This analysis describes what Indeed's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated terms authorize Indeed to process personal data for a broader range of purposes, including fraud, abuse, platform-security threats, and risks to users or the public. The policy now explicitly states that Indeed may share information with law enforcement, regulators, and government authorities where lawful and appropriate, including in cases where sharing is voluntary rather than in response to compulsory legal process. For job seekers, device information is now included when applications are transferred to employers' systems, such as applicant tracking systems or scheduling platforms.
View change record →The updated policy explicitly includes phone number as a type of device information that Indeed collects. Previously, the policy described device information as limited to IP address, device ID, and user agent. Additionally, the policy now states that Indeed relies on legitimate interests not only for keeping sites safe and secure, but also for 'improving our Sites and services', which broadens the stated basis for processing personal data. These changes formalize expanded data collection categories and processing justifications under the same legal framework.
View change record →How other platforms handle this
You may have the right to object to or opt out of certain uses of your information.
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
to object to profiling activities based on our own legitimate interests
"You also have the right to object or opt out of your personal data being sent to a third party [excluding vendors who act as our service provider] / controller by emailing privacy-dept @ indeed.com...Excerpt from Indeed's Privacy Policy
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause states: “You also have the right to object or opt out of your personal data being sent to a third party [excluding vendors who act as our service provider] / controller by emailing privacy-dept @ indeed.com...”
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Indeed.