Professional data: resume or CV, employment history, job titles, employer names, start and end dates, educational background, certifications, and skills
Financial data: income range or salary expectations (used solely for job-matching purposes)
Account credentials: username and password
Communications: messages, inquiries, survey responses, and feedback you submit to us
Job application data: applications submitted through the platform and related correspondence

2.2

Information collected automatically

Device and technical data: IP address, device type, operating system, browser type, and language settings

Usage data: pages visited, time spent, clicks, and navigation patterns on our website
Log data: access timestamps, referral URLs, and error logs
Cookies and tracking technologies: as described in Section 8

2.3

Information from third parties

We may receive information about you from recruitment partners, background check providers (with your consent), and publicly available professional sources such as LinkedIn.

How We Use Your Information

3.1

Core platform services

Creating and managing your candidate profile
Matching your profile to current and future job opportunities listed on our platform
Processing and managing job applications you submit
Communicating with you about your applications and platform activity

3.2

Job promotion and targeted outreach

This is a core function of our service. We use your professional profile data, application history, behavioral data, and stated preferences to proactively surface and promote job listings, send personalized job alerts, rank job results based on fit, and share your profile with prospective employers subject to your express consent.

You may opt out of promotional job communications at any time via the unsubscribe link in any email or your account notification settings. Opting out does not affect your ability to apply for jobs on the platform.

3.3

Platform improvement

Analyzing aggregate usage patterns to improve platform features and user experience

Conducting internal research and analytics
Assessing candidate satisfaction with the application process (with consent)

3.4

Security and compliance

Detecting, preventing, and investigating fraud, unauthorized access, and abuse

Maintaining IT security and platform integrity
Complying with applicable legal obligations
Enforcing our Terms of Service

We will not use your personal information for any purpose materially different from those described above without first obtaining your consent.

Your Rights and Choices

Depending on your state of residence, you may have the following rights regarding your personal information:

Access: request a copy of the personal information we hold about you
Correction: request that we correct inaccurate or incomplete information
Deletion: request that we delete your personal information, subject to legal retention requirements
Portability: request your data in a structured, machine-readable format
Opt out of targeted job promotion communications at any time
Withdraw consent for sharing your profile with employers

5.1

California residents (CCPA/CPRA)

California residents have rights under the CCPA as amended by the CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information. Submit requests to info@oryx.so. We respond within 45 days.

5.2

Other US state laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas, and other states with applicable privacy laws may have similar rights. We honor valid requests regardless of state, to the extent required by law. Contact info@oryx.so to exercise your rights.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal information within 90 days, except where required by law (certain financial and legal records may be retained for up to 7 years). Profile data used for job-matching is retained for up to 24 months of inactivity, after which it is deleted unless you reactivate your account.

6.1

Business transactions

If oryx is involved in a merger, acquisition, asset sale, or restructuring, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website if your data becomes subject to a different privacy policy.

International Data Transfers

Oryx is headquartered in Switzerland. If you are located in the United States, your information is transferred to and processed in Switzerland and potentially other countries. We take steps to ensure that such transfers comply with applicable law, including through the use of standard contractual clauses or other legally recognized transfer mechanisms where required.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate our platform, analyze usage, and deliver personalized job recommendations.

Strictly necessary cookies: required to operate the website and cannot be disabled
Analytics cookies: help us understand how users navigate the platform (e.g. Google Analytics). Opt out via your browser settings or the Google Analytics Opt-out Add-on
Personalization cookies: used to remember your preferences and tailor job results and recommendations to you
Marketing and retargeting cookies: used to display relevant job ads across third-party sites. Opt out via the Digital Advertising Alliance at optout.aboutads.info

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.

Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security assessments to protect your personal information. However, no system is completely secure. In the event of a data breach that poses a risk to your rights or freedoms, we will notify affected users and relevant authorities as required by law.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child has provided us with personal information, contact us at info@oryx.so.

Employer and Business Account Holders

This section applies to businesses, employers, and recruiters who create accounts on oryx to post jobs, search candidate profiles, or otherwise use the platform in a professional capacity.

11.1

Information we collect from business users

Account and identity data: company name, business address, billing contact name, email address, and phone number

Billing and payment data: invoices, payment method details (processed via third-party processors), and transaction history
Job listing data: job descriptions, requirements, salary ranges, and posting activity
Communication history: messages exchanged with candidates or the oryx support team
Usage data: login activity, search queries, profile views, and platform interactions
Contractual data: subscription plan details, contract start and end dates, and agreed terms

11.2

How we use business account data

Provisioning and managing your business account and subscription

Processing payments and issuing invoices
Enabling candidate search, profile access, and application review within your permitted subscription tier
Sending platform updates, service notifications, and account-related communications
Analyzing aggregate platform usage to improve employer-facing features
Enforcing our Terms of Service and resolving disputes
Complying with legal and regulatory obligations

11.3

Candidate data accessed by employers

When a candidate consents to sharing their profile or applies to one of your job listings, you will receive access to their professional data as described in Section 2. By accessing candidate data through oryx, you agree to:

Use candidate data solely for legitimate hiring and recruitment purposes
Not resell, redistribute, or transfer candidate data to any third party without the candidate's separate consent
Comply with all applicable employment and anti-discrimination laws
Delete candidate data upon request or when no longer required for hiring purposes
Maintain appropriate security measures to protect any candidate data accessed through the platform

Oryx acts as a data intermediary in this context. Employers are independently responsible for their own compliance with applicable privacy and employment laws.

11.4

Retention of business account data

We retain business account data for the duration of the subscription and for 7 years following account closure, as required for tax, audit, and legal compliance. Payment records are retained in accordance with applicable financial regulations. You may request deletion of non-legally-required data by contacting info@oryx.so.

Third-Party Links

Our platform may contain links to employer websites and third-party job boards. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before submitting any personal information.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website at least 30 days before the changes take effect. Continued use of our services after the effective date constitutes acceptance of the updated policy.