Privacy Policy

This Privacy Policy ("Policy") describes how WorkerSpring ("we," "us," or "our") collects, uses, protects, and discloses your Personal Information when you use our website, mobile app, and related services (collectively, the "Sites"), or when you communicate with us. This Policy also explains how we handle Google user data when you sign in or connect via Google services.

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We only use Google user data to provide or improve user-facing features that are prominent in the app's user interface and that are reasonably expected by you. We do not use or transfer Google user data for advertising, profiling unrelated to employment or networking functionality, or any form of data monetization.

We may occasionally update this Policy. Any updates will be posted on this webpage, and if we change how we use Google user data, we will notify you via in-app notifications or email. Your continued use of the Sites after such updates constitutes acceptance of the revised Policy.

When we refer to "Personal Information" in this Policy, we mean information that identifies, relates to, describes, or is reasonably capable of being linked to a specific person. Personal Information does not include information that is publicly available through government records or information that has been anonymized ("Anonymized Data") so that it cannot be used to identify a specific individual.

For clarity, when we refer to "Google User Data" in this Policy, we mean any personal data originating from or associated with your Google account, including but not limited to your Google profile information (e.g., name, email address), authentication tokens, or other data accessed via Google APIs (e.g., Google Sign-In or Google Calendar API).

We collect Personal Information to facilitate purchases, provide the Sites, and conduct our business operations. Depending on how you use the Sites, we may collect the following categories:

• Identifiers: Name, zip code, telephone number, email address, IP address, unique device identifier, cookie ID, browser type, ISP, operating system, and visit date/time.
• Commercial Information: Content of texts or emails you send to us, pages you click on, and time spent on the Sites.
• Internet Activity: Browsing history, search history, and information regarding your interaction with the Sites or advertisements.
• Geolocation Data: Imprecise location information, like city, state, and ZIP code associated with your IP address.
• Employment Information: Professional or employment-related information, including resume uploads.
• User Generated Information: Blog posts, feedback, comments, photos, videos, messages, social media, and other user-generated content.
• Other information you provide to us.

Specific Disclosures on Google User Data Collected by Our Application

Our mobile app, WorkerSpring Events Calendar, may access and collect the following Google user data only with your explicit consent:

• Basic Profile Information: Name, email address, and profile picture from your Google account.
• Authentication Data: Access tokens to verify your identity and enable secure login.
• Limited Contacts (if permitted): Email addresses from your Google contacts, only to facilitate job referrals or networking features.
• Calendar Data: Event details from your Google Calendar, accessed solely via the Google Calendar API to support event scheduling and reminders.

We do not collect sensitive Google user data such as precise location history, search history, YouTube activity, or Google Drive contents unless directly relevant to a specific feature you enable.

How Do We Collect Personal Information?

A large portion of the Personal Information we collect is collected directly from you. We may also collect from:

• Online Accounts: When you create a WorkerSpring account.
• Employment Information: When you input or upload your employment history.
• Communications: When you communicate with us via email, mail, webform, text, or phone.
• Offers and Promotions: When you sign up for previews, offers, or promotions.
• Site Visits: When you visit and use our Sites.
• Newsletters: When you sign up for our newsletters.
• Ratings and Feedback: When you provide ratings or feedback.

What Information Do We Collect Automatically?

We may automatically collect certain information about your use of the Sites via cookies and other tracking technologies. See Section 7 for more details.

What Information Do We Collect from Third Parties?

• Other Users: Community Organizations, Groups, Employers, or other WorkerSpring users you interact with.
• Service Providers: Third parties used to deliver marketing communications.
• Analytics Providers: Third parties helping us understand site demographics and usage.
• Login Services: Facebook, Apple, or Google single sign-on, limited to the Google user data described above.

