Privacy Policy | LAYAworks

Effective Date: April 9, 2026 · Last Updated: April 27, 2026

1. Introduction

LAYAworks ("LAYAworks," "we," "us," or "our") provides recruiting, hiring, applicant communication, interview scheduling, workflow automation, and related software services through layaworks.ai and related applications, integrations, APIs, and services (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Services.

This Privacy Policy applies to information collected from job applicants, employers, hiring teams, business users, administrators, website visitors, and others who interact with the Services.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of This Policy

Depending on the context, LAYAworks may process personal information:

on behalf of employer customers that use the Services to manage applicants, interviews, and hiring workflows; and
for LAYAworks' own business purposes, such as account administration, security, customer support, billing, compliance, and service improvement.

If you are a job applicant, the employer or hiring organization you apply to may independently determine how your application information is reviewed and used within their hiring process.

3. Information We Collect

3.1 Information You Provide Directly

We may collect personal information you provide directly through the Services, including:

full name
email address
phone number
mailing address
city, state, and postal code
employment history
scheduling availability
compensation expectations
job application responses
account profile information
business and company information
support inquiries and correspondence
other information you choose to submit through forms, workflows, integrations, or communications

3.2 Information Collected Automatically

When you use the Services, we may automatically collect certain technical and usage information, including:

IP address
browser type
device type
operating system
referral URLs
pages viewed
session activity
timestamps
clickstream data
login events
authentication attempts
error logs
API activity
security and fraud-prevention signals

We may use cookies, session technologies, and similar tools to support authentication, security, preferences, and platform functionality.

3.3 Information from Employers, Customers, and Third Parties

We may receive information from employer customers, hiring teams, and third-party services, including:

applicant information submitted by or on behalf of an employer
hiring and workflow information associated with job postings or interviews
profile and authentication information from connected sign-in providers
calendar and scheduling data from connected services
integration data needed to enable features requested by the user

4. How We Use Personal Information

We may use personal information to:

provide, operate, maintain, and improve the Services
create and manage user accounts
authenticate users and secure access
process job applications and hiring workflows
facilitate applicant tracking and interview scheduling
send service-related communications
send verification codes and account access communications
provide support and respond to inquiries
enable integrations and connected features
prevent fraud, abuse, unauthorized access, and misuse
monitor performance, diagnose errors, and maintain security
comply with legal obligations
enforce our agreements and platform rules
perform internal analytics and product improvement using aggregated or de-identified information where appropriate

5. Google User Data and Connected Account Data

LAYAworks may allow users to connect third-party accounts, including Google accounts, to enable features such as calendar syncing, scheduling support, and conflict checking.

5.1 Data We May Access Through Connected Accounts

When a user authorizes a Google integration or another connected account, LAYAworks may access only the data reasonably necessary to provide the requested functionality, such as:

account identity information
calendar identifiers
calendar event metadata
availability and busy/free information
integration tokens and related configuration data

5.2 How We Use Connected Account Data

We use connected account data only to support the feature the user enabled, including to:

authenticate the connected account
show available calendars or connected resources
allow a user to select which calendar or resource to use
create, update, or remove interview-related calendar events
check availability and prevent scheduling conflicts
maintain the connected integration requested by the user

5.3 Limited Use Commitment

LAYAworks does not use Google user data obtained through Google APIs for advertising, building advertising profiles, selling data, or serving third-party marketing purposes.

LAYAworks does not transfer Google user data to third parties except:

as necessary to provide or secure the Services
as required by law
as part of a merger, acquisition, financing, or asset transfer subject to lawful handling and confidentiality obligations

LAYAworks does not permit humans to read Google user data unless:

we have the user's affirmative agreement for a specific support or operational need
it is necessary for security purposes, including investigating abuse
it is required to comply with applicable law
the information has been aggregated and de-identified for internal operations

Any use of information received from Google APIs will comply with the applicable Google API Services User Data Policy, including the Limited Use requirements.

5.4 Revoking Access

Users may disconnect connected accounts where such functionality is available within the Services, and may also revoke access through the applicable third-party account permissions settings.

If access is revoked, certain features may stop working. LAYAworks may retain limited records related to the integration where reasonably necessary for security, audit, legal compliance, dispute resolution, or platform integrity.

6. AI Services and Automated Processing

LAYAworks may offer AI-assisted features to support recruiting, scheduling, search, drafting, summarization, and related workflow functions. When those features are used, LAYAworks may process relevant inputs through third-party AI service providers, including Anthropic's Claude and OpenAI's ChatGPT.

6.1 Data Processed Through AI Services

Depending on the feature used, LAYAworks may process data such as:

prompts, instructions, notes, and messages submitted through AI-enabled workflows
job descriptions, application materials, interview details, and scheduling context
limited workspace, user, role, and configuration data needed to return the requested output in the correct account context

If an AI-enabled workflow includes data from a connected service the user authorized, including Google integrations, LAYAworks limits the data sent to what is reasonably necessary for that workflow and subject to the restrictions described in Section 5.

