This policy explicitly excludes from its scope the Personal Information that Greenhouse processes as a processor on behalf of enterprise customers, including job applicant data submitted through customer-hosted career pages; such data is governed by the respective customer's privacy policy.
This analysis describes what Greenhouse's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that individuals who apply for jobs through Greenhouse-powered career pages of third-party employers have no direct data rights relationship with Greenhouse under this policy and must contact the employer directly for data access, correction, or deletion requests.
This provision establishes that Greenhouse will redirect data subject requests related to customer-processed recruiting data back to the employing organization without taking action. Job applicants whose data is processed by Greenhouse on behalf of an employer must contact that employer directly to exercise data rights.
Cross-platform context
See how other platforms handle Processor vs. Controller Scope Distinction and similar clauses.
Compare across platforms →"Greenhouse is a leading provider of cloud-based software services that help companies manage and optimize their recruiting and hiring processes. Greenhouse processes personal data in the following contexts: 1. As a processor on behalf of its customers for recruiting and onboarding purposes. This Privacy Policy does not apply to Personal Information in this context. Our customers are the controllers of the Personal Information they collect through Greenhouse's Services to manage their own recruiting and onboarding processes (e.g., names, contact information, and other data collected as part of job applications), and each customer manages that Personal Information in accordance with its own privacy policies. Greenhouse's customer contracts require us to redirect inquiries relating to the Personal Information we process on behalf of a customer back to that customer without taking any action on the request.Excerpt from Greenhouse's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that individuals who apply for jobs through Greenhouse-powered career pages of third-party employers have no direct data rights relationship with Greenhouse under this policy and must contact the employer directly for data access, correction, or deletion requests.
This provision establishes that Greenhouse will redirect data subject requests related to customer-processed recruiting data back to the employing organization without taking action. Job applicants whose data is processed by Greenhouse on behalf of an employer must contact that employer directly to exercise data rights.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Greenhouse.