TAPPEDIQ Privacy Policy

This Privacy Policy applies to:

1. Customers that use TAPPEDIQ;
2. Authorized users of Customer accounts, including owners, administrators, office users, managers, reviewers, and other role-based users;
3. Applicants, candidates, references, employees, contractors, or other individuals whose information is entered into or processed through TAPPEDIQ;
4. Visitors to TAPPEDIQ websites, landing pages, or related online services.

If you are an applicant or candidate, your information may be controlled by the company, brand, location, franchisee, employer, or organization to which you applied. In many cases, that organization determines what information is collected, why it is collected, how long it is kept, and how it is used in the hiring process.

TAPPEDIQ may act as a service provider, processor, contractor, or vendor for Customers that use the platform. In those cases, we process information on behalf of the Customer.

Customers are responsible for their own hiring decisions, applicant notices, employment practices, legal bases for processing, applicant communications, and compliance obligations.

For information that we collect directly for our own business purposes, such as account administration, billing, product security, support, website analytics, or marketing, HIT may act as the business or controller of that information.

We may collect the following categories of information.

A. Account and User Information

1. Name;
2. Work email address;
3. Phone number;
4. Employer or organization;
5. Role, title, user level, sub-role, permissions, brand access, location access, and applicant journey access;
6. Login credentials or authentication information;
7. Account status and user activity.

B. Applicant and Candidate Information

Customers or authorized users may enter, upload, or generate applicant information in TAPPEDIQ. This may include:

1. Name;
2. Contact information;
3. Position applied for;
4. Brand, location, or hiring unit;
5. Application status;
6. Applicant stage;
7. Interview notes;
8. Interview scores;
9. Shadow shift records;
10. Reference check notes;
11. Hiring manager feedback;
12. Approval or decline decisions;
13. Offer status;
14. Workflow history;
15. Compliance status;
16. Audit flags;
17. Documents or attachments uploaded by a Customer or applicant.

Customers should only collect and enter information that is appropriate, lawful, job-related, and necessary for the hiring process.

C. Workflow, Reporting, and Audit Information

1. Applicant journey history;
2. Task assignments;
3. Workflow completion status;
4. Time-to-hire data;
5. Interview, shadow, and reference outcomes;
6. Compliance percentages;
7. Open audit flags;
8. User actions;
9. Access logs;
10. Date and time stamps;
11. Changes to applicant records, guides, workflows, or permissions.

D. Support and Communications Information

1. Your name and contact details;
2. Message content;
3. Support requests;
4. Screenshots or files you provide;
5. Product feedback;
6. Bug reports;
7. Communications history.

E. Technical and Usage Information

1. IP address;
2. Device type;
3. Browser type;
4. Operating system;
5. Log data;
6. Session activity;
7. Pages or features accessed;
8. Error reports;
9. Security events;
10. Approximate location derived from IP address;
11. Cookies or similar technologies.

We may use information to:

1. Provide, operate, and maintain TAPPEDIQ;
2. Authenticate users;
3. Apply role-based access controls;
4. Display applicant, workflow, report, and audit information based on permissions;
5. Support applicant journey tracking;
6. Manage interviews, shadow shifts, references, approvals, and hiring workflows;
7. Generate reports, metrics, audit logs, and compliance indicators;
8. Provide customer support;
9. Troubleshoot bugs and performance issues;
10. Improve platform functionality, design, reliability, and security;
11. Protect against unauthorized access, misuse, fraud, or security incidents;
12. Enforce contracts and policies;
13. Process billing, subscriptions, and account administration;
14. Communicate about product updates, support, security, and administrative matters;
15. Comply with legal obligations.

TAPPEDIQ may include or later add features that summarize information, support scoring, identify workflow gaps, flag audit issues, provide recommendations, or assist with talent-related decision-making.

TAPPEDIQ does not make final employment decisions. Customers remain responsible for reviewing all relevant information and making human employment decisions.

Customers should not use TAPPEDIQ outputs as the sole basis for hiring, rejection, promotion, discipline, termination, or other employment decisions.

Customers are responsible for ensuring that their use of TAPPEDIQ is lawful, fair, job-related, appropriate, and non-discriminatory.

We may share information in the following ways.

A. With Customers and Authorized Users

Applicant and workflow information may be visible to Customer users based on assigned permissions, role, brand access, location access, applicant journey access, and workflow responsibilities.

B. With Service Providers

We may share information with service providers that help us operate TAPPEDIQ, such as hosting providers, database providers, authentication services, email providers, analytics providers, security tools, payment processors, customer support tools, and AI or automation providers.

These service providers are authorized to use information only as needed to provide services to us, unless otherwise permitted by law or contract.

C. With Third-Party Integrations

If a Customer enables integrations, we may share information with third-party systems selected or authorized by the Customer.

Customers are responsible for reviewing and approving integrations and understanding how third-party services process information.