6.2 How We Use AI Services

We may use AI services to:

generate or revise recruiting and workflow-related content at the user's direction
summarize, classify, or analyze job, applicant, interview, or scheduling information to support platform features
power conversational, search, or recommendation experiences within the Services

6.3 Provider Role and Restrictions

LAYAworks uses AI providers only as service providers acting on our behalf to deliver the features requested by the user or customer organization. LAYAworks does not sell personal information to these providers and does not permit them to use our data for their own independent marketing purposes. We require appropriate contractual, security, and access controls consistent with the role those providers perform for the Services.

7. Communications

LAYAworks may send service-related communications by email or other supported channels in connection with the Services, including:

verification codes
login and security alerts
account notices
application-related updates
interview scheduling confirmations
reminders and other service notifications

Where required by law, we will rely on the permissions, notices, or consent mechanisms applicable to those communications.

7.1 SMS / Text Messaging Program

When you provide your phone number and opt in to receive text messages from LAYAworks, you consent to receive the following types of SMS messages:

One-time verification codes for identity confirmation.
Application status updates (e.g., "Your application has been reviewed").
Interview scheduling confirmations and reminders.
Hiring process notifications (offers, next steps, onboarding).

7.2 Important SMS Disclosures

Message frequency varies. You may receive approximately 10 messages per month depending on your application activity.
Message and data rates may apply. Check with your mobile carrier for details about your messaging plan.
To stop receiving text messages at any time, reply STOP to any message you receive from us. You will receive a one-time confirmation message and no further texts.
For help, reply HELP to any message, or contact us at legal@layaworks.ai.
Carriers are not liable for delayed or undelivered messages.
Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent will not be shared with third parties except messaging providers required to deliver the service.
Consent to receive text messages is not a condition of purchasing any goods or services, or of applying for any job.

8. How We Share Information

LAYAworks does not sell personal information.

We may share personal information only as described below:

8.1 With Employer Customers and Hiring Teams

If you submit an application or otherwise engage with a job opportunity through the Services, your information may be shared with the employer, hiring organization, or authorized hiring team associated with that opportunity.

8.2 With Service Providers

We may share information with vendors and service providers that help us operate the Services, such as providers of:

cloud hosting
infrastructure
authentication
AI model and workflow providers
customer support tools
analytics
scheduling functionality
email and communication delivery
security and monitoring services

These providers may access personal information only as reasonably necessary to perform services for LAYAworks and subject to appropriate obligations.

8.3 With Connected Services You Authorize

If you connect a third-party integration, we may exchange information with that service as needed to enable the feature you requested.

8.4 For Legal and Security Reasons

We may disclose information where reasonably necessary to:

comply with law, regulation, subpoena, or legal process
protect the rights, safety, or property of LAYAworks, our users, or others
detect, investigate, or prevent fraud, security issues, abuse, or policy violations
enforce our agreements

8.5 Corporate Transactions

We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction, subject to applicable legal requirements.

9. Data Retention

We retain personal information for as long as reasonably necessary to:

provide the Services
maintain account functionality
support hiring workflows
comply with legal obligations
resolve disputes
enforce agreements
preserve business and security records
protect platform integrity

Retention periods may vary based on the type of information, the nature of the account relationship, legal requirements, support needs, security considerations, and whether the data is associated with an active account or workflow.

When personal information is no longer needed, we may delete it, anonymize it, or securely isolate it, unless continued retention is legally required or justified by legitimate operational needs.

10. Data Security

LAYAworks uses reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction.

These measures may include:

encryption in transit
access controls
authentication controls
role-based permissions
secure session handling
logging and monitoring
fraud-prevention mechanisms
platform security reviews and controls

No method of transmission or storage is completely secure, and LAYAworks cannot guarantee absolute security.

11. International Processing

Your information may be processed and stored in countries other than the country where you reside. Where required, LAYAworks takes reasonable steps to provide appropriate protections for personal information in connection with such processing.

12. Your Rights and Choices

Depending on your location and applicable law, you may have the right to:

request access to certain personal information
request correction of inaccurate information
request deletion of certain information
object to or request restriction of certain processing
withdraw consent where processing is based on consent
request portability of certain information
opt out of certain communications

If LAYAworks processes your information on behalf of an employer customer, we may direct your request to that customer where appropriate.

To make a privacy-related request, contact: legal@layaworks.ai

13. California and Other State Privacy Rights

Residents of certain U.S. states may have additional rights under applicable privacy laws, including rights related to access, deletion, correction, and information about categories of personal information collected, used, or disclosed.

LAYAworks does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms may be defined under certain state laws, unless this Privacy Policy is updated to state otherwise.

LAYAworks will not unlawfully discriminate against any person for exercising applicable privacy rights.

14. Children's Privacy

The Services are not directed to children under 16, and LAYAworks does not knowingly collect personal information directly from children under 16 through the Services.

If you believe a child under 16 has provided personal information through the Services, contact legal@layaworks.ai so we can review and take appropriate action.

15. Changes to This Privacy Policy

LAYAworks may update this Privacy Policy from time to time. If we make changes, we will post the updated version and revise the "Last Updated" date above.

Where required by law, or where changes are material, we may also provide additional notice through the Services or by other reasonable means.

16. Contact Information

If you have questions or requests regarding this Privacy Policy or LAYAworks' privacy practices, contact:

LAYAworks