Data Processing Addendum (DPA)
This Data Processing Addendum (DPA) supplements our Terms of Service and governs the processing of personal data between Joblendar ('Processor') and the registered employer/company ('Controller').
1. Subject Matter & Roles
- Controller hires candidates and utilizes Joblendar to automate scheduling and collect resumes. Controller determines the purposes and lawful basis for data processing.
- Processor processes candidate personal data strictly on behalf of and in accordance with instructions from Controller to provide the platform's services.
2. Data Categories & Data Subjects
- Data Subjects: Candidates scheduled or invited for interviews.
- Data Categories: Full name, email address, phone number, resume (CV) files, interview stage history, and recruiter feedback notes.
3. Processor Obligations
Processor agrees to:
- Process personal data only to provide the service functions and in line with documented instructions from Controller.
- Ensure all personnel authorized to process personal data have committed themselves to confidentiality.
- Implement appropriate technical and organizational security measures as described in our Security Overview.
- Assist Controller in responding to candidate data subject requests (access, erasure, rectification). Upon a candidate's request to delete their account, the platform performs automated anonymization.
4. Subprocessors
Controller consents to the engagement of the following subprocessors to maintain platform operations:
| Subprocessor | Purpose | Location |
|---|---|---|
| Bluehost VPS / Hosting | Backend hosting and PostgreSQL database | United States |
| Stripe, Inc. | Payment processing and billing | United States |
| Google LLC | Google Calendar OAuth sync & Google Meet link generation | United States |
| Cloudflare, Inc. | DNS, DDoS protection, and Turnstile Captcha | United States / Global |
5. DPA Inquiries
For all inquiries regarding this Data Processing Addendum or DPA-specific requests, please contact privacy@joblendar.com.