ClubReq Privacy Policy

    Last Updated: July 1, 2026

    ClubReq respects your privacy. This Privacy Policy explains how we collect, use, and protect personal information when you use our platform.

    Data Controller vs. Data Processor

    For applicant and candidate data processed through our hiring workflows, the Employer using our platform is the "Data Controller" (determining how and why the data is used), and ClubReq acts strictly as the "Data Processor" on their behalf. For B2B professional data used for our own sales and marketing operations, ClubReq acts as the independent Data Controller.

    1. Information We Collect

    Information You Provide

    • Account information (name, email, company)
    • Job postings and interview scheduling information
    • Communications with applicants

    Information Obtained from Third Parties

    We may collect publicly available B2B professional data (such as business contact information) from third-party sources (e.g., Prospeo.io) based on legitimate interest for our own B2B outreach.

    Automatically Collected Information

    • Log and usage data
    • Device and browser information
    • Cookies and similar technologies

    2. How We Use Information

    As a Data Processor (Employer & Applicant Data)

    We use information only to:

    • Provide hiring and interview scheduling services
    • Facilitate communication between employers and applicants
    • Maintain platform security and reliability
    • Comply with legal obligations

    Note: We do not sell applicant data or use it for advertising.

    As a Data Controller (B2B Marketing Data)

    We use third-party B2B data strictly for CAN-SPAM compliant email outreach via isolated staging environments like Apollo.io. We maintain a strict "Air-Gap" architecture to ensure cold data is quarantined and NEVER injected directly into the core ClubReq database without explicit, user-initiated consent (Double Opt-In). ClubReq explicitly prohibits the sending of "cold" text messages to purchased, scraped, or unverified lists. All SMS outreach requires an explicit, verified digital opt-in timestamp.

    3. Calendar Integrations & API Data Use

    Supported Calendar Providers

    ClubReq integrates with third-party calendar services, including Google Calendar and Microsoft Outlook Calendar, to support interview scheduling features.

    Google API Limited Use Compliance

    ClubReq's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

    Purpose of Calendar Access

    When a user explicitly connects a calendar service, ClubReq accesses calendar data only to support interview scheduling initiated by the user.

    Specifically:

    Availability Access

    Calendar availability is accessed to identify open time slots and prevent interview conflicts and double-booking.

    Event Management

    Interview events are created, updated, or deleted only when initiated by the user within the ClubReq platform.

    ClubReq does not:

    • Create events automatically
    • Modify unrelated calendar events
    • Analyze calendar content beyond availability
    • Use calendar data for advertising, analytics, profiling, or resale

    4. Data Storage & Retention

    • Calendar Data: Calendar availability data is processed in real time and is not stored permanently.
    • Interview Metadata: Interview event metadata is retained only as long as necessary to support scheduled interviews or required operational records.
    • B2B Marketing Data: Any candidate or B2B contact residing in our staging area who does not engage with initial email sequences within 60 days, or who actively opts out, will have their data permanently purged. ClubReq honors all "Right to be Forgotten" requests immediately across all platforms.
    • Data is deleted upon account termination or user request unless legally required to retain it.

    5. Data Sharing

    ClubReq does not sell personal data.

    Calendar data accessed through Google Calendar or Microsoft Outlook Calendar is not shared with third parties and is used only within ClubReq to provide interview scheduling functionality.

    Mobile information, SMS opt-in data, and consent will not be shared with any third parties or affiliates for marketing or promotional purposes.

    6. User Control & Revocation

    Users may revoke ClubReq's access to connected calendar services at any time through their Google Account permissions, Microsoft Account permissions, or other applicable third-party settings.

    Revoking access immediately prevents further access to calendar data.

    7. Security

    ClubReq uses industry-standard safeguards, including:

    • Encryption in transit
    • Access controls limiting internal access
    • Monitoring for unauthorized activity

    8. Children's Privacy

    ClubReq is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without appropriate authorization, we will take steps to delete such information.

    8a. Site Analytics & Visitor Tracking

    We operate first-party session analytics on clubreq.com. When you accept our cookie banner, we set a random visitor identifier and record the pages you view, time on page, referrer, UTM parameters, browser, device, and an IP-derived country. We do not store your raw IP address, and we do not use third-party advertising pixels for this tracking.

    If you voluntarily submit a form (Blackbook, newsletter, support), the name, email, phone, and role you provide are linked to your visitor identifier so we can understand which pages led to your submission. You can request deletion at any time via privacy@clubreq.com.

    9. Changes to This Policy

    We may update this Privacy Policy periodically. Updates will be posted with a revised "Last Updated" date.

    10. Contact

    For privacy questions, data requests, or to exercise your "Right to be Forgotten":

    privacy@clubreq.com

    Version History

    July 1, 2026

    • Added Section 8a disclosing first-party site analytics: visitor cookie, page views, time on page, referrer, UTM, browser, device, IP-derived country, and identity stitching on voluntary form submission

    June 24, 2026

    • Added Data Controller vs. Data Processor distinction clarifying ClubReq's role for applicant data vs. B2B marketing data
    • Expanded "How We Use Information" with separate Data Processor and Data Controller subsections, including the Air-Gap architecture, CAN-SPAM compliance, and Double Opt-In SMS requirements
    • Added Data Storage & Retention section covering Calendar Data, Interview Metadata, and the 60-day B2B engagement purge rule
    • Added Data Sharing section confirming calendar data and SMS opt-in data are not shared with third parties
    • Updated Contact section to reference "Right to be Forgotten" requests

    December 30, 2025

    • Added Calendar Integrations & API Data Use section covering Google Calendar and Microsoft Outlook
    • Added Google API Limited Use Compliance disclosure
    • Added User Control & Revocation section for connected calendar services

    Initial Release

    • Initial publication of the Privacy Policy covering information collection, use, security, children's privacy, policy updates, and contact