Privacy Policy

This Privacy Policy explains how sonoeo (“sonoeo,” “we,” “us”) collects, uses, and shares information when you visit sonoeo.com, use the sonoeo dashboard, or verify a job application with the sonoeo app (together, the “Services”).

sonoeo serves two groups of people, and we describe each separately below:

• Customers: recruiters, talent acquisition teams, and other employer staff who use the sonoeo dashboard.
• Candidates: people applying for jobs who use the sonoeo app to confirm they are a real person.

1. Information we collect

From customers

• Account information: your name, work email address, and password. Passwords are handled by our authentication provider and are never stored by sonoeo in readable form.
• Organization information: your company name and email domain, the names, email addresses, and roles (admin or member) of people on your team, and invitations sent by your admins, including who sent them.
• Requisition information: job titles, optional internal requisition IDs, requisition codes, status, and verification counts.
• Applicant files you check: when you upload a CSV of applicants to check verification status, the file is read in your browser. Only the sonoeo verification codes found in the file are sent to our servers to check them. We do not upload or store the rest of the file, such as applicant names or email addresses.
• Communications: information you send us when you contact us for support or sales.

From candidates

• Verification information: the requisition code you enter in the sonoeo app, the verification code we issue to you, and when you verified.
• Information used to confirm you are a person: the information the sonoeo app asks for at the time you verify, as described in the app before you provide it.
• Device information: basic technical information from your device, such as app version, operating system, and IP address, used to operate and secure the app.

We do not need your résumé or application to verify you, and the employer's application is submitted through the employer's own systems, not through sonoeo.

From everyone

• Usage and log data: when you visit our website or use the Services, our hosting providers automatically record information such as IP address, browser type, pages requested, and the date and time of the request.
• Browser storage: the dashboard stores sign-in information in your browser so you stay signed in. We do not currently use advertising cookies or third-party analytics on our website.

2. How we use information

• To provide the Services, including creating requisition codes and confirming whether an application was verified by a real person.
• To create and secure accounts, including email verification.
• To enforce plan limits, such as the free requisitions available to each organization.
• To prevent fraud, abuse, and automated misuse of the Services.
• To respond to questions and provide support.
• To send service-related messages, such as verification and password reset emails.
• To maintain, troubleshoot, and improve the Services.
• To comply with law and protect the rights and safety of sonoeo, our customers, candidates, and others.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

3. How we share information

• With employers: when a candidate verifies for a requisition, we confirm to that employer that the candidate's verification code is valid for that requisition. A code only verifies for the requisition it was issued for.
• Within your organization: members of a customer organization can see that organization's requisitions and verification results.
• Service providers: companies that host and operate the Services for us, including Google Cloud and Firebase for hosting, authentication, email delivery, and data storage. They may only use the information to provide services to us.
• Legal and safety: when we believe disclosure is required by law, or necessary to protect the rights, property, or safety of sonoeo or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

4. Employers are responsible for their hiring data

Customers decide how to use verification results in their hiring process. Each employer's handling of your application is governed by that employer's own privacy notice. Questions about an application should go to the employer.

5. Data retention

We keep customer account and requisition information while the account is active and as needed to provide the Services. We keep verification records as long as needed to let employers check applications for the requisition and to prevent misuse. We may keep some information longer when required by law, to resolve disputes, or to enforce our agreements. When information is no longer needed, we delete or de-identify it.

6. Security

We use safeguards designed to protect information, including encryption in transit, email verification for dashboard accounts, and access rules that keep each organization's data separate. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You will not be discriminated against for exercising these rights.

To make a request, email hello@sonoeo.com. We may need to verify your identity before responding. If we process your information on behalf of an employer, we may refer your request to that employer. You may also have the right to complain to a data protection authority.

8. International transfers

sonoeo is based in the United States, and we process information in the United States and other countries where our service providers operate. Those countries may have different data protection laws than where you live. Where required, we use appropriate safeguards for these transfers.

9. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy here and change the “Last updated” date. If changes are material, we will provide additional notice, such as by email or in the dashboard.

11. Contact us

Questions about this Policy or our privacy practices? Email hello@sonoeo.com. See also our Terms of Use.