Privacy Policy

This Privacy Policy explains how Innovia Software Corp., a Delaware corporation operating Reordinal, collects, uses, shares, and protects personal data.

Innovia Software Corp. is located at 1007 N Orange St., 4th Floor, 3415, Wilmington, DE 19801, New Castle, United States.

In this Privacy Policy, “Reordinal,” “we,” “us,” and “our” refer to Innovia Software Corp.

1. Scope

This Privacy Policy applies to:

• The Reordinal website
• The Reordinal web application
• Reordinal-hosted job application forms
• The Reordinal browser extension
• Reordinal integrations
• Customer support interactions
• Payment and checkout flows
• Analytics and product usage data

This Privacy Policy does not apply to third-party websites, LinkedIn, Stripe, Google, or other third-party services except where we process data through those services on our behalf.

2. Roles

Reordinal is primarily a processor or service provider for Candidate Data.

The employer, recruiter, hiring team, or organization using Reordinal is usually the controller or business responsible for Candidate Data.

Customers are responsible for determining the lawful basis for collecting, importing, uploading, evaluating, retaining, and deleting Candidate Data.

For account data, billing data, website analytics, security data, and product usage data, Reordinal may act as an independent controller.

3. Personal Data We Collect

We may collect the following categories of personal data.

Account data:

• Name
• Email address
• Organization name
• Role or title
• Login information
• Authentication information
• Team membership
• Permissions and settings

Customer business data:

• Company name
• Billing details
• Tax details
• Payment status
• Purchase history
• Job credits
• AI credit usage
• Support requests
• Product usage activity

Candidate Data:

• Name
• Email address
• Phone number
• Location
• LinkedIn profile URL
• Resume
• Work history
• Education history
• Skills
• Portfolio links
• Application answers
• Screening responses
• Recruiter notes
• Interview notes
• Tags
• Candidate status
• Evaluation criteria
• AI-generated summaries
• AI-generated scores
• AI-assisted ranking information

Technical data:

• IP address
• Device information
• Browser information
• Operating system
• Log data
• Cookie identifiers
• Usage events
• Pages viewed
• Feature usage
• Error logs
• Security logs

Payment data:

• Stripe customer ID
• Checkout status
• Billing address
• Tax information
• Transaction details
• Payment method metadata

We do not store full credit card numbers. Stripe processes payment card information.

4. How We Collect Personal Data

We collect personal data when:

• You create an account
• You create or join an organization
• You invite team members
• You create job posts
• You create public application forms
• Candidates submit applications through Reordinal-hosted forms
• You upload resumes
• You import candidates
• You use the browser extension
• You connect third-party integrations
• You purchase credits
• You contact support
• You use the website or application
• You interact with emails or product messages

5. Public Job Application Forms

Customers may create public job application forms using Reordinal.

When a candidate submits an application through a Reordinal-hosted form, we collect the information submitted by the candidate on behalf of the Customer that created the job post.

The Customer is responsible for the job post, application questions, candidate notices, consents, legal basis, and hiring process.

Candidates should contact the employer, recruiter, or hiring organization directly for questions about a specific job, application, hiring decision, or data rights request.

6. Browser Extension

The Reordinal browser extension helps users import applicant information from hiring workflows they control.

When a user manually uses the extension, the extension may collect information needed to evaluate or organize the candidate, including candidate name, LinkedIn profile URL, resume data, and related applicant information.

The extension is intended to work only where the user is authorized to access and process the applicant data.

The extension does not give users permission to violate third-party platform terms, collect unauthorized data, or process candidate data unlawfully.

7. AI Processing

Reordinal may use AI providers to generate candidate summaries, resume analysis, candidate scores, ranking support, and other AI-assisted outputs.

AI processing may involve sending job descriptions, evaluation criteria, resume text, application answers, recruiter inputs, and related Candidate Data to AI providers.

We configure our AI providers, where available, so that Customer Data and Candidate Data are not used to train or improve general-purpose AI models.

AI providers may process and retain data according to their applicable terms, data processing agreements, security practices, abuse monitoring practices, and legal obligations.

AI outputs may be inaccurate, incomplete, biased, or inappropriate. Customers are responsible for human review and all hiring-related decisions.

8. How We Use Personal Data

We use personal data to:

• Provide the Service
• Create and manage accounts
• Create and manage organizations
• Process job posts and applications
• Import and organize applicants
• Parse resumes
• Generate AI outputs
• Score and rank candidates for human review
• Support team collaboration
• Provide customer support
• Process payments through Stripe
• Calculate usage and credits
• Monitor security
• Prevent abuse
• Debug errors
• Improve product performance
• Analyze usage trends
• Comply with legal obligations
• Enforce our Terms
• Protect rights, safety, and security

9. Payments

Payments are processed by Stripe.

