Privacy Policy

1. Introduction

Drafted Labs, Inc. ("Drafted," "we," "us," or "our") is committed to protecting the privacy and security of all personal information entrusted to us. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, use our platform, or engage with our services, including our AI-powered talent matching and contributor sourcing platform (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not use our Services.

2. Information We Collect

2.1 Information You Provide

We may collect the following information when you register, create a profile, or use our Services:

• Name, email address, phone number, and other contact information
• Educational information, including university affiliation, degree program, and graduation year
• Professional information, including work experience, skills, and qualifications
• Video profiles, resumes, and other application materials
• Assessment results, evaluation scores, and task performance data
• Payment and billing information
• Communications you send to us or through our platform

2.2 Information Collected Automatically

When you access our Services, we may automatically collect:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed, referring URLs)
• Usage data (features used, interactions, search queries)
• Cookies and similar tracking technologies

2.3 Information from Third Parties

We may receive information from partner universities, educational institutions, identity verification services, and other third-party sources to verify credentials and enhance our Services.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our Services
• Match candidates with relevant opportunities based on skills, qualifications, and preferences
• Verify educational credentials and university affiliations
• Process assessments, evaluations, and contributor tasks
• Communicate with you about your account, updates, and opportunities
• Process payments and fulfill contractual obligations
• Analyze usage patterns and improve our AI matching algorithms
• Ensure platform security and prevent fraud
• Comply with legal obligations

4. Data Protection & Proprietary Information

All candidate data, including but not limited to profiles, video submissions, assessment results, and university-sourced information, is treated as proprietary and confidential. This includes data pertaining to university students and early-career professionals sourced through our partner institution network.

We implement industry-standard technical and organizational security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Access controls and role-based permissions
• Regular security audits and vulnerability assessments
• Secure cloud infrastructure with enterprise-grade providers
• Employee training on data protection practices

Candidate data is never sold to third parties. Access to candidate information is limited to authorized employers and clients with a legitimate business need, and only in connection with active hiring or engagement opportunities on the platform.

5. Sharing of Information

We may share your information only in the following circumstances:

• With Employers and Clients: Candidate profiles and relevant information may be shared with verified employers and clients actively seeking talent through our platform, solely for recruitment and engagement purposes.
• Service Providers: We engage trusted third-party vendors to perform services on our behalf (e.g., hosting, analytics, payment processing), subject to confidentiality obligations.
• University Partners: We may share aggregated, anonymized data with partner universities for program improvement purposes. Individual candidate data is not shared without explicit consent.
• Legal Compliance: We may disclose information as required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction, subject to continued privacy protections.

6. University Student Data

Drafted places special emphasis on protecting data from university students and early-career professionals. We recognize the sensitivity of educational records and career information for individuals entering the workforce. Accordingly:

• Student data sourced through university partnerships is subject to additional access restrictions and oversight.
• We comply with applicable educational privacy regulations, including FERPA where applicable.
• Students retain the right to request deletion of their data at any time.
• University-sourced data is never used for purposes unrelated to career opportunities and talent matching.
• We maintain data processing agreements with partner institutions to ensure consistent privacy standards.

7. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request a portable copy of your data in a structured, machine-readable format.
• Opt-Out: Opt out of marketing communications at any time by following unsubscribe instructions or contacting us.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, please contact us at privacy@joindrafted.com.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver relevant content. You can manage your cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of certain features.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When data is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

Candidate profiles remain active for as long as the account is maintained. Inactive accounts may be archived or deleted after 24 months of inactivity, with prior notice to the account holder.

10. International Data Transfers

Our Services are primarily operated in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. We take appropriate measures to ensure that international transfers comply with applicable data protection laws.

11. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected information from a child under 16, we will take steps to delete such information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.