Data Processing Agreement

1. Parties

This DPA is between iBelong (Processor / Service Provider) and the hiring company using the platform (Controller / Business).

2. Definitions

"Personal data", "processing", "controller", "processor", "service provider", and "business" have the meanings given by applicable data protection laws, including the GDPR and the CCPA/CPRA where relevant.

3. Roles of the Parties

For candidate data submitted in connection with a hiring company's position, the hiring company acts as the controller or business, and iBelong acts as the processor or service provider, unless otherwise required by applicable law.

4. Subject Matter of Processing

iBelong processes candidate data to provide cultural and work environment alignment assessments, dashboards, reports, account management, security, and support services.

5. Duration of Processing

iBelong processes personal data for as long as the hiring company uses the platform and as required to comply with applicable law.

6. Categories of Data Subjects

• Candidates
• Hiring managers
• Company users
• Platform administrators

7. Categories of Personal Data

• Name
• Email address
• Optional LinkedIn URL
• Assessment responses
• Cultural and workstyle scores
• Alignment scores and report data
• Usage and technical data

8. Nature and Purpose of Processing

Hosting, scoring, analyzing, displaying, and reporting candidate assessment data for the hiring company's recruitment activities.

9. Controller Instructions

iBelong will process personal data only on documented instructions from the hiring company, including as necessary to provide the platform and related services.

10. Confidentiality

iBelong will ensure that personnel authorized to process personal data are subject to appropriate confidentiality obligations.

11. Security Measures

iBelong will implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

12. Subprocessors

iBelong may engage subprocessors (such as hosting and infrastructure providers) to support the platform. iBelong will impose appropriate data protection obligations on its subprocessors.

13. Data Subject Requests

Where iBelong receives a request from a candidate relating to data controlled by a hiring company, iBelong may direct the candidate to the hiring company or assist the hiring company in responding, as required by applicable law.

14. Deletion or Return of Data

Upon termination of services or upon documented request, iBelong will delete or return personal data, unless retention is required by law or necessary for legitimate compliance, security, or dispute-resolution purposes.

15. International Transfers

Where personal data is transferred internationally, iBelong will rely on appropriate safeguards as required by applicable law.

16. Audits and Information

iBelong will, upon reasonable request, make available information necessary to demonstrate compliance with this DPA.

17. Breach Notification

iBelong will notify the hiring company without undue delay after becoming aware of a personal data breach affecting that company's candidate data.

18. CCPA/CPRA Service Provider Terms

iBelong will not sell or share candidate personal information as defined under applicable California privacy laws. iBelong will process candidate personal information only to provide services to the hiring company and for permitted business purposes.

19. Order of Precedence

If there is a conflict between this DPA and the Terms of Service, this DPA prevails with respect to the processing of personal data.

20. Contact

To request a signed copy of this DPA or ask questions, contact privacy@ibelong.com.