Key Facts
What may Employers use Indeed to generate?
Employers may use Indeed to generate an AI-powered summary evaluation and a match score based on Employer job criteria, where the score reflects how well the Job Seeker meets Employer 'must-have' and 'nice-to-have' criteria.
What does the match score reflect?
Employers may use Indeed to generate an AI-powered summary evaluation and a match score based on Employer job criteria, where the score reflects how well the Job Seeker meets Employer 'must-have' and 'nice-to-have' criteria.
When does Indeed collect demographic data?
Indeed only collects demographic data with the user's consent, and only in markets where such collection is permitted.
Does Indeed only collect demographic data with the user's consent, and only in markets where such collection is permitted?
Indeed only collects demographic data with the user's consent, and only in markets where such collection is permitted.
What will deleting an Indeed account terminate?
Deleting an Indeed account will terminate access to linked Glassdoor services, because the accounts cannot be unlinked once merged.
Why will deleting an Indeed account terminate access to linked Glassdoor services?
Deleting an Indeed account will terminate access to linked Glassdoor services, because the accounts cannot be unlinked once merged.
What access may linked users have if an Employer invites other Indeed users to link their accounts?
If an Employer invites other Indeed users to link their accounts, those linked users may have access to any and all information in the Employer's account.
Does Indeed store a user's full card number?
Indeed never stores a user's full card number.
What is set by default when a user creates a profile on Indeed?
When a user creates a profile on Indeed, it is set by default so that employers can find the user, meaning profile data including resume data may be available to third parties such as employers, except as otherwise indicated on the Site.
May profile data including resume data be available to third parties such as employers when a user creates a profile on Indeed?
When a user creates a profile on Indeed, it is set by default so that employers can find the user, meaning profile data including resume data may be available to third parties such as employers, except as otherwise indicated on the Site.
2 important changes detected
3 versions captured · Last updated: August 2026
What changed
Indeed expanded its data processing and sharing practices in an update detected on August 13, 2026. The policy previously stated that Indeed processes personal data for 'the prevention, detection, and investigation of illegal activities' and did not explicitly describe fraud or abuse-related processing. The updated terms now authorize processing personal data for 'prevention, detection, investigation, and response to fraud, abuse, platform-security threats, illegal activity, and risks to users or the public,' and explicitly permit sharing this information with law enforcement, regulators, and government authorities where lawful. Additionally, the policy now specifies that candidate information sent to employers' systems may include 'device information' alongside contact details.
Why this matters
The updated terms authorize Indeed to process personal data for a broader range of purposes, including fraud, abuse, platform-security threats, and risks to users or the public. The policy now explicitly states that Indeed may share information with law enforcement, regulators, and government authorities where lawful and appropriate, including in cases where sharing is voluntary rather than in response to compulsory legal process. For job seekers, device information is now included when applications are transferred to employers' systems, such as applicant tracking systems or scheduling platforms.
View full change record →
What changed
Indeed's privacy policy was updated in an update detected on July 21, 2026. The policy now explicitly lists phone number as a category of device information collected, alongside IP address, device ID, and user agent. Additionally, the legitimate interests basis for data processing was expanded to include 'improving our Sites and services' beyond the previous scope of keeping sites safe and secure. A reference to the Joint Controller Addendum was removed from the policy.
Why this matters
The updated policy explicitly includes phone number as a type of device information that Indeed collects. Previously, the policy described device information as limited to IP address, device ID, and user agent. Additionally, the policy now states that Indeed relies on legitimate interests not only for keeping sites safe and secure, but also for 'improving our Sites and services', which broadens the stated basis for processing personal data. These changes formalize expanded data collection categories and processing justifications under the same legal framework.
View full change record →