Privacy &
Data Protection Policy.

1. What we collect

We collect information directly from you when you apply, contact us, request workers, or use our website chat. We also receive information from references, employers, and verification services where you authorize it.

From applicants & employees: name, email, phone, ZIP, work authorization status, employment history (employers, roles, dates, supervisors), skills and certifications (e.g. forklift, OSHA, CDL), desired pay and availability, e-signature, and government-issued ID where employment requires it.

From clients (employers): business name, contact name and email, phone, billing address, and the staffing requests you submit.

Automatically: standard server logs (IP address, browser, page visited), UTM parameters from referral links, and choices you make in our chat (preferred language, conversation contents).

2. Why we collect it

We use personal information solely to operate the staffing service: to evaluate applications, verify employment history, match candidates to client roles, run payroll and tax filings, communicate with you, and meet our legal obligations (I-9, E-Verify, EEOC reporting, payroll tax, workers' compensation).

We do not sell personal information. We do not use it for advertising profiles or share it with data brokers.

3. Who we share it with

• Prospective employers — only the candidate profile fields you authorize on the screening application.
• Background-check vendors and verification services we contract with — under written DPAs.
• Payroll, tax, and benefits providers (PrismHR / PEO partners).
• Government agencies as required by law (IRS, EDD, Social Security Administration, EEOC, USCIS, courts).
• Our service providers — Supabase (database), Vercel (hosting), Anthropic (chat AI) — under written security agreements that prohibit secondary use.
• A successor company in the event of merger or acquisition, with notice to you.

We do not share information with anyone else without your explicit consent or a legal obligation to do so.

4. How long we keep it

• Active applicant/employee records: for the duration of placement plus the legally required retention period (typically 4 years for tax records, 3 years for I-9, 1 year for unsuccessful applications under EEOC).
• Inactive applicant records: 12 months after last contact, then anonymized for aggregate reporting only.
• Chat conversations: 30 days for service quality, then deleted. Language preference is stored locally on your device only.
• Server logs: 90 days.

5. How we protect it

• Encrypted in transit (TLS 1.2+) and at rest (database encryption keys managed by our provider).
• Role-based access — only authorized Driven Talent staff with a legitimate operational need can read applicant records.
• Multi-factor authentication required for all admin access.
• Quarterly access reviews and an immutable audit log of every record change.
• Background-check data is held by the vendor, not on our servers; we receive only adjudication results.
• Incident response within 72 hours of confirmed material breach, with notification to affected individuals as required by law.

6. Your rights — access, correct, delete

You can:

• Request a copy of the personal information we hold about you.
• Correct any information that's inaccurate or out of date.
• Withdraw your application from active matching at any time.
• Request deletion of your record, subject to legal retention obligations.
• Opt out of non-essential communications.

Email privacy@driventalent.com or call (909) 361-4629 and we will respond within 30 days.

7. California — CCPA / CPRA

If you reside in California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what categories of personal information we've collected, the sources we collected it from, the business purposes for which it was collected, and the categories of third parties with whom we shared it. You also have the right to limit our use of sensitive personal information.

We do not sell personal information and do not knowingly collect information from individuals under 16. To exercise your rights, contact us at privacy@driventalent.com. We will not discriminate against you for exercising any CCPA right.

8. How to reach our Privacy team

Email: privacy@driventalent.com
Phone: (909) 361-4629
Mail: Driven Talent — Privacy Team, 1470 Valley Vista Dr, Suite 111, Office #815, Diamond Bar, CA 91765