Privacy Policy

1. Introduction

LAYAworks (“LAYAworks,” “we,” “us,” or “our”) operates a recruiting technology platform that connects job applicants with employers. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website, mobile application, and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account & Profile Information: Name, email address, phone number, mailing address, and other contact details.
• Application Data: Work history, availability, schedule preferences, transportation information, pay expectations, and responses to application questions.
• Communication Preferences: Your choice to opt in or out of SMS and email notifications.
• Employer Information: Company name, business address, roles, and recruiting preferences provided by employer users.

2.2 Information Collected Automatically

• Device & Browser Data: IP address, browser type, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, features used, timestamps, and interaction patterns.
• Cookies & Similar Technologies: We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

2.3 Information from Third Parties

We may receive information from third-party services that you authorize (e.g., calendar integrations for interview scheduling). We only collect information necessary to provide the Service.

3. Google Sign-In & OAuth Data

LAYAworks allows users to sign in and connect accounts using Google (“Sign in with Google”). This section explains exactly what data we receive, how we use it, and the limits on that use.

3.1 Data Received from Google

When you authenticate via Google Sign-In, Google provides us with:

• Your name
• Your email address
• Your Google profile photo
• A unique Google account identifier used to link your Google account to your LAYAworks account

If you additionally authorize a Google Calendar integration, we may access calendar identifiers, availability and busy/free information, and interview-related event metadata as necessary to provide scheduling features.

3.2 How We Use Google User Data

Google user data is used only to:

• Authenticate your identity and create or access your LAYAworks account.
• Display your name and profile photo within the Service for account identification.
• Enable calendar features you have explicitly authorized (e.g., scheduling conflict checking, interview event creation).
• Maintain and secure your connected integration at your direction.

3.3 Revoking Google Access

You may disconnect your Google account from LAYAworks at any time through your account settings, or by revoking access directly in your Google account permissions at myaccount.google.com/permissions. If access is revoked, Google Sign-In and any connected calendar features will stop working. We may retain limited records related to the integration where required for security, audit, or legal compliance purposes.

4. AI Services and Automated Processing

LAYAworks may offer AI-assisted features to support recruiting, scheduling, search, drafting, summarization, and related workflow functions. When those features are used, LAYAworks may process relevant inputs through third-party AI service providers, including Anthropic's Claude and OpenAI's ChatGPT.

4.1 Data Processed Through AI Services

• Workflow Inputs: Prompts, instructions, notes, job descriptions, application materials, interview details, scheduling context, and similar content submitted to or generated within the feature you use.
• Account and Configuration Data: Limited workspace, user, role, and configuration data needed to return the requested output in the correct account context.

If an AI-enabled workflow includes data from a connected service you authorized, including Google integrations, we limit the data sent to what is reasonably necessary for that workflow and subject to the restrictions described in Section 3 above.

4.2 How We Use AI Services

• Generate or revise recruiting and workflow-related content at your direction.
• Summarize, classify, or analyze job, applicant, interview, or scheduling information to support platform features.
• Power conversational, search, or recommendation experiences within the Service.

4.3 Provider Role and Restrictions

We use AI providers only as service providers acting on our behalf to deliver the features you or your organization request. We do not sell personal information to these providers, and we do not permit them to use our data for their own independent marketing purposes. We require appropriate contractual, security, and access controls consistent with the role those providers perform for the Service.

5. How We Use Your Information

We use the information we collect to:

• Process and manage job applications on behalf of employers.
• Match applicants to relevant job opportunities.
• Send transactional messages including application status updates, interview reminders, scheduling confirmations, and one-time verification codes via SMS and email.
• Provide customer support and respond to inquiries.
• Improve and optimize the Service.
• Enforce our Terms of Service, prevent fraud, and maintain security.
• Comply with legal obligations and regulatory requirements.

6. SMS / Text Messaging Program

When you provide your phone number and opt in to receive text messages from LAYAworks, you consent to receive the following types of SMS messages:

• One-time verification codes for identity confirmation.
• Application status updates (e.g., “Your application has been reviewed”).
• Interview scheduling confirmations and reminders.
• Hiring process notifications (offers, next steps, onboarding).

Supported carriers include but are not limited to AT&T, T-Mobile, Verizon, Sprint, and most major US and Canadian carriers. T-Mobile is not liable for delayed or undelivered messages.

7. How We Share Your Information

We share your personal information only in the following limited circumstances:

• With Employers: When you apply for a job through the Service, your application information is shared with the specific employer whose role you applied to. Your information is not shared with any other employer unless you separately apply to their roles.
• Service Providers: We use trusted third-party services to operate the platform (e.g., Twilio for SMS delivery, hosting providers for infrastructure, and AI service providers such as Anthropic and OpenAI for AI-enabled features). These providers only access your information as needed to perform services on our behalf and are contractually obligated to protect it.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect the rights, property, or safety of LAYAworks, our users, or the public.

8. Data Retention

We retain your personal information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Application data is retained for the duration of the hiring process and for a reasonable period afterward to support reapplication and compliance needs.

You may request deletion of your personal data at any time by contacting us. We will process your request within 30 days, subject to any legal retention requirements.

9. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Secure, httpOnly cookie-based authentication tokens.
• Cryptographic hashing of sensitive data such as verification codes.
• Rate limiting and brute-force protection on authentication endpoints.
• Tenant isolation to ensure employer data separation.

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Request deletion of your personal data.
• Opt out of SMS and email communications at any time (reply STOP or use the unsubscribe link).
• Withdraw consent for data processing, where consent is the legal basis.

To exercise any of these rights, please contact us using the information in Section 14. We will respond to your request within 30 days.

12. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the “sale” of personal information. We do not sell your personal information.
• The right to non-discrimination for exercising your CCPA rights.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. If we make material changes, we will notify you by posting a prominent notice on the Service or by sending you a notification. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: