Privacy Policy

• Identity data: name, email, phone, address.
• Profile data: login details, job preferences and filters (including minimum salary), skills, education, work history, CV, LinkedIn profile.
• Engagement data: jobs viewed and applied to, Introductions, messages with companies and with Lia (chat or voice).
• Hiring and billing data: company, role, start date, base pay or contract rate, end date if you leave within 90 days, payment details and invoices.
• Technical and usage data: IP address, device, browser, location, login data and how you use the Service.
• Marketing data: your preferences for receiving marketing from us.

We collect this from you, from companies (for example, when they confirm a hire), from ATS integrations companies connect, from referral partners who invite you, from publicly available professional profiles when verifying a hire, and automatically when you use the Service.

To run the Service and make matches and Introductions; to decide admission to the Service; to calculate, invoice, collect and refund fees, including confirming hires; to provide support; to keep the Service safe and prevent fraud; to analyze and improve the Service and our matching; to send you service updates and, where allowed, news about opportunities; and to comply with the law.

Depending on a candidate's availability settings, companies may see the candidate's professional profile (CV, LinkedIn, work history, location, work authorization) in matches or search. Contact details are shared only once both sides agree to an Introduction. A candidate's minimum salary and other filters are never shared with companies. Company and role details are shared with candidates. Companies that receive candidate data use it as independent controllers under their own privacy obligations and our Company Terms.

Lia uses AI model providers to analyze profiles, jobs and messages and to make matches. Providers process data on our behalf and may not use it to train their own models. We use your information to operate and improve our matching and admission models, and may use de-identified, aggregated data to improve Refer.

We share personal data with service providers who help us operate (including hosting, AI, email and Stripe for payments); with a buyer or successor in a merger, acquisition or sale of assets; and where needed to comply with law or legal process, enforce our terms, collect fees, or protect the rights, safety and property of Refer, our users or others. We don't sell personal data.

We process personal data to perform our contract with you, based on your consent, for our legitimate interests (where not overridden by your rights), and to comply with the law.

Refer is based in the US and has users worldwide. When we transfer personal data out of the EEA, UK or other regions with transfer rules, we use Standard Contractual Clauses or another lawful mechanism.

We keep account data while your account is open and for as long as needed for the purposes above. We keep hiring and billing records for up to 7 years for tax, accounting and legal reasons, even after you close your account.

Depending on where you live (including California under the CCPA/CPRA, the EEA and the UK), you can access, correct, delete or export your data, object to or restrict some processing, withdraw consent, and opt out of "sharing" for targeted advertising. Email contact@cardinalrefer.com or lia@cardinalrefer.com. We'll verify your identity before acting and won't treat you differently for using these rights. You can also complain to your local data protection authority.

We use reasonable technical and organizational measures to protect personal data. No system is completely secure.

Refer Partners is a browser extension for Refer's referral partners. It runs only on LinkedIn, Sales Navigator and Recruiter pages, after the partner connects it from the partner portal, and never sends messages, connection requests or any other action on the partner's behalf. When a partner opens a LinkedIn profile, the extension reads the profile as shown on the page (name, headline, current role and company, location, experience, education, skills and about sections). It uses this to draft a connection note, first message and follow-up that the partner reviews, edits and sends manually, and to show whether that person is already on Refer or already being contacted by another partner, who is never named. In search results and lead lists it uses only the profile identifiers needed to show that status. Profile information is used for the partner's outreach and to attribute a referral when the person later joins Refer through the partner's invitation. It is not sold, not shared with other partners beyond the anonymous status above, and not used for any other purpose. The extension also records the partner's own use of it (profiles viewed, claims, drafts copied, status changes) to operate and improve the product, and holds a limited-scope credential the partner can revoke at any time from the partner portal.

If you turn on WhatsApp or SMS in your Refer account, we send you account messages there: codes, requests that need your answer, and their outcomes. You can turn them off at any time in your account settings or by replying STOP.

Meta (for WhatsApp) and Amazon Web Services process these messages on our behalf, as service providers. Mobile information and text messaging opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes.

Refer isn't for anyone under 18, and we don't knowingly collect their data.

We'll post updates here and notify you of material changes by email or in the app.

contact@cardinalrefer.com · 425 Page Mill Rd, 2nd Floor, Suite 200, Palo Alto, CA 94306