• Servicing Your Account: To register and service your account.
• Customer Service & Communications: Sending alerts, job applications to employers, and community updates.
• Providing Requested Services: Completing job applications, network joining requests, and other services.
• Perform Analytics: To improve content, user experience, site administration, and fraud prevention.
• Manage the Sites: To operate, troubleshoot, and improve functionality.
• Improving Products & Services: To develop new offerings and improve existing ones.
• Business Purposes: Fulfilling contracts, fraud prevention, statistical analysis, and other permitted purposes.
• Law Enforcement / Legal Purposes: Complying with legal requirements and protecting rights.

Specific Disclosures on How Our Application Uses Google User Data

We use Google user data exclusively to provide and improve the core functionality of our app:

• Authenticating your login to create a seamless user experience.
• Personalizing job recommendations based on your profile.
• Facilitating networking features using limited contact data (with your consent).
• Integrating calendar events via the Google Calendar API to schedule job-related reminders and networking events.

We do not use Google user data for targeted advertising, remarketing, creating advertising profiles, or any form of data monetization.

• Service Providers: For data hosting, payment processing, and fraud protection.
• Other Users: At your direction, such as Community Organizations or Employers.
• Parties to Business Transactions: In the event of a merger, acquisition, or sale of assets.
• Government and Law Enforcement: When required by law or legal process.
• Any other third party to whom you consent.

Specific Disclosures on Sharing Google User Data

• With Employers, Community Organizations or Groups: Basic profile information when you apply for jobs or join networks.
• With Service Providers: Authentication data for secure login; calendar data for event integration only.
• In Business Transactions: Only with successors who agree to uphold equivalent protections.

We do not sell Google user data to third parties or transfer it for advertising, marketing, or unrelated commercial purposes.

• Encryption: All data in transit is encrypted using TLS 1.3; data at rest is encrypted with AES-256.
• Access Controls: Role-based access with multi-factor authentication required.
• Security Audits: Regular third-party audits and SOC 2 compliance.
• Anonymization: Where possible, we anonymize data for analytics.
• Breach Response: Affected users and authorities notified within 72 hours as required by law.

For Google user data, we adhere to Google's API Services User Data Policy, using scoped permissions and minimizing data retention, in compliance with the Limited Use requirements.

• General Retention: Account data retained while active; employment information kept 3 years post-activity, then anonymized.
• Google User Data: Deleted immediately upon account deletion or revocation of Google permissions. Inactive data purged after 12 months. All Google user data deleted within 30 days of disconnection unless required by law.
• Deletion Requests: Email privacy@workerspring.com; processed within 30 days, subject to legal holds.

Cookies and Tracking Technologies

We may use first-party and third-party cookies, pixels, and other web technologies to collect anonymized data on user trends, demographics, and engagement. You can learn more and manage cookies at allaboutcookies.org.

For Google-specific tracking, manage permissions via myaccount.google.com.

Analytics Services

• Google Analytics & Tag Manager: Used to learn how visitors navigate and view content.
• Zoho: Used to measure traffic, usage trends, session data, and demographics.

Opt Out of Marketing Communications

• Click the "unsubscribe" link in any marketing email.
• Update your preferences in your account settings.
• Contact us at privacy@workerspring.com.

Your Rights Regarding Your Data

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your Personal Information. Contact us at privacy@workerspring.com. We respond within 30 days.

Residents of California, Colorado, Connecticut, Utah, and Virginia may have additional rights including data portability and the right to opt out of targeted advertising. To appeal a decision, email us with "Privacy Appeal" in the subject line.

We will not discriminate against you for exercising any of your privacy rights under applicable law.

We may use Personal Information to create anonymous aggregate data that describes users as a group but does not reveal individual identities. Anonymized Data helps us understand user needs, demographics, and usage patterns, and to improve our products and services. We may disclose Anonymized Data for any lawful purposes.

Our Sites are not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect Personal Information from children. If we learn we have, we will delete it promptly, consistent with applicable laws such as COPPA.

If you are outside the U.S., your data may be transferred to and processed in the U.S., where laws may differ. We use Standard Contractual Clauses for EU data transfers.