Privacy Policy

1. Introduction

WIM Careers (“WIM,” “we,” “us,” or “our”), operated by WIM Ventures, LLC, a California limited liability company, is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our website at wimcareers.com and related services (collectively, the “Platform”).

This Privacy Policy complies with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA/CPRA”), the Texas Data Privacy and Security Act (“TDPSA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Oregon Consumer Privacy Act (“OCPA”), the Utah Consumer Privacy Act (“UCPA”), and other applicable federal and state privacy laws.

By using the Platform, you consent to the data practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• Name, email address, and password
• User type (professional or employer)
• Company/firm name (employer accounts)

Professional Profile Information:

• Job title, current employer, years of experience
• Education history and degrees
• Professional licenses and certifications (type, number, state, status, expiration)
• Software and technical skills
• Project history and contributions
• Location (city and state)
• Salary information (current and desired ranges)
• Career goals and preferences
• Resume and portfolio materials
• Peer endorsement content

Employer Profile Information:

• Company name, size, location, and industry focus
• Company description and branding materials
• Job posting content (titles, descriptions, requirements, salary ranges)
• Hiring preferences and candidate search criteria
• Benefits package details (health insurance, PTO, retirement, relocation, remote policy)

Offer and Document Data:

• Offer letter details (position, compensation, benefits, proposed start dates)
• Offer responses (acceptance, decline reasons, counter-offer details)
• Documents uploaded to the Document Center (contracts, agreements, invoices)
• Interview scheduling data and pipeline stage progression

Career DNA Questionnaire Responses:

• Responses to our career preference questionnaire
• Career aspirations and values
• Work environment preferences

Communications:

• Messages sent through the Platform
• Customer support communications
• Feedback and survey responses

Payment Information:

• Payment processing is handled by Stripe, Inc. WIM does not directly store credit card numbers or full payment account details. Please refer to Stripe's Privacy Policy for information on how Stripe handles your payment data.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on pages, click patterns, and search queries.
• Device Information: Browser type, operating system, device type, screen resolution, and language preferences.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Tracking Technologies: We use essential cookies for authentication and session management. See Section 8 for details.

2.3 Information from Third Parties

• Professional licensing data from public state licensing board databases (e.g., NCARB, NCEES, state boards)
• Information from credential verification services

3. How We Use Your Information

We use the information we collect for the following purposes:

• Platform Operations: To create and manage accounts, process subscriptions, provide customer support, and operate the Platform.
• Career Intelligence: To calculate WIM Scores, generate AI Career Coach recommendations, create career path maps, produce salary benchmarks, and compile annual career reports.
• Matching and Discovery: To match professionals with relevant job opportunities and enable employers to discover qualified candidates.
• Salary Benchmarking: To generate anonymized and aggregated salary benchmarks. Individual salary data is never shared with employers or other users in identifiable form.
• Communications: To send transactional emails (account verification, password resets, subscription confirmations), service updates, and, with your consent, marketing communications.
• Platform Improvement: To analyze usage patterns, improve features, develop new services, and enhance user experience.
• Security and Fraud Prevention: To detect and prevent fraudulent accounts, unauthorized access, and other security threats.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 With Other Users

• Professional Profiles: If you are a professional user, your profile information may be visible to employer users, subject to your privacy settings and subscription tier limitations. If you enable “Invisible Mode,” employers cannot discover your profile through search — you control all outreach.
• Employer Profiles: If you are an employer, your company profile and job postings are visible to professional users.
• WIM Score: Your WIM Score may be visible to employers based on their subscription tier.

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Payment processing (Stripe, Inc.)
• Cloud hosting and infrastructure
• AI and machine learning services (for career intelligence features)
• Email delivery services
• Analytics services

These service providers are contractually obligated to use your information only for the purposes of providing their services to WIM and in accordance with this Privacy Policy.

4.3 Aggregated and De-Identified Data

We may share aggregated and de-identified data that cannot reasonably be used to identify you. This includes aggregate salary benchmarking data, industry trend analysis, talent pool statistics, and market research.

4.4 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have regarding your information.

4.6 What We Never Share

• We never sell your personal information to third parties.
• We never share your individual salary data with employers or other users in identifiable form.
• We never share your password or authentication credentials.

5. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA/CPRA:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions (e.g., completing a transaction, complying with legal obligations).
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: WIM does not sell or share your personal information for cross-context behavioral advertising. Therefore, there is no need to opt out. If this practice ever changes, we will provide a clear opt-out mechanism.
• Right to Limit Use of Sensitive Personal Information: To the extent we collect sensitive personal information (such as salary data), we use it only for the purposes disclosed in this Privacy Policy.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] or use the account deletion feature in your account settings. We will verify your identity before processing your request and respond within 45 days, as required by law.

6. Additional State Privacy Rights

In addition to the California rights described above, residents of the following states have privacy rights under their respective state laws. WIM respects and complies with these laws.

6.1 Texas (Texas Data Privacy and Security Act — TDPSA)

Effective July 1, 2024. If you are a Texas resident, you have the right to:

• Confirm whether we are processing your personal data and access that data.
• Correct inaccuracies in your personal data.
• Delete personal data you have provided or that we have obtained about you.
• Obtain a copy of your personal data in a portable, readily usable format.
• Opt out of the processing of your personal data for targeted advertising, sale of personal data, or profiling that produces legal or similarly significant effects.

WIM does not sell personal data or use it for targeted advertising. To exercise your rights, contact us at [email protected]. We will respond within 45 days. If we decline your request, you may appeal by emailing [email protected] with the subject line “TDPSA Appeal.”

6.2 Virginia (Virginia Consumer Data Protection Act — VCDPA)

Effective January 1, 2023. If you are a Virginia resident, you have the right to:

• Confirm whether we are processing your personal data and access that data.
• Correct inaccuracies in your personal data.
• Delete personal data you have provided or that we have obtained about you.
• Obtain a copy of your personal data in a portable, readily usable format.
• Opt out of the processing of personal data for targeted advertising, sale of personal data, or profiling.

To exercise your rights, contact us at [email protected]. We will respond within 45 days. You may appeal a denied request by emailing [email protected] with the subject line “VCDPA Appeal.” If dissatisfied with the outcome of an appeal, you may file a complaint with the Virginia Attorney General.

6.3 Colorado (Colorado Privacy Act — CPA)

Effective July 1, 2023. If you are a Colorado resident, you have the right to:

• Confirm whether we are processing your personal data and access that data.
• Correct inaccuracies in your personal data.
• Delete personal data you have provided or that we have obtained about you.
• Obtain a copy of your personal data in a portable, readily usable format.
• Opt out of the processing of personal data for targeted advertising, sale of personal data, or profiling.

To exercise your rights, contact us at [email protected]. We will respond within 45 days. You may appeal a denied request by emailing [email protected] with the subject line “CPA Appeal.” If dissatisfied with the outcome of an appeal, you may file a complaint with the Colorado Attorney General.

6.4 Connecticut (Connecticut Data Privacy Act — CTDPA)

Effective July 1, 2023. If you are a Connecticut resident, you have the right to:

• Confirm whether we are processing your personal data and access that data.
• Correct inaccuracies in your personal data.
• Delete personal data you have provided or that we have obtained about you.
• Obtain a copy of your personal data in a portable, readily usable format.
• Opt out of the processing of personal data for targeted advertising, sale of personal data, or profiling.

To exercise your rights, contact us at [email protected]. We will respond within 45 days. You may appeal a denied request by emailing [email protected] with the subject line “CTDPA Appeal.” If dissatisfied with the outcome of an appeal, you may file a complaint with the Connecticut Attorney General.

6.5 Oregon (Oregon Consumer Privacy Act — OCPA)

Effective July 1, 2024. If you are an Oregon resident, you have the right to:

• Confirm whether we are processing your personal data and access that data (including a list of specific third parties to whom we have disclosed your data).
• Correct inaccuracies in your personal data.
• Delete personal data you have provided or that we have obtained about you.
• Obtain a copy of your personal data in a portable, readily usable format.
• Opt out of the processing of personal data for targeted advertising, sale of personal data, or profiling.

To exercise your rights, contact us at [email protected]. We will respond within 45 days. You may appeal a denied request by emailing [email protected] with the subject line “OCPA Appeal.” If dissatisfied with the outcome of an appeal, you may file a complaint with the Oregon Attorney General.

