documented these purposes in its data inventory and has evaluated whether the collection, use, retention, and sharing are reasonably necessary and proportionate to the disclosed purposes.
Disclosure, Sale, and Sharing
GhostRecruiter discloses personal information to service providers and contractors that support cloud hosting, security, communications, customer support, and product operations. During the preceding 12 months, those disclosures included identifiers, customer-record information, internet or electronic activity, professional information, and other information needed to provide the contracted service.
For this fictional example, GhostRecruiter does not sell personal information and does not share personal information for cross-context behavioral advertising. GhostRecruiter therefore states that it has not sold or shared consumers' personal information during the preceding 12 months.
GhostRecruiter does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age.
For this example, GhostRecruiter uses and discloses sensitive personal information only for purposes permitted without offering a right to limit under section 7027(m), and does not use it to infer characteristics outside those permitted purposes.
Your California Privacy Rights
Subject to applicable exceptions, California consumers may have the right to know the personal information GhostRecruiter has collected about them, request deletion, request correction of inaccurate personal information, and receive equal service and pricing when exercising CCPA rights.
If GhostRecruiter's practices change so that it sells or shares personal information, uses sensitive personal information in a manner that creates a right to limit, or uses ADMT in a way that creates additional CCPA rights, this policy and the applicable request methods and notices would need to be updated.
How to submit a request
For this fictional example, consumers may submit a request through the GhostRecruiter Privacy Request Center or by emailing [email protected]. GhostRecruiter may ask for information needed to verify requests to know, delete, or correct. An authorized agent may submit a request on a consumer's behalf, subject to the CCPA's requirements for authorized-agent requests.
GhostRecruiter processes recognized opt-out preference signals as required by applicable law. Because this example assumes GhostRecruiter does not sell or share personal information, no sale/sharing opt-out is currently offered.
Retention
GhostRecruiter retains personal information only for as long as reasonably necessary for the disclosed purpose, subject to legal, security, contractual, and recordkeeping requirements. The Notice at Collection for each relevant collection context would state the intended retention period for each category or the criteria used to determine that period.
Questions About This Policy
For this fictional example, privacy questions may be sent to [email protected]. A production policy should provide a monitored contact method that reflects how the business primarily interacts with consumers.
What Makes This Audit-Ready?
The policy itself is only the visible artifact. A reviewer should be able to trace its statements back to the data inventory, vendor relationships, product configuration, request procedures, retention decisions, and approvals that support them. That traceability is what turns a polished notice into evidence of an operating privacy program.
Sources
- CCPA and regulations effective January 1, 2026, especially §§ 7010–7015.
- California Privacy Protection Agency, Laws & Regulations