Privacy Policy

1. Introduction

Welcome to ExacMatch (“we,” “us,” or “our”). We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website www.exacmatch.com and our mobile application (collectively, the “Service”). Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the Service includes:

a. Personal Data:

Personally identifiable information that you voluntarily give to us when you register with the Service, such as:

• Identity & Contact Data: Your name, email address, phone number, and location.
• Professional Data: Your resume/CV, work history, education, skills, certifications, career goals, and any other information you add to your profile.
• Identity Verification Data (via SmileID): When you complete identity verification, our provider Smile ID, Inc. collects: (a) selfie images and liveness frames captured by your device camera; and (b) a derived facial biometric template (a numerical representation of your face used to compare against an ID photo). The SmileID SDK is designed specifically for this purpose. We do not collect Apple Face ID templates or TrueDepth raw depth data.
• Communications: Any feedback, questions, or correspondence you send to us.

b. Usage Data

Information our servers automatically collect when you access the Service, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Service. If you are using our mobile application, this information may also include your device name and type, your operating system, and your phone number.

c. Cookies and Tracking Technologies

We may use cookies, web beacons, tracking pixels, and other tracking technologies on the Service to help customize the Service and improve your experience.

3. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

• Create and manage your account.
• Verify your identity for onboarding, perform liveness checks to prevent fraud, and comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Match your profile with potential job opportunities from employers.
• Facilitate the application and hiring process.
• Communicate with you about your account or job opportunities.
• Improve the efficiency and operation of the Service.
• Monitor and analyze usage and trends to improve your experience.
• Notify you of updates to the Service.
• Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.

4. How We Share Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

a. By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.

b. With Employers and Recruiters

When you express interest in a job opportunity (e.g., by swiping right), we will share your profile information with the corresponding employer or recruiter so they can evaluate your candidacy.

c. Third-Party Service Providers

We may share your information with third parties that perform services for us or on our behalf, including data analysis, email delivery, hosting services, and customer service.

Specifically, for identity verification, we share your face data only with Smile ID, Inc. as our data-processing vendor to perform biometric matching and liveness detection. SmileID processes this data under its Data Processing Agreement and Privacy Policy and is independently certified for security controls (e.g., ISO 27001, SOC 2). We do not sell your face data or share it with advertisers.

d. Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. Data transmitted to our partners like SmileID is encrypted in transit and at rest. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Regarding identity verification data, we do not retain face images on our own systems beyond completing the verification flow. Our configuration with SmileID instructs them to retain biometric images and templates for no longer than 30 days after a verification decision, unless a longer period is required by law (e.g., for KYC/AML compliance). You may delete your account at any time, at which point we will take steps to delete your data from our active systems.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to be informed about how your data is used.
• The right to access the personal data we hold about you.
• The right to request the correction of inaccurate personal data.
• The right to request that we delete your data.

To exercise these rights, please contact us using the contact information provided below.

Please note that you may decline to provide face data; however, we will be unable to complete identity verification and, as a result, may not be able to provide you with certain features or services.

8. Children’s Privacy

Our Service is not intended for use by children under the age of 16, and we do not knowingly collect personal information from children under 16.

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: admin@exacmatch.com