Privacy Policy for Candidates

Effective as of December 16, 2025

This Candidate Privacy Policy describes how Love Thy Recruiting, Inc. (“Pin”, “Pin.com”, “we”, “us”, “our”) handles personal information that we collect about Candidates (“Candidate”, “Candidates”, “you”) through our website.

Personal information we collect

Pin collects personal information directly and from third parties to collect profiles, resumes, and other CV information from publicly available sources to provide to our customers.

The information we collect about you includes:

• Contact data, such as your first and last name, professional title, organizational affiliation, email address, and phone number.

• Location data, such as your city, state, and country you currently reside in or have resided in the past.

• Employment data, such as employment history including job titles, companies, dates of employment, descriptions of duties, and other information you make publicly available.

• Education data, education history including school names, degrees, dates of attendance, and other information you make publicly available.

• Social media profiles, such as your LinkedIn, Twitter/X, GitHub, and other social media profiles you make publicly available.

• Inferences drawn from the information we collect, such as your inferred skills or years of experience.

We do not collect any sensitive personal information such as biometric data, health data, or other information that is considered protected under federal or state law you reside in.

We do not collect data from websites that have been designated as private.

How we use your information

We may use your personal information to help our customers, including hiring companies, recruiting firms, and employers, identify and contact you about current or future job opportunities. This may include sharing the information we collect about you, as described in the Personal information we collect section.

We may also use your personal information in a aggregate and anonymized form for any purpose including but not limited to research and marketing purposes.

California privacy rights notice

This section describes how we collect, use, and share Personal Information of California residents and their rights with respect to that Personal Information. For purposes of this section, the term “Personal Information” has the meaning given in the California Consumer Privacy Act (“CCPA“) but does not include information exempted from the scope of the CCPA.

Your California privacy rights. California residents have the rights listed below under the CCPA. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

Exercising your right to information, access and deletion. You may submit requests to exercise your right to information, access or deletion here or via email to [email protected].

We will need to verify your identity to process your information, access and deletion requests and reserve the right to confirm your California residency. To verify your identity, we may require government identification, a declaration under penalty of perjury or other information. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

Your authorized agent may make a request on your behalf upon our verification of the agent’s identity and our receipt of a copy of a valid power of attorney given to your authorized agent pursuant to California Probate Code Sections 4000-4465. If you have not provided your agent with such a power of attorney, you must provide your agent with written and signed permission to exercise your CCPA rights on your behalf, provide the information we request to verify your identity, and provide us with confirmation that you have given the authorized agent permission to submit the request.

Personal information that we collect, use and disclose. The chart below summarizes the Personal Information we collect by reference to the categories of Personal Information specified in the CCPA (Cal. Civ. Code § 1798.140), and describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. The terms in the chart refer to the categories of information, sources, purposes and third parties described above in this Privacy Policy in more detail.

EU Users

The General Data Protection Regulation or “GDPR” gives certain rights to individuals in the European Union in relation to their personal data. As available and except as limited under applicable law, the rights afforded to individuals are:

• Right of Access - the right to be informed of and request access to the personal data we process about you;

• Right to Rectification - the right to request that we amend or update your personal data where it is inaccurate or incomplete;

• Right to Erasure - the right to request that we delete your personal data;

• Right to Restrict - the right to request that we temporarily or permanently stop processing all or some of your personal data;

• Right to Object - the right, at any time, to object to us processing your personal data on grounds relating to your particular situation;

• Right to object to your personal data being processed for direct marketing purposes;

• Right to Data Portability - the right to request a copy of your personal data in electronic format and the right to transmit that personal data for use in another party’s service; and

• Right not to be subject to Automated Decision-making - the right to not be subject to a decision based solely on automated decision making, including profiling, where the decision would have a legal effect on you or produce a similarly significant effect.

You can exercise your GDPR rights by contacting us at [email protected].