See also our Platform Subscription Terms, our Sub-processor List, and our Data Processing Addendum.
GoPerfect ("we", "us") builds Perfect, an AI recruiting platform that helps employers find, screen and contact candidates. This policy explains what personal information we collect, why, who we share it with, and the rights you have. It covers several different relationships with us. Please read the section that applies to you.
Who is responsible for your data
| If you are | The controller is |
|---|---|
| A candidate whose profile is in the Perfect sourcing database (Section 2) | Talent Fabric Ltd, company number 516406675, Har Sinai 1, Tel Aviv 6511205, Israel |
| A website visitor, demo requester, platform user or business contact | Talent Fabric Ltd (contracts and billing are handled by our subsidiary Talent Fabric Inc) |
| A candidate or applicant whose data an employer processes through Perfect (their ATS data, their applications, outreach they receive) | The employer. We are their processor. See Section 3. |
Who this policy covers
- Website visitors, demo requesters, newsletter subscribers, job applicants and business contacts. Section 1 is for you.
- Candidates in the Perfect sourcing database. Section 2 is written for you. You may never have heard of us. Data protection law requires us to tell you what we hold and how to remove it.
- Users of the Perfect platform at a customer. Section 1 covers your account data. Everything you do inside the platform on your employer's behalf is covered by Section 3 and your employer's own privacy notice.
If an employer processes your data through Perfect (for example your application sits in an ATS connected to Perfect, or you received an outreach message sent through Perfect), this policy does not apply to that processing. The employer is the controller and we act only on their instructions. Please contact that employer directly.
Our services are designed for businesses and working professionals. We do not knowingly collect personal information from anyone under 16.
Summary
| Who you are | What we hold | Where it comes from | Why | Who sees it | How to opt out |
|---|---|---|---|---|---|
| Website visitor or business contact | Name, work email, company, job title, device and usage data | You, cookies, B2B data providers | Answer enquiries, marketing, analytics, run the service | Service providers, ad partners (with consent) | Unsubscribe link, cookie settings, privacy@goperfect.com |
| Candidate in the sourcing database | Professional profile: roles, employers, education, skills, location (city level), public profile links | Licensed data providers and public professional sources | Let employers find suitable candidates | Employers using Perfect, our service providers | Email privacy@goperfect.com: we remove you and block re-adding |
| Platform user at a customer | Account credentials, activity in the platform | You | Run your account, security | Your employer, our service providers | Through your employer |
1. Website visitors, platform users and business contacts
This section covers people who deal with us directly: through our website, a demo, marketing, events, a job application, or a Perfect account.
1.1 What we collect
Information you give us
- Demo requests, contact forms and newsletter sign-ups: name, work email, company, job title, phone number if you provide it, and your message.
- Account information when you or your employer create a Perfect account: name, work email, login credentials, role, and settings.
- Billing information: company billing details and the fact that a payment was made. Card details are collected and stored by our payment provider, Stripe, not by us. See Stripe's privacy policy.
- Communications with us: emails, support tickets, chat messages and call notes.
- Job applications: CV, contact details, employment history and anything else you choose to share.
Information we collect automatically
- Device and usage data when you use the website or the platform: IP address, browser and operating system, device type, pages visited, features used, time on page, referral source, and error logs.
- Session recordings inside the Perfect platform (clicks, navigation and screen interactions, with typed text masked) using LogRocket, which we use to troubleshoot problems and improve the product.
- Cookies and similar technologies. See Section 12.
Information from other sources
- Business contact details (name, work email, job title, company, public professional profile) from B2B data providers, event organisers and marketing partners, used to reach prospective customers in their professional capacity.
- Company-level insights: tools that identify which organisations (not which individuals) visit our website, based on IP address.
We do not collect sensitive information (such as health, ethnicity, religion, political opinions or sexual orientation) about the people covered by this section, except where you include it in a job application and the law permits us to hold it.
1.2 How we use it
- Provide, secure and improve the website and the Perfect platform.
- Respond to demo requests, questions and support tickets.
- Send product updates, newsletters and marketing to business contacts, with an opt-out in every message.
- Run analytics on how the website and platform are used.
- Show relevant advertising to people who have visited our website, where you have consented to marketing cookies.
- Process and assess job applications.
- Detect and prevent fraud, abuse and security incidents.
- Meet legal and accounting obligations and defend legal claims.
