Key Facts
What may employers use Indeed to generate?
Employers may use Indeed to generate an AI-powered summary evaluation and a match score reflecting how well a job seeker meets the employer's must-have and nice-to-have criteria, based on the employer's job criteria.
When may users invoke binding arbitration?
Under certain conditions, users may invoke binding arbitration for some residual DPF complaints not resolved by other redress mechanisms.
When does Indeed collect demographic data?
Indeed collects demographic data only with the user's consent and only in markets where such collection is permitted.
Does Indeed collect demographic data only with the user's consent?
Indeed collects demographic data only with the user's consent and only in markets where such collection is permitted.
What may linked users have access to?
An employer who invites other Indeed users to link their accounts agrees that those linked users may have access to any and all information in the employer's account.
What does Indeed have access to by opting into the Gmail integration feature?
By opting into the Gmail integration feature, users agree that Indeed will have access to their emails to scan for relevant job application information.
What does Indeed purchase from third parties?
Indeed purchases resumes and other profile information from third parties where permitted by applicable law and in line with its Privacy Policy.
How is a user's profile set by default when created on Indeed?
When a user creates a profile on Indeed, it is set so that employers can find the user by default.
What data does Indeed collect from all users?
Indeed collects site activity data from all users, including users of private browsing mode, incognito mode, or similar modes.
What right do US users have?
US users have the right to opt out of the processing of their personal data for purposes of its sale, where sale means providing personal data to a third party for monetary or other valuable consideration.
2 important changes detected
3 versions captured · Last updated: August 2026
What changed
Indeed revised its privacy policy in an update detected on August 13, 2026 to expand the categories of personal data it processes for safety and security purposes. The previous language stated the company processes data for detecting, investigating, and preventing illegal activities; the updated policy now includes fraud, abuse, platform-security threats, and risks to users or the public. Additionally, the policy now explicitly states that Indeed may share this information with law enforcement, regulators, and government authorities where lawful and appropriate, including cases where sharing is voluntary rather than compelled. The policy also expanded the types of candidate information shared with employers' hiring platforms to include device information alongside application details and contact information.
Why this matters
The updated policy expands the purposes for which Indeed processes personal data to include fraud, abuse, platform-security threats, and risks to users or the public, beyond the prior focus on illegal activities. The revised terms now explicitly authorize sharing such information with law enforcement, regulators, and government authorities on a voluntary basis where lawful and appropriate. For job seekers, the policy now specifies that device information will be included when sharing application and candidate data with employers' Applicant Tracking Systems and scheduling platforms. These changes broaden the categories of data that may be processed and disclosed without requiring affirmative user consent for each disclosure.
View full change record →
What changed
Indeed's privacy policy was updated on July 20, 2026, with three operational changes. First, phone number is now listed as a category of device information the platform collects. Second, the legitimate interests basis for data processing was expanded to explicitly include improving Indeed's sites and services, beyond the previous focus on site security and valid service provision. Third, references to the Joint Controller Addendum and email contact URL were removed or updated.
Why this matters
The updated policy now explicitly states that phone numbers are collected as part of device information, in addition to IP addresses and user agent data. The legal basis for collecting and processing user data was also expanded to include improving Indeed's sites and services, beyond the prior focus on site security and service validity. These changes broaden the scope of personal information collected and the purposes for which Indeed may use that information under its stated legitimate interests framework.
View full change record →