Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes ZipRecruiter's global privacy policy governing the collection, use, and disclosure of personal information on its job search and recruiting platform. The policy authorizes collection of resumes, job application history, browsing behavior, device identifiers, and data from connected third-party accounts, with authorized uses including AI-driven job matching and sharing with employers, advertising networks, and analytics providers. The document establishes data subject rights including access, correction, and deletion requests, with California residents granted additional rights under the California Consumer Privacy Act.
This document is ZipRecruiter's Global Privacy Policy (effective August 12, 2025), governing data collection, use, storage, and disclosure across its employment marketplace websites in the U.S., Canada, Australia, New Zealand, India, EEA, UK, and Switzerland, with stated legal bases varying by jurisdiction including consent, contractual necessity, and legitimate interests. The policy states that ZipRecruiter collects Identity Data, Contact Data, Financial Data, Technical Data, Profile Data, Usage Data, and Sensitive Personal Data categories; the terms authorize sharing with third-party employers, analytics providers, advertising networks, affiliated entities within the ZipRecruiter Group, and service providers, and explicitly permit the use of AI and machine learning to match job seekers and employers. The policy operates as a dual-framework document with materially different provisions for EEA/UK/Switzerland users versus U.S./Canada/Australia/New Zealand/India users, reflecting GDPR obligations for the former and a more permissive data use posture for the latter; the terms also authorize collecting data about non-users from third-party sources, which is operationally distinct and may warrant scrutiny under applicable consumer protection frameworks. The policy expressly engages GDPR, the UK GDPR, CCPA/CPRA (with a dedicated California Privacy Notice), the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, with FTC jurisdiction confirmed over DPF compliance; Indian users are covered under the non-EEA section despite the Digital Personal Data Protection Act 2023 coming into force, which may require separate evaluation. Data transfers from EU/UK/Switzerland rely on DPF certification, but given the legal history of EU-U.S. transfer mechanisms, organizations relying on this policy for compliance should monitor DPF stability as a material risk.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trialMonitoring
ZipRecruiter has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle AI and Machine Learning Job Matching and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.