We also create aggregated or anonymised data from platform usage (for example, average time to first shortlist) to improve the product and publish benchmarks. This data cannot identify you.
1.3 Legal basis (EEA, UK and Switzerland)
| Activity | Legal basis | Notes |
|---|---|---|
| Running a Perfect account | Contract (Art. 6(1)(b)) | Our agreement with you or your employer |
| Responding to enquiries and demo requests | Legitimate interests (Art. 6(1)(f)) | Our interest in responding to business enquiries |
| B2B marketing and newsletters | Legitimate interests or consent (Art. 6(1)(f) / (a)) | Marketing is aimed at business professionals in their working role. Where the law requires consent, we ask for it. Opt out at any time. |
| Website analytics | Legitimate interests or consent | Essential analytics under legitimate interests; marketing cookies only with consent |
| Job applications | Steps before a contract (Art. 6(1)(b)) | Legitimate interests for keeping unsuccessful applications for a limited time |
| Security and fraud prevention | Legitimate interests | Keeping the service safe |
| Legal and accounting obligations | Legal obligation (Art. 6(1)(c)) | Tax, accounting and regulatory records |
1.4 How long we keep it
See Section 8.
1.5 Your rights
See Section 10.
2. Candidates in the Perfect sourcing database
This section is for you if your professional profile appears in the Perfect sourcing database. You do not need to have used our website or spoken to us for this section to apply. If you want your profile removed, go straight to Section 2.9.
2.1 Who we are
Talent Fabric Ltd, an Israeli company trading as GoPerfect, is the controller for the sourcing database. Contact details are in Section 16.
2.2 What we hold about you
Your profile may include some or all of the following professional information:
- Name and public professional profile identifiers, such as a public profile URL.
- Work history: job titles, employers, dates and work locations.
- Education, qualifications and certifications.
- Skills, languages and areas of expertise.
- Location at city or region level. We do not hold home addresses.
- Publicly available professional profile content, such as headlines, summaries and publications.
What we do not hold. We do not hold special category data (health, ethnicity, religion, political opinions, sexual orientation, trade union membership) as fields in the database, and we do not use such data to match or rank candidates.
Predictions. When an employer runs a search, Perfect may estimate how likely you are to be open to a new role, and gives a 1 to 5 score for how closely your profile fits that specific job. These estimates are derived only from professional data. They are stored with that one search, for that one employer, and are not reused for other jobs or shown to other employers.
Contact details. When an employer using Perfect asks us to find contact details for a candidate, we obtain a work email address or phone number from licensed contact-data providers. We store those contact details with your profile so that we do not have to buy the same information twice. They are never shown in search results. Another employer sees them only after a recruiter at that employer has chosen you for a specific vacancy, by saving your profile or adding you to an outreach campaign. We are the controller for the contact details we hold. Employers who receive them are independent controllers for what they do with them.
2.3 Where your data comes from
We do not collect this data from you directly. It comes from:
- Licensed third-party data providers. We work with five licensed providers: one principal provider for baseline professional profile data, refreshed monthly; two providers that check a profile is current; and two contact-data providers that find work email addresses and phone numbers on an employer's request. We require each to have its own lawful basis for collecting and licensing the data, and we carry out due diligence before working with them. Their functions and locations are listed at goperfect.com/sub-processors; their names are available to customers on request.
- We do not collect profile data from websites ourselves. All profile data reaches us through licensed providers, who compile it from professional sources under their own terms and lawful basis.
2.4 Why we process it and on what basis
We process professional profile data to run an AI recruiting platform that lets employers find potentially suitable candidates for professional roles. In practice that means:
- Keeping a searchable database of professional profiles.
- Matching and ranking profiles against a specific job an employer is hiring for.
- Showing relevant profiles to the employer who ran the search.
Our legal basis is legitimate interests (Article 6(1)(f) EU and UK GDPR): ours in running the platform, our customers' in filling roles, and, we believe, yours in hearing about relevant opportunities. We have assessed this against your interests and rights. The data is limited to professional information you or a public source made available in a professional context, we exclude sensitive data, employers must review results before acting, and you can opt out at any time.
2.5 AI matching and scoring
See Section 4. In short: Perfect gives an employer a match score for your profile against one job, with the reasons for the score. The score exists only inside that search. It is not a permanent rating attached to your profile, and it is not shared with other employers. A recruiter at the employer decides whether to contact you. We do not decide whether you are suitable for a role.
