Privacy Policy

This Privacy Policy describes how Glyde Inc. (“Glyde,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with glydeunity.com, related Glyde websites, and Glyde’s own business operations. It also explains your choices and how to contact us.

This Policy is a notice. Except as required by applicable law or, when Glyde appears on the Data Privacy Framework List, the EU-U.S. Data Privacy Framework Principles (including as applied under the UK Extension), it does not create additional contractual rights or warranties.

Who we are

Glyde Inc. is a Delaware corporation with a principal place of business at 14425 Falcon Head Blvd, Bldg E, Ste 100, Austin, TX 78738, USA. We provide AI-enhanced software and related services for recruiting and staffing, including the GLYDE Unity platform (together, the “Services”).

For personal information covered by this Policy, Glyde Inc. is the organization responsible for this notice. We do not, in this Policy, designate any non-U.S. affiliate as a controller.

What this Policy covers — and what it does not

Some laws distinguish “controllers” (who decide why and how personal information is processed) from “processors” (who process on a controller’s documented instructions). Glyde may act in either role.

When Glyde is the controller

This Policy applies when Glyde decides why and how to process your personal information, including when you:

• Visit a Glyde website that links to this Policy;
• Inquire about, purchase, or receive support for Glyde products as a customer, prospect, partner, or supplier contact;
• Create or use an account offered directly by Glyde (not an account provisioned by a Glyde customer);
• Register for a Glyde-hosted event, webinar, or similar activity;
• Give us feedback or participate in research we conduct for our own purposes;
• Receive sales or marketing communications from us.

When Glyde is a processor

Enterprise customers control the candidate, recruiter, job, application, and related records they (or their end users) submit to the Services, including voice or text screening, messaging, search, and ATS-connected data (“Customer Data”). For Customer Data, the customer is the controller and Glyde is a processor (or equivalent). This Policy does not govern the customer’s own use of Customer Data. If you are a job seeker, applicant, or employee of an organization that uses Glyde, please contact that organization. We cannot act on a controller request that must be made to the customer, except as the customer instructs or as required by law.

Glyde’s Data Privacy Framework commitments described below, once effective, may cover Customer Data that Glyde receives from the EU/EEA or the United Kingdom as a processor, limited to Glyde’s processing of that data. They do not make Glyde the controller of Customer Data and do not replace the customer’s privacy notice.

What this Policy does not cover

• Glyde employee or job-applicant information processed in the employment context (a separate notice applies if we provide one);
• Human resources data under the Data Privacy Framework (Glyde’s DPF certification, when effective, is non-HR only);
• The Swiss-U.S. Data Privacy Framework (Glyde is not self-certifying to that framework in this Policy);
• Third-party websites, apps, or ATS systems that we do not control.

Personal information we collect

The information we collect depends on how you interact with us. We collect only what is reasonably relevant to the purposes described in this Policy (or a notice given at collection), and we may combine information from the sources below.

Information you provide

• Contact and account data — such as name, business email, phone number, company, role, address, and login or verification identifiers you choose to give us.
• Commercial and support data — inquiry details, contract and billing contacts, payment-related information processed by our payment providers, and support correspondence.
• Event and research data — registration details and any other information you submit for an event, survey, or study. We ask for health or dietary information only if needed for an in-person event and you choose to provide it.
• Communications — content of emails, forms, and (where we notify you and obtain any required consent) recordings or transcripts of sales or support calls or meetings, which we may analyze with service-provider tools to improve quality and keep records.

Information collected automatically

When you use our websites or, where applicable, our applications, we and our service providers collect device and usage information such as IP address, approximate location derived from IP, browser and device type, referring URLs, pages or features used, timestamps, and similar telemetry needed to operate, secure, and understand our sites. Some of this is collected through cookies and similar technologies (see Cookies and similar technologies).

