CoBlack Corp ("CoBlack," "we," "us," or "our") operates the CoBlack platform, including our website and web application (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, how we share it, how we protect it, and what rights you have over it.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

This Privacy Policy is incorporated into and forms part of our Terms of Use. It is governed by the laws of the State of Delaware, United States, without regard to conflict-of-law principles. To the maximum extent permitted by applicable law, any dispute arising out of or related to this Privacy Policy is subject to the dispute resolution provisions of our Terms of Use, including informal resolution, binding individual arbitration, and class action waiver.

We collect information in three ways: information you provide to us, information we collect automatically, and information generated on your behalf.

​

2.1 Information You Provide Directly

• Account information: name, email address, and password.

• Professional profile and content: resume, work history, education, skills, certifications, references, portfolio links, professional summary, and any other career information you upload, enter, or otherwise submit to the Service.

• Job preferences and settings: target roles, locations, salary expectations, work authorization status, and any other preferences you configure.

• Application response data: answers to employer screening questions, supplemental responses, and any information you submit through the platform to support job applications.

• Communications: messages and information you submit through in-product support channels, feedback forms, or surveys.

• Payment information: billing details submitted at checkout. Payment transactions are processed exclusively by Stripe, Inc. CoBlack does not collect, see, or store your full credit card number, bank account number, CVV, or any other sensitive payment credentials. We receive only limited transaction metadata from Stripe (such as the last four digits of your card, brand, and expiration) to display billing information within your account.

​

2.2 Information We Collect Automatically

• Usage data: pages visited, features used, actions taken, session duration, click and scroll patterns, and search queries within the Service.

• Device and technical data: browser type and version, operating system, device type, screen resolution, language settings, IP address, and referring URL.

• Log data: server logs of access requests, error events, and security-relevant events, retained for a limited period for operational and security purposes.

• Cookies and similar technologies: see Section 10.

​

2.3 Information We Generate on Your Behalf

As part of the Service, CoBlack generates derived content and analytical outputs from the information you provide. This includes tailored resumes, application responses, capability assessments, job match scores, recommendations, and related materials. This content is generated for your benefit and remains associated with your account. CoBlack also generates inferences from your profile and usage data to operate matching, scoring, and recommendation features.

​

2.4 Information from Third Parties

We receive information from third parties solely to operate the Service:

• Employers and Applicant Tracking Systems (ATS): application status updates, employer communications, rejection or invitation notifications, and similar metadata associated with applications you have submitted through the Service. We do not act as a proxy for recruiter replies; recruiter replies are sent directly to your personal email address by the employer.

• Payment processor: transaction status and limited card metadata from Stripe as described in Section 2.1.

• Public employer career pages and ATS feeds: publicly available job posting data, which is not personal information about you.

​

2.5 Sensitive Personal Information

In limited circumstances, the information you choose to submit may include "sensitive personal information" as defined under the California Privacy Rights Act (CPRA) and analogous laws. This may include information about your citizenship or work authorization status, ethnicity or demographic information you elect to include on a resume or in response to an employer's Equal Employment Opportunity (EEO) question, or precise geolocation data if you choose to provide it.

We collect, use, and disclose sensitive personal information only for the purpose of providing the Service you have requested, including submitting applications you have authorized. We do not use sensitive personal information for any purpose that requires a separate right to limit such use under the CPRA, and we do not sell or share sensitive personal information.

​

2.6 Information We Do Not Collect

CoBlack does not knowingly collect biometric identifiers (such as fingerprints, facial geometry, or voiceprints), precise health information, financial account credentials, or government-issued identifiers (such as Social Security numbers, passport numbers, or driver's license numbers). Do not submit such information to the Service. If you inadvertently include such information in a resume or other uploaded content, you authorize us to process it solely as part of the document you submitted; we will not extract or separately store it.

We use your information solely to operate, maintain, secure, and improve the Service. Specifically, we use it to:

Create, authenticate, and manage your account.
Match you with job openings sourced from employer career pages and Applicant Tracking Systems.
Generate tailored resumes, application responses, and related materials for each opening.
Submit applications to employers on your behalf, as directed and authorized by you.
Process subscription payments through Stripe.
Send transactional and service-related communications, including account confirmations, password resets, billing notices, application status updates, and security alerts.
Respond to support requests.
Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Use.
Comply with legal obligations and enforce our agreements.
Conduct internal analytics and improve the Service using aggregated or de-identified data.