2.6 Who we share it with
- Employers using Perfect, when their search identifies you as potentially relevant, and when they ask for your contact details. From that point the employer is an independent controller. They decide whether to contact you and their privacy notice applies. We do not contact you ourselves on our own behalf.
- Service providers who help us run the platform: hosting, databases, search, security, messaging and AI model providers acting on our instructions under contract. See Section 6.
- Our group companies, including Talent Fabric Inc (United States), which handles customer contracts and billing on our behalf.
We do not sell profile data to data brokers or advertisers, and we do not pool data one employer uploads to enrich profiles shown to other employers.
2.7 International transfers
See Section 7.
2.8 How long we keep it
Your profile appears in new searches for as long as it is included in our provider's monthly data refresh. Once a profile is no longer in the latest refresh, it stops appearing in new searches. Contact details we have obtained are kept with the profile for as long as the profile is active. Copies of your profile that an employer has already saved to their account stay in that account under the employer's control and their own retention rules; contact the employer to have those removed.
If you ask us to remove your profile, we delete it from the active database and keep a minimal record (a hashed identifier) solely so that it is not re-added on the next refresh. We keep that suppression record for as long as we run the database.
2.9 Your rights and how to be removed
| Right | What it means for you |
|---|---|
| Access (Art. 15) | Ask whether we hold a profile about you and get a copy |
| Erasure (Art. 17) | Ask us to delete your profile. We delete it and block re-adding |
| Object (Art. 21) | Object to our processing on legitimate interests grounds. We stop unless we can show compelling grounds, which for a sourcing profile we would not normally seek to do |
| Correction (Art. 16) | Ask us to correct inaccurate information |
| Restriction (Art. 18) | Ask us to pause processing while a correction or objection is considered |
| Complaint | Complain to your data protection authority. UK: the ICO (ico.org.uk). EEA: the authority in your country |
To be removed, email privacy@goperfect.com. We will confirm within 30 days (UK and EU) or 45 days (US). We may ask you to confirm your identity, for example by replying from an email address linked to the profile, so that we do not remove or disclose someone else's data.
3. Data we process on behalf of customers
When an employer uses Perfect, they bring their own data into the platform and generate new data through it. We call this Customer Data. It includes:
- Candidate and applicant records synced from the employer's applicant tracking system (ATS) or uploaded by the employer.
- Job descriptions and hiring criteria.
- Screening results and match scores generated for the employer's jobs.
- Outreach the employer sends through Perfect and the responses to it: emails, LinkedIn messages, and AI voice calls including their recordings and transcripts.
- Notes, feedback and decisions recruiters record in the platform.
For all Customer Data, the employer is the controller and we are the processor. We process it only to provide the service to that employer, under our Data Processing Addendum and their instructions. This policy does not apply to Customer Data. If you are a candidate or applicant and your data is in Perfect because an employer put it there or contacted you through it, please contact that employer to exercise your rights. If you contact us instead, we will pass your request to the employer where we can identify them.
Three commitments that matter to candidates and to employers:
- We do not pool one employer's Customer Data into a shared database, use it to enrich profiles shown to other employers, or show it to any other customer. The one exception is candidate contact details we obtain from our providers at an employer's request, which we keep in our own database and may show to other employers (Section 2.2). Contact details an employer brings from their own ATS are never shared.
- We do not use Customer Data to train shared or general-purpose AI models. Where Perfect learns what "good" looks like for a specific employer, that learning stays inside that employer's account.
- When the employer's agreement with us ends, the employer can export their Customer Data for 30 days (or the period stated in their agreement), and we then delete it within 30 days, so within 60 days of the agreement ending at most. Backups expire on the schedule in Section 8, and we keep records we must keep by law.
4. AI, match scoring and automated processing
Perfect uses AI to do three things: find profiles that match a job, score and explain how well a profile or application matches a job, and draft personalised outreach messages. This section explains what that means for you.
Match scoring. Perfect gives each candidate a score from 1 to 5 against one specific job, with the reasons in plain language, and may estimate how likely the candidate is to be open to a move. The score reflects how closely the professional information in the profile or application fits the criteria the employer set. Scores and estimates are stored only on that match, for that job, in that employer's account. They are not carried to other jobs, other employers, or back to the candidate's profile.