If you use the Services through a Glyde customer, we may log system-usage information (for example IP address, client type, and whether a task completed) to operate and secure the Services. We do not use that telemetry to identify you for Glyde’s own marketing unless the customer instructs us to do so or you interact with Glyde as a controller (for example, you open a Glyde marketing email).

Information from others

We may receive business contact information from your organization, event co-sponsors, publicly available sources, or providers of business-contact data. We may also receive information from service providers that support our operations (for example fraud prevention or analytics).

Customer Data (processor)

When we act as a processor, the customer (not Glyde) determines the categories of Customer Data. Those categories commonly include recruiter user accounts and candidate-related information such as identity and contact details, resumes, applications, screening recordings or transcripts, messages, and records synced from the customer’s ATS or other systems the customer connects. Glyde processes Customer Data only to provide the Services, to secure and troubleshoot them, to comply with law, and as otherwise instructed by the customer or permitted by the customer agreement.

Sensitive information

We do not seek sensitive personal information for Glyde’s own controller purposes, except where you voluntarily provide it (for example dietary needs for an event) or where it is strictly necessary and permitted. If we receive information that applicable law treats as sensitive, we will process it only as permitted (including with any required consent) or on a customer’s documented instructions when we are a processor. Voice recordings and resume content processed for a customer are Customer Data.

How we use personal information

We use personal information for the following purposes, and for closely related operational purposes (for example quality assurance, debugging, and record-keeping). Where a law requires a “legal basis,” we rely on one or more of: performance of a contract or steps at your request; our legitimate interests (or those of a customer or third party) that are not overridden by your interests; consent where we ask for it; and compliance with legal obligations.

• Provide, operate, maintain, and secure our websites and Services;
• Respond to inquiries, provide support, and manage customer, partner, and supplier relationships, including billing;
• Send transactional messages and, where permitted, marketing communications (you may opt out of marketing at any time);
• Plan and host events and webinars;
• Improve, develop, and evaluate our products, including through aggregated or de-identified data and, where a customer agreement allows, insights that do not identify the customer or an individual;
• Detect, prevent, and respond to security incidents, abuse, fraud, and misuse;
• Protect Glyde, our users, customers, and the public; enforce our terms; and establish, exercise, or defend legal claims;
• Comply with law, regulation, and lawful requests from public authorities.

We do not use personal information for a purpose that is materially different from the purposes described in this Policy (or a notice given at collection) without providing any notice and choice required by applicable law or the DPF Principles.

How we disclose personal information

We disclose personal information only as described in this Policy, as you direct, as a customer instructs for Customer Data, or as permitted or required by law. We do not sell personal information for money. Categories of recipients include:

• Service providers (agents). Vendors that process information on our behalf and on our instructions — for example cloud hosting and infrastructure, email and SMS delivery, voice processing, AI model and tooling providers, analytics and error monitoring, customer-relationship and marketing automation, event support, and payment processing. They may use the information only to perform services for us (or as required by law).
• The organization you represent. If you interact with us as a customer, prospect, partner, or supplier contact, we may share relevant information with that organization.
• Customer-directed third parties. For Customer Data, we disclose information to systems the customer connects (including the customer’s ATS) or to other recipients the customer instructs. Those disclosures are the customer’s responsibility.
• Professional advisers and corporate transactions. Counsel, auditors, insurers, and, if we explore or complete a merger, acquisition, financing, or sale of assets, prospective or actual counterparties and their advisers, subject to appropriate confidentiality.
• Legal and safety disclosures. We may disclose personal information if we believe in good faith that disclosure is reasonably necessary to comply with law or a lawful request; to protect the rights, safety, or property of Glyde, our customers, users, or others; or to enforce our terms. This includes disclosing personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

We may also disclose aggregated or de-identified information that is not reasonably identifiable to an individual.

Your choices

You may opt out of Glyde marketing emails by using the unsubscribe link or by contacting us. Transactional or service messages may still be sent where permitted.

