Privacy Policy

Last Updated: 2/25/25

1. Regulatory Compliance

GDPR (General Data Protection Regulation)

Legal Basis for Processing

We process personal data under the following legal bases:

Consent
Contractual necessity
Legal obligations
Legitimate interests

Data Subject Rights

Users have the following rights under GDPR:

Right to access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object
Rights related to automated decision-making

Cross-Border Data Transfers

We ensure international data transfers comply with applicable regulations by implementing safeguards such as, depending on the jurisdiction and nature of the data transfer:

Standard Contractual Clauses (SCCs)
Data Protection Agreements (DPAs)
Binding Corporate Rules (BCRs)

CCPA (California Consumer Privacy Act) Rights

California users have the right to:

Know what personal information is collected
Delete personal information
Opt out of the sale of personal information
Non-discrimination for exercising CCPA rights

Categories of personal information collected, sold, or disclosed for business purposes in the past 12 months include:

Identifiers (e.g., name, email, phone number)
Professional or employment-related information (e.g., job history, resume details)
Technical and usage data (e.g., IP addresses, device identifiers, browser activity)
Financial information (e.g., payment details, where applicable)
Geolocation data (e.g., approximate location based on IP address)

For a full breakdown, refer to our [Data Collection Disclosure].

PIPEDA (Canada)

We comply with PIPEDA’s principles of fair information practices, including:

Consent requirements
Access and correction rights
Canadian data protection compliance measures

2. Website Technical Privacy Elements

Cookie Policy

Types of Cookies Used

Essential cookies (required for site functionality)
Functional cookies (enhance user experience)
Analytics cookies (track site usage and performance)
Advertising/tracking cookies (used for marketing)

Users can modify cookie settings through their browser and opt out of third-party tracking.

Web Tracking Technologies

We use:

Web beacons
Pixels
Local storage
Device fingerprinting

We honor Do Not Track (DNT) signals where applicable.

3. Data Collection and Use

We collect and process data for the following purposes:

Recruitment Services: Candidate sourcing, screening, matching, and employer connections.
AI & Automation: Enhancing iRocket Careers’ job-matching algorithms and recruitment efficiency.
Community Engagement: Facilitating participation in iRocket.Community, networking, and mentorship programs.
Venture Studio Access: Providing users with access to funding, business development resources, and mentorship opportunities.
User Experience Improvements: Collecting feedback and behavioral data to enhance platform functionality and usability.
Marketing & Outreach: Delivering personalized job recommendations, industry insights, and event invitations to users who opt-in.

Users who opt into iRocket.Careers may interact with forums, mentorship programs, business-building resources, and exclusive networking events.

4. Security Measures

We implement industry-leading security measures:

Encryption: AES-256 encryption for stored data, TLS 1.2+ for data transmission.
Zero-Trust Access Controls: Role-based restrictions, multi-factor authentication (MFA).

Regular Audits: Periodic penetration testing and vulnerability assessments.

5. Automated Decision-Making

While iRocket.Careers may assist in candidate screening through automation, all hiring decisions ultimately involve human oversight to ensure fairness and compliance with relevant laws and industry best practices.

Users may request a human review of any automated decision if they believe it was made in error or does not fully consider their qualifications.
Users have the right to opt out of automated decision-making processes and request alternative evaluation methods.
Automated systems may be used for resume parsing, initial screening, and job matching, but final hiring decisions are always reviewed by human recruiters or employers.
iRocket.Careers continuously monitors and refines automated processes to improve accuracy and reduce bias in recruitment.

6. Data Retention Policy

Candidates: Data retained for 24 months of inactivity, then deleted or anonymized.
Employers & Partners: Business transaction data retained for up to 7 years for tax/legal compliance.

7. Children's Privacy

Our services are not intended for individuals under 16.
iRocket Careers accounts for students require parental or institutional consent when applicable for users under 16 years old.

8. Marketing & Communication Consent

Users must explicitly opt in through their account settings, sign-up forms, or other consent mechanisms to:

Marketing emails
Event invitations
Venture-building resources
Job opportunity notifications
Networking and mentorship opportunities
Exclusive webinars and industry insights
Updates on new platform features and tools

Additionally, if a user applies for a job posted by a client through iRocket Careers, they may receive an invitation via email to join iRocket Careers and complete their profile to enhance their job-seeking opportunities.

Users may customize preferences or unsubscribe at any time.

9. Third-Party Services & Social Media Integration

If users log in via social platforms, data is only used for authentication.
iRocket.Community interactions are private to members and not publicly indexed.
Data processing agreements (DPAs) are maintained with all third-party service providers.

10. Dispute Resolution & Governing Law

Disputes will first be handled through direct negotiation, with both parties making reasonable efforts to resolve the issue within 30 days before escalating to mediation or arbitration.
If unresolved, users may pursue mediation or arbitration before litigation.
Governing law: San Diego County, California.

11. Contact Information & Privacy Requests

Privacy Request Submission: Online form, email, or postal mail.

Regulatory Authority Contact: EU supervisory authority, California Attorney General, or other applicable agencies.

12. Changes to This Privacy Policy

Users will be notified of changes via email or platform updates.
Material changes require explicit user consent where applicable.
Previous versions will be archived for transparency.