Applicant screening. When an employer uses Perfect to review applications, Perfect scores each application against the employer's stated requirements and suggests one of three labels: engaged, declined, or needs review. These labels are recommendations. Nothing is written back to the employer's applicant tracking system, and no candidate is advanced or rejected, until a recruiter at the employer reviews the results and chooses to sync them. Perfect does not reject anyone on its own.
What we do not use. We do not use special category data (health, ethnicity, religion, political opinions, sexual orientation, trade union membership), age, or gender as inputs to matching or scoring, and we do not infer these characteristics. An independent bias audit of our matching and screening models is scheduled for the first quarter of 2027.
Human involvement. A recruiter at the employer reviews results before any decision is made about a candidate. We design the platform so that a person, not the system, makes hiring decisions.
AI voice calls. In the United States and Canada, employers can ask Perfect to phone candidates using an AI voice agent, for example to introduce a role or ask a few screening questions. At the start of the call the agent tells you that it is an AI assistant calling on behalf of the named employer, that the call is recorded, and asks whether you want to continue. The call only goes ahead if you say yes. We call once: if you answer, we do not call again about that role; if there is no answer, we may try again later. If you say you do not want to be called, the agent stops, a person at the employer is told, and you receive no further calls from that employer about that role; the employer's messages on other channels about that role continue unless you say you are not interested. If you say you are not interested, all outreach to you about that role stops. These responses apply to the employer and role in question; to stop every employer using Perfect from contacting you, ask us to remove your profile (Section 2.9), which blocks it for all of them. Calls are recorded and transcribed so the recruiter can review them; the recording and transcript are stored in the employer's account as Customer Data (Section 3) and deleted with it. The number we call comes either from our licensed contact-data providers or from a reply you sent to an earlier outreach message. We make these calls on the employer's instruction and the employer is the controller for them.
Your rights. You have the right to know that AI was used to score you, to ask for an explanation of the reasons, to give your view, to contest the result and to ask for a human to review it. If the employer scored you, ask the employer. If your profile came from our sourcing database and you want to know how matching works or object to it, contact us (Section 16).
Laws that regulate AI in hiring. Some places have rules about using automated tools to assess job candidates, and the rules mostly fall on the employer using the tool. Where an employer uses Perfect to screen or rank candidates in a place with such rules (for example New York City, which requires an employer to obtain an independent bias audit and give candidates notice before using an automated employment decision tool, or Colorado), the employer is responsible for the notices, audits and assessments that place requires. We give employers the documentation they need for that purpose: a description of how matching and scoring work, the data used, the human review built into the process, and the results of the independent bias audit we have scheduled for the first quarter of 2027, once it is complete. Perfect does not analyse video interviews, facial expressions, voice characteristics or any other biometric information.
The EU AI Act. Recruitment tools like Perfect are treated as high-risk AI systems under the European Union's AI Act. As the provider of Perfect, we are preparing to meet the requirements that apply to such systems from 2 December 2027, including technical documentation, logging, human oversight and post-market monitoring. Whatever the date, where you interact with an AI on our platform, whether a voice agent or an AI-drafted message, we tell you so.
5. Google user data and connected accounts
Some Perfect features let a platform user connect a Google Workspace account so Perfect can send outreach on your behalf and detect replies. When you connect a Google account, we access Google user data through Google API Services (including Google Workspace APIs) with your consent, limited to the scopes shown on the Google consent screen, and only to provide those features. The connection runs through our email integration provider, Nylas. Connecting is always your choice; nothing is connected until you approve it. For Google we request: openid, userinfo.email and userinfo.profile (to identify your account), gmail.send (to send messages you asked us to send) and gmail.modify (to read replies to those messages and mark them as handled). For Microsoft 365 we request: openid, email, profile, offline_access and User.Read (to identify your account and keep the connection alive), Mail.Send, and Mail.Read and Mail.ReadWrite (to read and mark replies). These read scopes technically allow access to the whole mailbox. Our code limits what Perfect actually fetches and stores to messages sent through Perfect and the replies to them; we do not read, store or index anything else.
Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements, and the Google Workspace API User Data and Developer Policy.
In particular:
- We use Google user data only to provide and improve the features you connected: sending the messages you asked us to send and reading replies so we can detect responses and stop follow-ups.
- We store only the messages sent through Perfect and the replies to them. We do not store, index or read the rest of your mailbox.
- We do not transfer Google user data to third parties except as needed to provide those features (for example, to Nylas and to the AI providers that help classify replies), to comply with law, or as part of a merger or acquisition with notice to you.