Where Glyde would disclose your personal information to a third party that will use it for its own purposes (a controller), or use it for a purpose that is materially different from the purposes described in this Policy or originally authorized, we will give you the opportunity to opt out, and we will obtain any affirmative consent required for sensitive information, except where an exception applies (for example, as required by law or to provide a service you requested). Disclosures to our agents that process information on our behalf, and processor disclosures made on a customer’s instructions, are not “choice” events under this paragraph.

You can limit cookies through your browser or device settings. Doing so may affect site functionality. We do not currently operate a separate on-site cookie preference panel.

Cookies and similar technologies

We and our service providers use cookies, pixels, and similar technologies to operate our websites, remember preferences, measure usage, support security, and (where used) help us understand marketing performance. This may include marketing-automation tooling embedded on our sites. You can control cookies through your browser. Third-party technologies are subject to those parties’ own notices to the extent they act independently.

International transfers

Glyde is established in the United States and processes personal information in the United States and in other countries where we or our service providers operate. Those countries may not provide the same legal protections as your home jurisdiction. We use one or more lawful transfer mechanisms as appropriate, which may include standard contractual clauses or another approved mechanism, and — when Glyde is on the Data Privacy Framework List — the EU-U.S. Data Privacy Framework and the UK Extension as described below. If the DPF is not available for a particular transfer, we rely on another lawful mechanism or do not perform that transfer in reliance on the DPF.

EU-U.S. Data Privacy Framework and UK Extension

Glyde Inc. adheres to the EU-U.S. Data Privacy Framework Principles (“DPF Principles”) issued by the U.S. Department of Commerce, and that adherence extends to personal data transferred from the United Kingdom (and Gibraltar, as applicable) in reliance on the UK Extension to the EU-U.S. DPF. This commitment covers personal data other than human resources data only.

The preceding adherence statement is included so this Policy is consistent with Glyde’s DPF self-certification. Glyde will not represent that it is a current DPF participant, and will not receive personal data in reliance on the DPF, until the U.S. Department of Commerce notifies Glyde that it may indicate participation and Glyde appears on the Data Privacy Framework List. Until then, other lawful transfer mechanisms apply where used. Upon that notice, the commitments in this section are Glyde’s certified DPF commitments and are enforceable under U.S. law.

The U.S. Department of Commerce’s DPF program website is https://www.dataprivacyframework.gov/. If there is a conflict between this Policy and the DPF Principles for personal data received in reliance on the DPF, the DPF Principles control to the extent of the conflict.

Independent recourse (EU DPAs and UK ICO)

For personal data covered by Glyde’s DPF commitments, Glyde commits to cooperate with the EU data protection authorities and to comply with the advice given by such authorities acting as Glyde’s independent recourse mechanism, and, for personal data transferred from the United Kingdom in reliance on the UK Extension, to cooperate with the UK Information Commissioner’s Office (ICO) and comply with the advice given by the ICO. These mechanisms are available at no cost to the individual.

You may submit a complaint:

• First, to Glyde (see Complaints and how to contact us);
• To your local EU/EEA supervisory authority (see the list maintained by the European Data Protection Board at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en);
• To the UK ICO at https://ico.org.uk/make-a-complaint/;
• Through the Department of Commerce’s guidance on submitting a DPF-related complaint at https://www.dataprivacyframework.gov/.

If a residual DPF complaint is not resolved by Glyde, the DPAs/ICO, or the Department of Commerce, you may be able to invoke binding arbitration under Annex I of the DPF Principles, described at https://www.dataprivacyframework.gov/.

FTC enforcement

The U.S. Federal Trade Commission has jurisdiction over Glyde’s compliance with the DPF Principles.

Access under the DPF Principles

Individuals whose personal data is received by Glyde in reliance on the DPF have the right to access that data and to request that it be corrected, amended, or deleted where it is inaccurate or has been processed in violation of the DPF Principles, subject to the limitations in the DPF Principles (including where a request is unfounded or excessive, would compromise others’ rights or confidential commercial information, or where we are required or permitted by law to limit access). To exercise this right, contact us as described below. If we are a processor of the data, we will inform you to contact the customer and will assist the customer as required by our agreement and applicable law.

