Privacy Policy
Effective: 27 April 2026
This Privacy Policy explains how RisePoint Careers Corp. ("RisePoint," "we," "us," or "our") collects, uses, shares and protects personal information in Spark Enterprise at https://hire.risepointcareers.com and on https://risepointcareers.com (together, the "Service"). It applies to organizations that subscribe to Spark Enterprise ("Customers"), their personnel and authorized users, people who apply for jobs through the Service ("Candidates"), and visitors to our websites.
If you use SparkCareers to look for work, see the SparkCareers Privacy Policy.
Our role
Depending on the information, RisePoint acts in one of two roles:
- Controller, for information we collect directly about Customers, their personnel, prospects and website visitors, and for SparkCareers job seeker profiles we make available in the Talent Pool (section 5).
- Processor (service provider), for personal information Customers upload to or create in the Service about Candidates, applicants and employees. The Customer is the controller of that information, and our processing is governed by our Data Processing Agreement.
If you are a Candidate with questions about how an employer handles your information, please contact that employer. We will help them respond.
Information we collect
Information you give us
- Account information: organization name, industry and address; your name, work email, role and password (stored as a one-way hash; we never see it).
- Billing information: plan, billing contact and tax identifiers. Card details are collected and held by our payment provider, Stripe. We do not store full card numbers.
- Content you upload or create: job descriptions, resumes, candidate profiles and notes, interview schedules, recordings and notes, assessments, messages to candidates, and employee records where you use our HR features.
- Support messages you send us.
Information collected automatically
- Usage data: pages visited, actions taken and features used.
- Device and log data: IP address, browser, operating system and access times, kept in application and audit logs.
- Cookies: see our Cookie Policy.
Information from other sources
- SparkCareers: profiles of job seekers who have chosen to be visible to recruiters (section 5), and the profile a Candidate shares when applying with a SparkCareers account.
- Identity and calendar providers, such as Google and Microsoft, if you connect them.
- Job boards and other platforms you connect to the Service.
How we use information
- To provide, secure and improve the Service.
- To sign users in, control access and detect abuse or fraud.
- To process billing, manage subscriptions and send service notices.
- To answer support requests and tell you about product changes.
- To run integrations you connect.
- To produce AI-assisted screening and summaries that help Customers review Candidates (section 4).
- To produce aggregated, de-identified statistics that do not identify anyone.
- To meet legal obligations and enforce our Terms.
We do not sell personal information. We do not use Candidate information to train AI models, and our AI providers may not use it to train theirs.
AI features
Some features, such as candidate screening summaries and interview notes, use AI services run by other companies, listed on our Service Providers page. We send them only the information needed for the task, such as resume content and the job description. AI output is a suggestion to help a person decide. It must not be the only basis for a hiring decision, and the Customer remains responsible for its hiring decisions.
Talent Pool
Customers on eligible plans can search the Talent Pool: profiles of SparkCareers job seekers who have chosen to be visible to recruiters. A Customer can see a job seeker's name, email address, phone number, location, job title, skills and resume, save them to a list, add notes, and invite them to apply.
When a Customer saves or contacts a job seeker, the Customer becomes the controller of the copy it keeps. Customers must:
- use Talent Pool information only to recruit for real roles;
- not sell it, export it in bulk, or add it to marketing lists;
- stop contacting a job seeker who asks them to; and
- delete a job seeker's information when they ask, or when we pass on their request.
When a job seeker turns off their visibility, they disappear from Talent Pool search. When they delete their SparkCareers account, we also remove them from Customers' saved Talent Pool lists.
Legal bases
Where the GDPR or UK GDPR applies, we rely on:
- Contract: to provide the Service to Customers and their users.
- Legitimate interests: to secure our systems, prevent fraud, and run and improve the Service, balanced against the rights of the people concerned.
- Consent: for marketing emails and non-essential cookies. Consent can be withdrawn at any time.
- Legal obligation: to comply with the law.
Canada
Where PIPEDA or similar provincial law applies, we collect, use and share personal information with knowledge and consent, except where the law allows otherwise (for example, business contact information used for business purposes). For sensitive information, including resume content and assessment results, we obtain express consent or rely on the Customer to obtain it. Consent can be withdrawn by contacting support@risepointcareers.com, subject to legal or contractual limits.
For individuals in Quebec, we follow the Act respecting the protection of personal information in the private sector (Law 25). Where AI-assisted outputs are used in a hiring process, Customers must tell Candidates and, on request, have a person review the outcome. We support Customers in doing so.
Who we share information with
- Customers and their authorized users, when we act as their processor, and Talent Pool profiles as described in section 5.
- Service providers who help us run the Service, under written contracts. See our Service Providers page.
- Platforms Customers connect, such as job boards and calendars, at the Customer's direction.
- Professional advisers, such as auditors and lawyers, under confidentiality.
- Authorities, where required by law or legal process, or to investigate a suspected breach of an agreement or the law.
- A buyer or successor in a merger, acquisition or asset sale, with notice where the law requires it.
Where information is stored
The Service is hosted in the United States, on servers run by Hostinger in Boston, Massachusetts. When personal information is transferred outside the country where it was collected, we use safeguards such as Standard Contractual Clauses and contracts with each provider to protect it.
How long we keep it
Customer account data is kept for the life of the subscription plus the grace period in our Terms. Candidate and employee data is kept for as long as the Customer directs, or until the Customer's account ends, after which it is exported on request and then deleted within the period set out in our Terms. Backups and audit records are deleted on their own schedule. We keep personal information only as long as needed for the purposes in this policy and as the law requires.
Your rights
Depending on where you live, you may have the right to:
- see the personal information held about you;
- correct it;
- delete it, subject to legal exceptions;
- limit or object to certain uses;
- get a copy in a format you can take elsewhere;
- withdraw consent; and
- complain to a data protection authority: in Canada, the Office of the Privacy Commissioner of Canada or your provincial commissioner; in the UK, the Information Commissioner's Office; in the EEA, your local authority.
Email support@risepointcareers.com. If you are a Candidate, please contact the employer first; we will help them respond.
US state privacy rights
Residents of California, Virginia, Colorado, Connecticut, Utah and other states with similar laws may have the rights above and the right to opt out of the "sale" or "sharing" of personal information and targeted advertising. We do not sell personal information and do not share Candidate information for advertising. Requests: support@risepointcareers.com. We verify requests using the email address on the account or other reasonable means.
Security
We protect personal information with encryption in transit and at rest, access controls, virus scanning of uploaded files, audit logs and an incident response process. Details are in our Security and Trust Statement, available on request.
Age limit
The Service is for business use by people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact support@risepointcareers.com and we will delete it.
Changes to this policy
We will update this policy as our practices change. Material changes will be announced by email to account administrators and by a notice in the Service at least 30 days before they take effect, unless the law requires a shorter period.
Contact
RisePoint Careers Corp.
Suite #193, 700 8th Avenue SW, Calgary, AB T2P 1H2, Canada
Privacy questions and requests: support@risepointcareers.com