- We do not use Google user data for advertising and we do not sell it.
- No person at GoPerfect can read your live mailbox. Our support team can see only the conversations held inside the Perfect app.
- We do not use Google user data, raw or derived, to develop, improve or train general-purpose AI or machine learning models. Where a reply passes through a third-party AI model to work out whether it is a response from a candidate, the provider acts on our instructions under enterprise terms that stop it training on the data.
You can disconnect your Google account at any time in your Perfect settings or at myaccount.google.com/permissions. Disconnecting stops all access immediately. Messages already sent through Perfect and their replies remain in your account and are deleted with the rest of the account data, within 30 days after the export period that follows the end of the account or contract.
The same principles apply to a Microsoft 365 mailbox you connect for outreach. Personal Gmail accounts cannot be connected; only Google Workspace and Microsoft 365 work accounts.
LinkedIn. If you have a LinkedIn Recruiter or Sales Navigator account, you can connect it so Perfect can send a single LinkedIn InMail message to a candidate from your account as the first step of a campaign, and read the reply. Perfect does not send connection requests or follow-up LinkedIn messages. We do this through an integration provider, Unipile. We store only the messages sent through Perfect and the replies to them, not the rest of your LinkedIn inbox, and we delete them with your account data. Sending automated messages through your LinkedIn account may breach LinkedIn's user agreement and can lead LinkedIn to restrict your account; we show you this warning before you connect, and by connecting you accept that risk. To connect, you either paste your LinkedIn session cookies into Perfect or install our optional Chrome extension, Perfect: LinkedIn Connection Sync, which reads them from your browser and sends them to Perfect so the connection does not break when LinkedIn rotates them. Either way, we store the cookies encrypted and use them only for this connection. The extension does nothing until you allow it, reads nothing else, and has its own privacy notice at goperfect.com/privacy-policy-linkedin-connection-sync.
6. Who we share personal information with
We share personal information with:
- Employers using Perfect. Candidate profiles and contact details from the sourcing database, as described in Section 2. Employers may also direct us to share data with their own service providers.
- Service providers that work for us under contract. They may use the data only to provide their service to us. Our current sub-processors are:
- Hosting and data for customer accounts: Google Cloud Platform (US multi-region, EU on request), Amazon Web Services (file storage and content delivery, US), MongoDB Atlas, Confluent (data streaming). Processing of the sourcing database only, with no customer or user data: SingleStore, Qdrant (search index), Databricks (data processing)
- Messaging on your behalf: Nylas (email connection), SendGrid (email delivery), Unipile (LinkedIn messaging), Retell (AI voice calls to candidates, including recording and transcription)
- Integrations and access: Merge (ATS integration), Frontegg (authentication)
- Operations: Datadog (monitoring and logs), LogRocket (session replay of platform users, for troubleshooting), Intercom (customer support chat), Stripe (payments)
- Candidate data providers: our baseline profile provider, two profile-verification providers and two contact-data providers (Section 2.3). A full, dated sub-processor list is at goperfect.com/sub-processors and we give customers notice of changes to it.
- AI model providers. Perfect uses large language models through enterprise APIs: Google (Gemini) sees candidate profile and job data only, for matching and scoring; Anthropic (Claude) also sees message content, for classifying replies and drafting outreach. Under those terms neither provider trains on our data, and each retains request data for up to 30 days for abuse monitoring before deleting it. We also run an open-weight embedding model on our own infrastructure; no data leaves our environment for that step.
- Data providers, in the limited sense that we may send an identifier back to a provider to obtain or verify contact details on an employer's instruction (Section 2.2).
- Our group companies, including Talent Fabric Inc (United States), our subsidiary that handles customer contracts and billing, to run our business.
- Advertising and analytics partners, only for website visitors and only where you have accepted marketing cookies. See Section 12.
- Professional advisers: lawyers, accountants, auditors and insurers.
- Authorities and other parties where we believe in good faith that the law requires it or that it is necessary to protect our rights, our customers, or the public.
- A buyer or investor, in connection with a merger, acquisition, financing, reorganisation or sale of all or part of our business, including during negotiations. We would require them to honour this policy for data collected under it.
We do not sell personal information for money. Making sourcing profiles available to employers may count as a "sale" or "sharing" under some US state laws; Section 11 explains how to opt out.
