Privacy Policy

Last updated: June 2026

Plain-language summary: You sign in with your email. When you paste candidate information, you're the controller of that data and we process it only to give you results. We don't sell data. You can ask us to delete it. AI providers process inputs to generate outputs.

1. Roles: who controls what

For your own account information (your email and usage), SourcingNav is the data controller. For candidate and role information you submit ("Candidate Data"), you are the data controller and SourcingNav is your processor — we process Candidate Data only on your instructions, to provide the Service to you. You are responsible for having a lawful basis to process Candidate Data and for any notices or consents required from candidates.

2. What we collect

Account data: your email address, authentication tokens, plan, and usage counts.
Candidate Data you submit: the profile, resume, or notes text you paste, and the role information you create, plus the evaluations the Service generates from them.
Operational data: basic logs needed to run and secure the Service.

3. How we use it

We use account data to authenticate you and operate the Service. We use Candidate Data solely to generate the evaluations, strategy, and outreach you request. We may use aggregated, de-identified signals (for example, anonymized skill patterns stripped of personal identifiers) to improve the matching engine's accuracy; this calibration data does not identify any individual.

4. AI processing

To produce evaluations and drafts, the text you submit is sent to third-party AI model providers that process it to generate output. We use providers under terms that restrict use of your content to providing the service. We do not use your Candidate Data to train third-party foundation models.

5. We do not sell your data

We do not sell personal information, and we do not share Candidate Data with other users of the Service. One user's candidates never appear in another user's results.

6. Retention and deletion

Active records are retained while your account is active and you need them.
You may request deletion of any Candidate Data, or of your whole account, at any time by emailing hello@sourcingnav.com.
On deletion of a candidate record, we remove personal identifiers; we may retain de-identified skill signals that cannot reasonably be linked back to a person, consistent with GDPR Recital 26.

7. Your rights

Depending on where you and your candidates are located, data-subject rights may include access, correction, deletion, and objection (GDPR), and the rights to know, delete, correct, and opt out of sale/sharing (CCPA/CPRA). Because you are the controller of Candidate Data, candidate requests should generally come to you; we will assist you in fulfilling them as your processor. For your own account data, contact us directly.

8. Geographic scope

The Service is currently intended for U.S.-based use. If you process data about individuals in other regions, additional obligations may apply to you as controller, and you are responsible for meeting them.

9. Security

We use reasonable technical measures to protect data, including encrypted transport and access controls. No system is perfectly secure; we cannot guarantee absolute security.

10. Changes and contact

We may update this policy as the product develops; the "last updated" date reflects the latest version. Questions or requests: hello@sourcingnav.com.

This is a good-faith, plain-language privacy policy for a preview product. It is not legal advice. Before charging for the Service or processing data about non-U.S. individuals at scale, have it reviewed by a qualified privacy attorney and confirm your processor terms with your AI vendors.