Onward transfers

If Glyde transfers personal data received in reliance on the DPF to a third-party controller, Glyde will do so only for limited and specified purposes consistent with the notice and choice given, under a contract requiring the recipient to provide the same level of protection as the DPF Principles and to notify Glyde if it can no longer meet that obligation, in which case the recipient must cease processing or take other reasonable and appropriate steps to remediate.

If Glyde transfers such data to a third-party agent, Glyde will transfer it only for limited and specified purposes; take reasonable and appropriate steps to ensure the agent is obligated to, and does, provide at least the same level of protection as the DPF Principles; require the agent to notify Glyde if it can no longer meet that obligation; and, upon notice, take reasonable and appropriate steps to stop and remediate unauthorized processing. Glyde may be asked to provide a summary or representative copy of the relevant privacy provisions of its agent contracts to the Department of Commerce.

Glyde remains liable under the DPF Principles if its agent processes personal data received in reliance on the DPF in a manner inconsistent with the DPF Principles, unless Glyde proves that it is not responsible for the event giving rise to the damage.

Leaving the DPF program

If Glyde leaves the relevant part of the DPF program and continues to hold personal data received under that part, Glyde will either annually affirm to the Department of Commerce that it continues to apply the DPF Principles to that data or protect it by another authorized means.

Retention

We retain personal information only for as long as reasonably needed for the purposes described in this Policy, including to provide a requested service, maintain business and tax records, resolve disputes, enforce agreements, and meet legal, security, and audit requirements. When we no longer have a legitimate need to retain personal information, we will delete it, de-identify it, or securely isolate it until deletion is reasonably practicable. Customer Data is retained according to the customer agreement and the customer’s instructions, then deleted or returned as provided in that agreement, except where we must retain a copy to comply with law or to establish, exercise, or defend legal claims.

Security

We use administrative, technical, and organizational measures we consider appropriate to the nature of the information and the risks of processing. No method of transmission or storage is completely secure. You are responsible for maintaining the secrecy of credentials issued to you.

Your privacy rights

Depending on where you live and how you interact with Glyde, you may have the right to request access to, correction of, deletion of, or a copy of personal information we hold as a controller; to object to or restrict certain processing; to withdraw consent where processing is based on consent (without affecting prior lawful processing); and to opt out of Glyde marketing. DPF access rights are described in the DPF section above.

We may decline or limit a request where the law allows, including where we cannot verify your identity, the request is unfounded or excessive, or we are a processor and the customer is the correct recipient. We will not discriminate against you for exercising rights that the law grants you.

To make a request regarding information covered by this Policy, email legal@glydetalent.com. We may ask for information reasonably needed to verify the request and locate the data.

Complaints and how to contact us

If you have a question or complaint about this Policy or Glyde’s privacy practices, including a complaint under the DPF Principles, contact:

Glyde Inc.
Attn: Privacy
14425 Falcon Head Blvd, Bldg E, Ste 100
Austin, TX 78738
legal@glydetalent.com

We will review DPF-related complaints at no cost to you and will respond within 45 days of receipt. You may also contact the EU DPAs, the UK ICO, or the Department of Commerce as described in the DPF section. If you are in the EEA, the UK, or Switzerland, you may lodge a complaint with a competent supervisory authority regardless of whether you first contact us.

Children

Our websites and Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16 for Glyde’s own purposes. If you believe we have collected such information, contact us and we will take appropriate steps to delete it, except where we are legally required to retain it.

Changes to this Policy

We may update this Policy from time to time. The “Effective” date at the top will change when we do. We will post the updated Policy on this page. If we make a material change, we will provide additional notice on this page as we consider appropriate. If a change would be inconsistent with the DPF Principles for personal data already received in reliance on the DPF, we will not apply that change to that data except as the DPF Principles allow (including by providing any required notice and choice).