7. International transfers
Talent Fabric Ltd is an Israeli company; most of our team is in Israel, our subsidiary Talent Fabric Inc is in the United States, and we have sales staff in the UK. The European Commission and the UK government both recognise Israel as providing adequate protection for personal data, so data can be transferred to us from the EEA and the UK without further safeguards. Our platform and the sourcing database are hosted on Google Cloud Platform and Amazon Web Services in the United States, with EU hosting available to customers on request. Personal information may therefore be transferred to, stored in or accessed from countries other than your own, including Israel and the United States.
Where data leaves the EEA, the UK or Switzerland, we rely on one of the following:
- An adequacy decision. The European Commission and the UK government both recognise Israel as providing adequate protection for personal data. The European Commission's review of the Israel decision, published in January 2024, confirmed it.
- Standard Contractual Clauses approved by the European Commission, with the UK International Data Transfer Addendum where UK data is involved, plus a transfer risk assessment.
- For US service providers certified under the EU-US Data Privacy Framework and its UK extension, that framework.
You can ask for a copy of the safeguards we rely on by contacting us (Section 16).
8. How long we keep personal information
We keep personal information only as long as we need it for the purpose we collected it, then delete or anonymise it. The periods below are our defaults.
| Data | How long |
|---|---|
| Sourcing database profiles and contact details | While included in our provider's monthly refresh; profiles no longer in the latest refresh stop appearing in new searches. Copies saved to an employer's account stay under that employer's control |
| Suppression records for candidates who opted out | For as long as we run the database, hashed, used only to prevent re-adding |
| Perfect account data | While the account is active, then deleted within 30 days after the export period ends |
| Customer Data | While the customer's agreement is in force, then deleted within 30 days after the export period ends (within 60 days of termination at most) |
| Match scores, predictions and screening results | With the job they relate to, inside the customer's account, deleted with it |
| Messages sent through Perfect and their replies | With the account, deleted within 30 days after the export period ends |
| Enquiries, demo requests and CRM records | Until you ask us to stop or 24 months after our last contact with you |
| Marketing preferences and opt-outs | Indefinitely, so we honour them |
| Job applications | Recruitment process plus 12 months, unless you agree to longer |
| Website analytics | Anonymised or aggregated within 12 months |
| System and security logs | 90 days |
| Billing and tax records | 7 years, as required by law |
| Support tickets and correspondence | 3 years |
Our database is backed up daily. Daily backups are kept for two weeks, weekly backups for one month and monthly backups for one year, after which they are destroyed. This means data deleted from live systems may remain in a backup for up to twelve months. Data in backups is not restored to live systems except to recover from an incident. We may keep data longer where the law requires it or to defend a legal claim.
9. Security
We protect personal information with technical and organisational measures appropriate to the risk, including encryption in transit and at rest, single sign-on and role-based access controls, logging and monitoring, independent penetration testing, and staff security training. Our security controls have been independently examined: we hold a SOC 2 Type 2 report (security criteria) issued by PwC Israel, and we make it available to customers under NDA.
No system is completely secure. If we become aware of a security incident that affects your personal data, we will notify you and the relevant authorities as required by law, and for Customer Data we will notify the affected customer without undue delay, and within 72 hours of confirming the incident, under our Data Processing Addendum.
10. Your rights and how to exercise them
Depending on where you live and how you deal with us, you can ask us to:
- Tell you what personal information we hold about you and where it came from.
- Give you a copy in a portable, machine-readable format.
- Correct information that is wrong or out of date.
- Delete your information, subject to legal exceptions (for example, records we must keep for tax).
- Stop or restrict certain uses, including objecting to processing based on legitimate interests and to direct marketing.
- Withdraw consent where we rely on it. This does not affect processing already done.
- Remove your profile from the sourcing database and block it from being re-added (Section 2.9).
- Opt out of targeted advertising and of any "sale" or "sharing" of your data under US state law (Section 11).
- Ask for human review of an AI-generated score or result (Section 4).
- Appeal if we decline your request, by replying to our decision or emailing privacy@goperfect.com with the subject "Appeal".
How to ask. Email privacy@goperfect.com, or write to the address in Section 16. Put "privacy request" in the subject line so we can track it.
Timing. We respond within 30 days for UK and EU requests and 45 days for US requests, extendable once where the law allows and we tell you why.
Verification. We may ask you for information to confirm you are the person the data is about, or that you are authorised to act for them. We use that information only for verification and delete it afterwards. You can appoint someone to act for you; we will ask for written authority signed by both of you, or a power of attorney.
