This Privacy Policy explains how InPlaay Inc. (“InPlaay”, “we”, “us”) collects, uses, shares and protects personal information when you use the InPlaay website, apps and the InPlaay Chrome extension (together, the “Services”). It applies to everyone whose information we handle: candidates who use InPlaay, recruiters and employers who use InPlaay, hiring managers who open a link someone shares with them, and professionals who appear in recruiters’ search results without having signed up.
To help recruiters find people for jobs, we process professional information about people who may not use InPlaay: name, current and past job titles and employers, location, skills, education and public professional profile links. It comes from publicly available sources and licensed professional data providers. We don’t collect sensitive information such as health, religion or ethnicity, and we don’t buy personal email addresses or phone numbers. If you are one of these people, you have the rights in section 13, including the right to object and to have your information removed.
De-identified and aggregated information. We may create information that no longer identifies anyone (for example, the number of candidates interviewing for a type of role in a region) and use it for any lawful purpose, including market insights. We won’t try to re-identify people from it.
| Information | Who can see it |
|---|---|
| A candidate’s resume, preferences, fit assessments, gaps, tips and private notes | Only that candidate. Fit ratings, scores, gaps and private notes are never shown to employers. |
| A candidate’s job brief (their summary for one job and the resume they chose for it) | Anyone the candidate gives the private link to (for example, a hiring manager). The candidate can turn the link off at any time. |
| Candidates in a recruiter’s searches, with the recruiter’s notes and stages | Users in that recruiter’s workspace. |
| A candidate profile a recruiter shares by link | Anyone the recruiter gives the private link to, showing only the sections the recruiter chose. The recruiter can turn the link off. |
| Competitive insights | Candidates see anonymous counts only — never who the other candidates are (section 5). |
| Interview bookings | The candidate and the recruiter or employer who invited them. |
Service providers. We use trusted providers to run InPlaay on our behalf: cloud hosting and databases, AI model providers (to read resumes and job postings and write assessments), professional data providers, a payment processor, and email delivery. They may use your information only to provide their service to us, under contracts that require them to protect it. Our AI providers process it under business terms that don’t allow them to train their own models on it.
Other disclosures. We may disclose information if the law requires it, to protect the rights, safety or property of InPlaay or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.
We don’t sell personal information or share it for cross-context behavioural advertising.
You can connect a Google or Microsoft calendar. It’s your choice, and you can disconnect at any time from InPlaay or from your Google or Microsoft account settings. When you connect, we receive your calendar’s email address and read-only access to your calendar. We never create, change or delete events in your calendar; interview bookings reach you as calendar invitations by email.
Google API Services. InPlaay’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide and improve the calendar features described here, we don’t sell it or use it for advertising, we don’t use it to train general-purpose AI models, and people at InPlaay don’t read it except with your permission, for security, or where the law requires.
For some jobs, InPlaay shows a candidate how many other candidates are in the running — for example, “2 others are interviewing and 1 is at the final stage” — and InPlaay Pro candidates can get an email and in-app alert when another candidate’s interview is scheduled or someone reaches the final stage.
InPlaay uses AI to read resumes and job postings and to write fit assessments, summaries and outreach drafts. These are tools to help people decide — InPlaay does not make hiring decisions, and an employer’s decisions remain the employer’s. Assessments can be wrong or incomplete, especially when a resume leaves out experience someone has. You can ask us to correct information about you, and you can ask for a person to review an assessment about you.
The extension has one purpose: to send outreach messages on LinkedIn that you prepared in InPlaay, from your own LinkedIn account, when you ask it to — recruiters messaging candidates, and candidates messaging hiring managers.
Where the GDPR or UK GDPR applies, we rely on: contract (to provide the Services you signed up for); legitimate interests (to help recruiters find professionals for jobs, show anonymous competitive insights, keep InPlaay secure and improve it — balanced against your rights, which you can exercise by objecting); consent (calendar connections, marketing, and anything else we ask your permission for — you can withdraw it any time); and legal obligation. If you’re a professional in search results and object, we will stop processing your information unless we have compelling grounds that override your rights.
We protect information with encryption in transit (TLS), encryption at rest, access controls that keep each workspace’s data separate, restricted staff access, and monitoring. No system is perfectly secure; if a breach affects your information in a way that creates a real risk of significant harm, we’ll notify you and the authorities as the law requires.
InPlaay is based in Canada. Our service providers store and process information in Canada, the United States and other countries where they operate, which may have different privacy laws. When we transfer personal information out of the European Economic Area, the UK or Switzerland, we use recognized safeguards such as the European Commission’s Standard Contractual Clauses. Information held in another country may be accessible to that country’s authorities under its laws.
Depending on where you live (for example under Canada’s PIPEDA, Quebec’s Law 25, the GDPR, the UK GDPR, or US state laws such as California’s), you can ask us to:
Write to support@inplaay.com from the email address we have for you, or tell us which profile is yours. We may need to confirm your identity. We’ll respond within 30 days (or the time your local law sets), free of charge, and we won’t treat you differently for using your rights. You may also complain to your privacy regulator, such as the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, or your EU or UK data protection authority.
Privacy officer. The person responsible for personal information at InPlaay can be reached at support@inplaay.com.
In the last 12 months we collected these categories of personal information: identifiers (name, email, phone); professional and employment information; education information; inferences (fit assessments); internet activity (usage logs); approximate location (city and region); and, if you connect it, calendar information. We collect it from you, from recruiters and employers, from publicly available sources and licensed professional data providers, and from connected calendars, for the purposes in section 2. We disclose it to service providers for business purposes. We don’t sell personal information or share it for cross-context behavioural advertising, and we don’t knowingly sell or share information of anyone under 16. We don’t use sensitive personal information to infer characteristics about you. California residents can exercise the rights in section 13 and may use an authorized agent.
InPlaay is for people aged 16 and older who are looking for work or hiring. We don’t knowingly collect information from children under 16; if we learn we have, we’ll delete it.
We’ll post any changes here and update the date at the top. If a change is significant, we’ll tell you by email or in the app before it takes effect, and ask for your consent where the law requires.
Questions or requests: support@inplaay.com. InPlaay Inc., Ontario, Canada.