6.6 Utah (Utah Consumer Privacy Act — UCPA)

Effective December 31, 2023. If you are a Utah resident, you have the right to:

• Confirm whether we are processing your personal data and access that data.
• Delete personal data you have provided to us.
• Obtain a copy of your personal data in a portable, readily usable format.
• Opt out of the processing of personal data for targeted advertising or sale of personal data.

Note: Under UCPA, the right to correct and the right to opt out of profiling are not provided. To exercise your available rights, contact us at [email protected]. We will respond within 45 days.

6.7 Exercising Your State Privacy Rights

For all state privacy requests, please email [email protected] and include: (1) the specific right you wish to exercise, (2) your state of residence, and (3) sufficient information for us to verify your identity. We will not discriminate against you for exercising any of these rights. We do not sell your personal data or use it for targeted advertising under any state's definition.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services to you. Specific retention periods:

• Active Accounts: Data is retained for the duration of your account.
• Deleted Accounts: Upon account deletion, we will delete or de-identify your personal information within 90 days, except where retention is required by law or necessary for legitimate business purposes (e.g., resolving disputes, enforcing agreements).
• Aggregated Data: De-identified and aggregated data (e.g., salary benchmarks, industry statistics) may be retained indefinitely as it cannot be used to identify you.
• Legal Obligations: Certain records may be retained as required by California and federal law (e.g., tax records, employment-related records).

8. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL.
• Encryption of data at rest.
• Secure password hashing (passwords are never stored in plain text).
• Access controls limiting employee access to personal information on a need-to-know basis.
• Regular security assessments and monitoring.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for Platform functionality, including authentication, session management, and security. These cannot be disabled.
• Analytics Cookies: Used to understand how users interact with the Platform, including page views, feature usage, and navigation patterns. This data is used to improve the Platform.

We do not use advertising or tracking cookies. We do not engage in cross-site tracking or behavioral advertising.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.

10. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete that information. If you believe a child under 18 has provided us with personal information, please contact us at [email protected].

11. International Users

The Platform is operated from the United States and is intended primarily for users in the United States. If you access the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Platform, you consent to this transfer.

12. Do Not Track Signals

Some browsers transmit “Do Not Track” (DNT) signals. As there is no common industry standard for DNT, the Platform does not currently respond to DNT signals. We will update this Privacy Policy if a standard is established.

13. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party website you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and/or by posting a prominent notice on the Platform at least thirty (30) days before the changes take effect. Your continued use of the Platform after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

15. Automated Decision-Making, Profiling, and the WIM Score

We believe in being transparent about how the Platform uses automated processing. To operate our core career intelligence features, WIM uses automated systems — including algorithms and artificial intelligence — to analyze the information you provide and generate outputs such as your WIM Score, Career DNA analysis, AI Career Coach recommendations, job alignments, and employer matches. This constitutes “profiling” under certain state privacy laws.

15.1 What the Automated Processing Does

This automated processing is designed to be advisory and informational. It helps professionals understand and improve the strength of their profiles, and it helps employers organize and prioritize their own review of candidates. The WIM Score and related outputs are generated only from job-relevant information you supply or that is derived from your Platform activity, such as credentials, project history, skills, endorsements, profile completeness, and engagement.

15.2 No Solely-Automated Decisions With Legal or Significant Effects

WIM does not use automated processing or profiling to make decisions that produce legal or similarly significant effects about you without human involvement. WIM does not make hiring decisions. The WIM Score is never used by WIM to accept, reject, screen out, or rank you for any job. Any employment decision is made solely and independently by an employer — a human decision-maker — who is contractually prohibited from using the WIM Score as the sole or automated basis for any employment decision.

15.3 Your Rights Regarding Profiling

Where applicable state law provides the right to opt out of certain profiling, you may contact us at [email protected]. Because the WIM Score, Career DNA, and matching features are core functionality of the Platform, opting out of this processing may mean that certain features are no longer available to you. You also have the right to access the information used to generate your WIM Score, to correct inaccuracies in that information, and to request a general explanation of the categories of factors that inform your score.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

For CCPA/CPRA requests specifically, you may also email: [email protected] with the subject line “CCPA Request.” For state-specific privacy requests, see Section 6 above.