No penalty. We will not treat you differently for exercising your rights.
Limits. We may decline or limit a request where fulfilling it would harm someone else's rights, prevent us providing a service you asked for, or breach a legal obligation. We will explain why.
Complaints. If you are unhappy with our response you can complain to your data protection authority. In the UK: the Information Commissioner's Office, ico.org.uk. In the EEA: the supervisory authority in your country, listed here. In Switzerland: the FDPIC. In Israel: the Privacy Protection Authority.
Marketing opt-out. Every marketing email has an unsubscribe link; reply STOP to any marketing text. We may still send service messages about your account.
Customer Data. If your data is in Perfect because an employer put it there, please contact the employer (Section 3).
11. US state privacy rights
California (CCPA/CPRA)
If you are a California resident, you have the right to know, access, correct and delete your personal information, to opt out of sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights.
Website visitors and business contacts. In the last 12 months we collected identifiers (name, email, IP address), professional information (job title, company), commercial information (services you enquired about) and internet activity (pages visited, device data), from you, from cookies and from B2B data providers, for the purposes in Section 1. We disclose these to service providers and, where you accept marketing cookies, to advertising partners. That disclosure may count as "sharing" for cross-context behavioural advertising. Opt out by emailing privacy@goperfect.com with "Do not sell or share" in the subject line, or by turning on Global Privacy Control in your browser, which we honour.
Sourcing database candidates. We hold professional information as described in Section 2, obtained from licensed data providers, and make it available to employers who subscribe to Perfect. However the law classifies this, we offer every California resident the right to know what we hold and where it came from, to correct it, to delete it and block re-adding, and to stop us making their profile available to employers. Email privacy@goperfect.com. We do not knowingly sell or share the personal information of anyone under 16.
Other US states
Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with comprehensive privacy laws have similar rights, including to access, correct, delete and port their data, to opt out of targeted advertising and sales, and to opt out of profiling that produces legal or similarly significant effects. We honour valid requests from any US resident regardless of state. Response time is 45 days.
Other countries
If you live outside the UK, EEA, Switzerland, Israel or the US, you may have rights under your local law. We will consider any request. Contact us as set out in Section 16.
12. Cookies and tracking
We use cookies and similar technologies on our website and in the platform:
- Essential cookies to make the site and platform work, keep you logged in and protect against fraud. These do not need consent.
- Analytics cookies to understand how the site is used (for example Google Analytics).
- Marketing cookies to show relevant ads on other sites to people who visited ours and to measure campaigns (for example LinkedIn Insight Tag, Google Ads).
Where the law requires it, we ask for your consent before setting non-essential cookies, and you can change your choice at any time through the cookie banner or by emailing privacy@goperfect.com. You can also block cookies in your browser, which may affect some features. We honour the Global Privacy Control signal as an opt-out of sale, sharing and targeted advertising. We do not respond to other Do Not Track signals because there is no agreed standard. A full list of the cookies we use is available on request from privacy@goperfect.com.
13. Children
Our services are for businesses and working professionals. We do not knowingly collect personal information from anyone under 16, and we do not include profiles of people we know to be under 16 in the sourcing database. If you believe we hold a child's data, contact us and we will delete it.
14. Other websites and services
Our website and platform link to and integrate with third-party services (ATS providers, LinkedIn, Google, Microsoft and others). This policy does not cover them. Check their privacy notices.
15. Changes to this policy
We will update this policy when our services or the law change. The date at the top shows when. For significant changes we will post a prominent notice on our website and, where the law requires it, email account holders before the change takes effect. Candidates in the sourcing database cannot be emailed by us, so significant changes for them will always appear at this address; please check back periodically.
16. Contact us
Privacy requests: privacy@goperfect.com
Questions and complaints: privacy@goperfect.com
Data Protection Officer: Idan Shaked, VP R&D, privacy@goperfect.com
Talent Fabric Ltd (trading as GoPerfect), company number 516406675, Har Sinai 1, Tel Aviv 6511205, Israel
Talent Fabric Inc (US subsidiary, customer contracts and billing), 250 Greenwich Street, Floor 10, New York, NY 10007, United States
EU representative (Art. 27 EU GDPR): to be appointed; details will be published here.
UK representative (Art. 27 UK GDPR): to be appointed; details will be published here.
If an employer processed your data through Perfect (Section 3), please contact that employer first. We will forward requests we receive to the employer where we can identify them.