Stripe may collect payment card details, billing information, tax information, transaction data, fraud signals, and related payment information.

We receive limited payment-related information from Stripe, such as customer ID, payment status, purchase amount, billing details, and transaction history.

Stripe’s use of personal data is governed by Stripe’s own terms and privacy policy.

10. Analytics and Cookies

We may use cookies, analytics tools, and similar technologies to understand website traffic, product usage, feature adoption, performance, and errors.

This may include Google Analytics and similar tools.

You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.

11. Integrations

The Service may allow Customers to connect third-party integrations, including Google services, Gmail, Google Calendar, authentication providers, and other tools.

When you connect an integration, we process the connected data only as needed to provide the requested functionality.

You may disconnect integrations where supported.

Third-party integrations are governed by their own terms and privacy policies.

12. Subprocessors and Service Providers

We use service providers and subprocessors to operate the Service.

These may include:

• Google Cloud Platform
• Amazon Web Services
• Supabase
• MongoDB
• OpenAI
• Google Gemini
• Stripe
• Google Identity
• Google Calendar API
• Gmail API
• Google Analytics
• Email delivery providers
• Logging, monitoring, and security providers
• Customer support tools

We may update our subprocessors from time to time.

We require service providers to process personal data only as needed to provide services to us and according to applicable contractual obligations.

13. International Data Transfers

Reordinal is operated by a Delaware corporation and stores primary production data in the United States.

If you use the Service from outside the United States, your personal data may be transferred to, stored in, or processed in the United States and other countries where we or our service providers operate.

Those countries may have data protection laws different from the laws of your jurisdiction.

Where required, we use appropriate safeguards for international transfers.

14. Data Retention

We retain personal data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent abuse, and support legitimate business purposes.

Customer Data and Candidate Data are retained according to Customer settings, account status, deletion requests, and our operational retention practices.

When an account, organization, job, application, or candidate record is deleted, we remove it from active use or mark it inactive within a reasonable period, generally within 30 days.

Some data may remain in backups, logs, audit records, security records, billing records, tax records, or legal records for a longer period.

15. Deletion and Export

Customers may export available Customer Data through the Service where supported.

Customers may request deletion of Customer Data by contacting us.

Deletion may be limited where retention is required for legal, tax, accounting, security, backup, dispute resolution, or fraud prevention purposes.

Candidates who want to access, correct, or delete Candidate Data should usually contact the employer, recruiter, or organization that collected or controls the data.

If a candidate contacts Reordinal directly, we may redirect the request to the relevant Customer or process the request according to the Customer’s instructions.

16. Security

We use administrative, technical, and organizational safeguards designed to protect personal data.

These safeguards may include:

• Encryption in transit
• Encryption at rest where supported
• Access controls
• Role-based permissions
• Audit logs
• Data export logs
• Infrastructure security controls
• Restricted internal access
• Monitoring and logging
• Secure authentication workflows

No system can be guaranteed to be completely secure.

Customers are responsible for managing user access, team permissions, internal policies, and secure use of the Service.

17. Internal Access

Reordinal personnel do not access customer accounts through user impersonation.

Limited access to Customer Data or Candidate Data may occur where necessary to provide support, troubleshoot issues, maintain security, investigate abuse, comply with law, enforce agreements, or operate the Service.

18. Data Subject Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data.

Account users may contact us to exercise rights related to their account data.

Candidates should usually contact the employer, recruiter, or organization that posted the job or processed the application.

Where Reordinal acts as a processor, we will assist the Customer with data rights requests according to our agreement with the Customer.

19. California Privacy Rights

If applicable, California residents may have rights under California privacy laws, including rights to know, access, correct, delete, and opt out of certain data sharing.

Reordinal does not sell Candidate Data.

Reordinal does not use Candidate Data for cross-context behavioral advertising.

Where Reordinal processes Candidate Data on behalf of a Customer, the Customer is responsible for responding to California privacy requests unless otherwise required by law.

20. Children

The Service is not intended for children.

We do not knowingly collect personal data from children under 16.

If you believe a child has provided personal data to us, contact us and we will take appropriate steps.

21. Legal Compliance and Protection

We may disclose personal data if we believe it is necessary to:

• Comply with law
• Respond to legal process
• Protect rights, safety, and security
• Prevent fraud or abuse
• Enforce our Terms
• Investigate misuse
• Protect Customers, candidates, Reordinal, or third parties

22. Business Transfers

If Reordinal is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, personal data may be transferred as part of that transaction.

We will handle personal data according to this Privacy Policy unless replaced by an updated policy.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If changes are material, we may provide notice through the Service, by email, or by posting an updated version.

Your continued use of the Service after the effective date means the updated Privacy Policy applies.

24. Contact

For privacy questions, contact:

Email: contact@reordinal.com