D. For Legal, Security, or Compliance Reasons

We may disclose information if we believe disclosure is reasonably necessary to:

1. Comply with law, regulation, subpoena, court order, or legal process;
2. Protect the rights, safety, security, or property of HIT, Customers, users, applicants, or others;
3. Investigate fraud, misuse, unauthorized access, or security incidents;
4. Enforce contracts, policies, or terms;
5. Respond to lawful requests from public authorities.

E. Business Transfers

If HIT is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to appropriate protections.

We do not sell applicant or candidate information.

We do not use applicant or candidate information for third-party advertising.

If our practices change, we will update this Privacy Policy and provide any legally required notices or choices.

Customers are responsible for:

1. Providing legally required privacy notices to applicants, employees, references, and users;
2. Obtaining required consents or authorizations;
3. Ensuring that applicant information entered into TAPPEDIQ is lawful, accurate, appropriate, and job-related;
4. Configuring user permissions properly;
5. Reviewing access rights regularly;
6. Responding to applicant or employee privacy requests when legally required;
7. Setting and following data-retention rules;
8. Complying with employment, privacy, anti-discrimination, background-check, and recordkeeping laws.

We retain information for as long as reasonably necessary to provide TAPPEDIQ, support Customer accounts, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support audit or compliance needs.

Customers may configure, request, or require certain retention periods depending on their legal obligations and internal policies.

We may retain backup, audit, security, and system logs for a limited period after deletion from active systems.

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, disclosure, alteration, or destruction.

These safeguards may include access controls, authentication, permission-based visibility, audit logs, encryption where appropriate, monitoring, backups, and security reviews.

No method of transmission or storage is completely secure. Users and Customers are responsible for protecting credentials, limiting access, using secure devices, and promptly reporting suspected unauthorized access.

TAPPEDIQ websites and services may use cookies, local storage, pixels, analytics tools, or similar technologies to operate the service, remember preferences, authenticate users, improve performance, understand usage, and protect security.

You may be able to control cookies through your browser settings. Some features may not work properly if cookies are disabled.

Depending on where you live and the laws that apply, you may have rights to:

1. Request access to personal information;
2. Request correction of inaccurate information;
3. Request deletion of personal information;
4. Request a copy of personal information;
5. Object to or restrict certain processing;
6. Opt out of certain disclosures, sales, sharing, or targeted advertising where applicable;
7. Limit certain uses of sensitive personal information where applicable;
8. Appeal a denied privacy request where required by law.

If your information was submitted to TAPPEDIQ by a Customer, we may direct your request to that Customer or process it according to the Customer’s instructions.

To submit a privacy request, contact us at support@harnlyintertech.

This section applies to California residents where the California Consumer Privacy Act, as amended, applies.

We may collect the following categories of personal information:

1. Identifiers, such as name, email address, phone number, account credentials, and IP address;
2. Professional or employment-related information, such as employer, role, title, applicant status, hiring stage, interview notes, reference notes, shadow shift results, and hiring workflow records;
3. Internet or network activity, such as log data, device information, and platform activity;
4. Geolocation information, such as approximate location derived from IP address;
5. Inferences, such as workflow status, scoring outputs, compliance indicators, or report metrics;
6. Sensitive personal information, only if provided by a Customer or user and only as needed for lawful hiring, security, account access, or compliance purposes.

We collect and use these categories for the business and commercial purposes described in this Privacy Policy.

We do not sell applicant or candidate information. We do not use applicant or candidate information for cross-context behavioral advertising.

California residents may have rights to know, access, correct, delete, opt out, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights.

To exercise California privacy rights, contact support@harnlyintertech.

If the General Data Protection Regulation or similar data protection law applies, individuals may have rights to access, correct, delete, restrict, object to processing, request portability, or lodge a complaint with a supervisory authority.

Where we process information on behalf of a Customer, the Customer is usually the controller and HIT is usually the processor. In those cases, we assist the Customer as required by contract and applicable law.

Where HIT acts as controller, we process information based on legal bases that may include performance of a contract, legitimate interests, consent, legal obligations, or another lawful basis depending on the context.

TAPPEDIQ is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Customers should not use TAPPEDIQ to collect information from minors unless they have a lawful basis and any required parental, guardian, school, employment, or legal authorization.

TAPPEDIQ may allow Customers to document references, employment verification steps, background-screening workflow steps, or related hiring documentation.

Customers are responsible for complying with all applicable laws governing background checks, consumer reports, reference checks, adverse action notices, authorizations, disclosures, and record retention.

TAPPEDIQ does not act as a consumer reporting agency unless expressly stated in a separate written agreement.

Information may be processed and stored in the United States or other locations where HIT or its service providers operate.

If information is transferred across borders, we will use safeguards required by applicable law where necessary.

We may update this Privacy Policy from time to time. The updated version will be posted with a revised “Last Updated” date.

If we make material changes, we may provide additional notice as required by law or contract.

For privacy questions or requests, contact: