Privacy policy.

This summary highlights the key points, but please read the whole policy.

• We collect what we need to run a verified, referral-based hiring platform: your contact and profile details, information about backings and introductions, and, for backers, identity and payment information through Stripe.
• We verify people and make introductions. We do not score, rank, grade, or profile candidates, and we do not make automated hiring decisions.
• Candidates may choose to complete a background check, run by a third-party provider with your direct consent. It has no bearing on how candidates are surfaced, and results are shared only with your consent to each share.
• We do not sell or share your personal information (as those terms are used under California law), and we do not use advertising trackers to do so.
• We do not use candidate information to train AI models. Any limited model improvement using other information is done on an anonymized and aggregated basis.
• We keep personal information only as long as needed, delete it on valid request (subject to limited legal exceptions), and keep background-check results for at most 60 days.
• You have privacy rights, including to access, correct, and delete your information, described in Section 11.

Rollcall Corporation operates the Rollcall platform at rollcall.work and related applications (the "Platform"). We decide how and why personal information is processed on the Platform. You can reach us at legal@rollcall.work.

This policy applies to everyone whose personal information we handle through the Platform: Employers and their users, Candidates (people put forward for roles), and Backers (people who vouch for candidates). Where a section is specific to one group, we say so.

We collect the following categories of personal information, depending on how you use the Platform:

Sensitive information. We do not seek sensitive personal information (such as information revealing health, race, religion, or sexual orientation). Background-check results, where you opt in, may include information treated as sensitive; we handle these only as described in Sections 5 and 11 and use them only to provide the service you requested.

A background check is optional and only happens if a candidate chooses it. The check is performed by a third-party screening provider (Certn, a consumer reporting agency), not by Rollcall. Before any check is run, that provider gives the candidate the disclosures and obtains the authorizations required by law, and the candidate consents directly to the provider.

• No effect on selection. A background check has no bearing on whether or how a candidate is surfaced or shortlisted. It is collected only to help Employers streamline their own process after a candidate has been put forward on the basis of human vouching.
• Retention. Where a candidate completes a check, we retain the result for at most 60 days.
• Sharing is consent-gated. A result is shared with an Employer (including for a shortlist) only with the candidate's consent to that specific share, and may be shared with additional companies or shortlists only with the candidate's further consent each time.

We use personal information to:

• set up and administer accounts and provide the Platform;
• verify identities (including Backer KYC through Stripe) and keep the Platform trustworthy and free of fraud;
• enable backings and introductions you have agreed to, and surface introduced candidates to Employers based on human vouching and candidate-provided information;
• process Backer payments;
• facilitate an optional background check at a candidate's request (Section 5);
• communicate with you, respond to requests, and send marketing where you have opted in (you can opt out anytime);
• maintain security, prevent misuse, and comply with our legal obligations.

What we do not do. We do not use personal information to score, rank, grade, or profile candidates, and we do not make automated hiring decisions. We do not use candidate information to train AI models. Any limited improvement of our systems uses information on an anonymized and aggregated basis only, and never to build profiles, scores, or assessments of individuals. We do not sell or share your personal information.

The Platform uses software to verify information, detect fraud, and organize introductions. The strength of a backing may be weighted by factors such as the nature of the backer's connection to the candidate. This reflects the strength of a human vouch. It is not an assessment by Rollcall of a candidate's character, ability, or future performance, and it does not make a hiring decision. Employers decide whom to contact and hire, using their own judgment.

We use cookies and similar technologies for essential and functional purposes, and to understand usage. We use a third-party consent-management platform (Usercentrics) that lets you review the current cookies in use and set your preferences; you can access and change those choices at any time through the cookie banner or preferences link on the Platform. For the current, detailed list of cookies, please use that tool.

Opt-out preference signals. We honor recognized browser-based opt-out preference signals, including the Global Privacy Control (GPC).

We do not sell or share your personal information. We disclose it only as needed to operate the Platform, to these categories of recipients:

• Employers — where a candidate has been put forward and (for background-check results) where the candidate has consented to the specific share.
• Identity and payment provider (Stripe) — for Backer KYC and payouts.
• Background-check provider (Certn) — a third-party consumer reporting agency, where a candidate opts in.
• Cloud hosting (Google Cloud) and operational service providers — who help us run, secure, and support the Platform, including the consent-management platform (Usercentrics) and communications providers.
• Professional advisors and authorities — such as lawyers, auditors, or insurers, and government or law-enforcement bodies where required by law or to protect rights.
• Corporate transactions — a successor or acquirer in connection with a merger, acquisition, or sale of assets, subject to this policy.

We require the service providers we use to protect personal information and to use it only to provide services to us.

Retention. We keep personal information only as long as needed for the purposes described here. We delete personal information on valid request, except limited records we are required to keep by law or reasonably need to resolve disputes or enforce our agreements. Background-check results are kept for at most 60 days.

Security. We use technical and organizational measures designed to protect personal information against loss, misuse, and unauthorized access, and we review them periodically. No system is perfectly secure, but we work to keep your information safe.

California residents have the following rights under the CCPA/CPRA, and residents of certain other US states have similar rights:

• Know / access the personal information we have collected about you, the categories of sources and recipients, and the purposes.
• Delete your personal information, subject to limited legal exceptions.
• Correct inaccurate personal information.
• Opt out of sale / sharing / targeted advertising — we do not sell or share personal information or use it for cross-context behavioral advertising, so there is nothing to opt out of; we also honor GPC signals.
• Limit use of sensitive information — we use any sensitive information only to provide the service you requested.
• Non-discrimination — we will not discriminate against you for exercising your rights.

How to exercise your rights. Email legal@rollcall.work or use your account settings. We will respond within the timeframe required by law (generally 45 days, extendable as permitted). We may need to verify your identity, and you may use an authorized agent. Where required, you may appeal a decision by emailing legal@rollcall.work with the subject line "Privacy Appeal."

Candidates specifically: you can withdraw from the Platform at any time and request deletion of your personal information, as described in the Candidate Terms.

The Platform is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.

The Platform is operated from the United States, and we process and store information in the United States. If you use the Platform from outside the US, you understand your information will be handled in the US.

We may update this policy as the Platform or the law changes. We will post the updated version and, for material changes, give clearer notice.