We do not use your information for behavioral advertising, cross-context behavioral advertising, or targeted advertising. We do not sell your information. We do not share your information for advertising purposes.

CoBlack uses automated processing and artificial intelligence to operate core features of the Service, including:

• Matching your profile against job openings.

• Generating tailored resumes and application content.

• Scoring and ranking job opportunities.

• Generating capability assessments and recommendations.

These automated processes are designed to assist you in your job search. They do not make hiring decisions, employment decisions, or any decisions that produce legal or similarly significant effects about you. Hiring decisions are made solely by employers based on applications submitted to them.

We do not use your personal information to train shared, third-party, or publicly available artificial intelligence models. Where AI is used to generate content for your account, that content is produced for your benefit and is not used to improve general-purpose models accessible to other users.

You may request human review of any automated output that materially affects your use of the Service, to the extent required by applicable law, through the in-product privacy and support controls.

CoBlack does not sell, rent, or trade your personal information. We do not share your personal information for cross-context behavioral advertising. We share your information only in the limited circumstances described below.

​

5.1 With Employers, at Your Direction

When you authorize CoBlack to submit an application, the information required to complete that application, including your resume, cover letter, and responses to employer questions, is transmitted to the employer or to the Applicant Tracking System operated on the employer's behalf. This transmission is the core function of the Service and occurs only at your direction. Once your information is in the employer's possession, it is governed by the employer's own privacy practices, over which CoBlack has no control.

​

5.2 With Service Providers

We share information with vendors and service providers who perform services on our behalf, bound by contractual obligations to process information only as instructed by CoBlack and to maintain appropriate security. These include:

• Payment processing: Stripe, Inc.

• Cloud infrastructure and hosting: infrastructure providers located in the United States.

• Analytics and product instrumentation: providers that process usage data on an aggregated or pseudonymized basis.

• Email delivery: providers that deliver transactional and service communications on our behalf.

• Security and fraud prevention: providers that help detect and prevent abuse, fraud, and security incidents.

• ​

5.3 For Legal Compliance and Protection

We may disclose your information if we believe in good faith that disclosure is required by law, regulation, subpoena, court order, or other legal process, or that disclosure is necessary to (a) protect the rights, property, or safety of CoBlack, our users, or any third party, (b) investigate or prevent fraud, abuse, or violations of our Terms of Use, or (c) enforce our agreements.

​

5.4 Business Transfers

If CoBlack is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of its assets, your information may be transferred to the successor entity as part of that transaction. We will provide notice through the Service before your information becomes subject to a different privacy policy.

​

5.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

To operate the Service, you grant CoBlack a worldwide, non-exclusive, royalty-free license to host, store, reproduce, modify, adapt, and process the content you submit (including your resume, profile information, and application responses) solely for the purpose of providing, maintaining, securing, and improving the Service for you. This license terminates when you delete the content from the Service or close your account, subject to the retention exceptions described in Section 7.

This license does not give CoBlack any ownership of your content, and CoBlack does not use your content to train shared or publicly available AI models.

We retain your personal information for as long as your account is active and as needed to provide the Service.

• Active accounts: profile and application data is retained and accessible within the Service while your account is active. Application history older than approximately three months may be archived within the platform UI but remains stored on our systems.

• Account deletion: when you delete your account, we initiate a recovery window of approximately six months during which your account may be restored on request. After the recovery window expires, your personal information is deleted from active production systems and queued for permanent removal from backups in accordance with our backup rotation schedule.

• Log data and security records: retained for a limited period sufficient to support security, fraud prevention, and operational diagnostics.

• Retained data exceptions: we may retain information after deletion (a) where required by law, regulation, or legal process, (b) to resolve disputes or enforce our agreements, (c) for fraud prevention and security purposes, or (d) in de-identified or aggregated form that cannot reasonably be used to identify you.

Depending on your jurisdiction, you may have some or all of the following rights with respect to your personal information:

• Access: request a copy of the personal information we hold about you.

• Correction: request correction of inaccurate or incomplete information.

• Deletion: request deletion of your personal information, subject to the exceptions in Section 7.

• Portability: request a copy of your information in a structured, commonly used, machine-readable format.

• Restriction: request that we limit the processing of your information in certain circumstances.

• Objection: object to certain uses of your information.

• Withdrawal of consent: where processing is based on consent, withdraw that consent. Withdrawing consent does not affect the lawfulness of processing before withdrawal, and may not on its own result in account deletion; to delete your account, use the account deletion controls in your settings.

• Non-discrimination: exercise these rights without being denied service, charged a different price, or receiving a different level of service, except as permitted by law.

To exercise these rights, use the in-product privacy and support controls available within your account settings. We will respond within the timeframes required by applicable law (generally within 30 to 45 days). We may need to verify your identity before fulfilling your request, and we may decline requests where permitted by law (for example, where complying would infringe the rights of another person).

You may also have the right to lodge a complaint with the privacy or data protection regulator in your jurisdiction.

​

8.1 California Residents (CCPA / CPRA)

California residents have the rights described above, plus the right to know the categories of personal information collected, the categories of sources, the business purposes for collection, and the categories of third parties with whom information is shared. In the preceding twelve months, CoBlack has collected the categories of personal information described in Section 2 and disclosed those categories to service providers described in Section 5.2 for the business purposes described in Section 3.

Do Not Sell or Share My Personal Information. CoBlack does not sell personal information and does not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that would trigger the right to limit under the CPRA.

California residents (and authorized agents acting on their behalf) may submit a verifiable consumer request using the in-product privacy controls. We will not discriminate against you for exercising your rights.

8.2 Other U.S. State Privacy Laws

Residents of states with comprehensive privacy laws, including but not limited to Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Tennessee, New Jersey, Indiana, Kentucky, and any additional states whose laws become effective in the future, have rights consistent with those described in this Section 8. CoBlack honors these rights regardless of which state you reside in. Where state law provides a right to appeal a decision regarding your request, you may submit an appeal through the in-product privacy controls.

​

8.3 International Users

CoBlack's servers and operations are located in the United States. If you access the Service from outside the United States, including from Canada or any other country, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence. By using the Service, you consent to this transfer.

For users in Canada, we handle your personal information consistent with applicable federal and provincial privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25). You may access and request correction of your personal information through in-product controls.

For users in the European Economic Area, the United Kingdom, or other jurisdictions with comprehensive data protection frameworks, we process personal information consistent with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. Our legal bases for processing include performance of a contract with you, our legitimate interests in operating and improving the Service, compliance with legal obligations, and, where applicable, your consent. You have the rights described in this Section 8 and may lodge a complaint with your local supervisory authority.

We implement administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit using TLS, access controls, monitoring, and secure infrastructure hosted in the United States.

No method of transmission over the internet or method of electronic storage is completely secure. While we work to protect your information using commercially reasonable measures, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify affected users and regulators as required by applicable law.

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account.

CoBlack uses two categories of cookies and similar technologies:

• Essential cookies and storage: required for authentication, security, session management, and core Service functionality. These cannot be disabled without impairing the Service.

• Analytics cookies: used to understand aggregate usage patterns and improve the Service. These do not identify you individually outside of CoBlack's own systems.

We do not use advertising cookies, do not participate in cross-context behavioral advertising, and do not allow third-party advertisers to track users across other sites through the Service.

You may control cookie preferences through your browser settings. We honor Global Privacy Control (GPC) signals where required by applicable law as a valid opt-out preference signal. Disabling non-essential cookies will not affect your ability to use core Service functionality.

The Service is not directed to and is not intended for use by individuals under the age of majority in their jurisdiction, and in any event not by individuals under 16. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected personal information from a child in violation of applicable law, we will delete it promptly. A parent or legal guardian who believes a child has provided personal information to CoBlack may submit a request through the in-product privacy and support controls.

The Service may contain links to or interact with third-party websites and services, including employer career pages and Applicant Tracking Systems. This Privacy Policy applies only to information processed by CoBlack. We are not responsible for the privacy or security practices of any third party, and we encourage you to review their privacy policies before providing any information to them.

CoBlack is not an employer, recruiter, staffing firm, or employment agency. Once your application information is transmitted to an employer or ATS at your direction, the employer controls how that information is used, retained, and shared. CoBlack does not guarantee that any employer will receive, review, or respond to any application, and CoBlack is not responsible for any employer's privacy practices, data handling, hiring decisions, or use of automated employment decision tools.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will provide additional notice through the Service or by other reasonable means before the changes take effect. Your continued use of the Service after the effective date of any update constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must stop using the Service and may delete your account.

For questions, concerns, or to exercise any privacy right described in this Privacy Policy, use the privacy and support controls available within your account settings in the Service.