Cantaloupe Technologies Corporation (Cantaloupe AI) Privacy and Data Usage Policy

At Cantaloupe Technologies Corporation (Cantaloupe AI), we prioritize the privacy and security of your personal information. This Privacy and Data Usage Policy outlines how we collect, use, disclose, and protect your data when you interact with our services, particularly in relation to our AI-powered employment decision tools, and outlines your rights under applicable federal and state laws, including the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Illinois Artificial Intelligence Video Interview Act (AIVIA), New York Local Law 144, and other data privacy regulations across all 50 states.

By using Cantaloupe AI’s services, you agree to the terms of this Privacy Policy.

1. Data Collection

We collect information to provide our services effectively, ensuring compliance with all legal and regulatory requirements.

A. Personal Information

• Contact Information: Name, phone number, email address, mailing address.
• Job Application Data: Resume details, employment history, interview responses, turnover risk assessments, and related application materials.
• Employment Data: Job title, salary history, performance data (collected during interaction with hiring managers and automated AI systems).

B. Automatically Collected Data

• Device Information: IP address, browser type, device identifiers.
• Usage Data: Interaction patterns with our services, including time spent on the platform, pages viewed, and access times.
• Cookies and Tracking Technologies: We use cookies and other tracking tools to understand user behavior and improve our platform's performance.

C. Special Categories of Data

• Protected Categories: In some cases, and only with explicit consent, we may collect data related to race, gender, disability, or veteran status for lawful employment purposes, in compliance with applicable laws.

2. Purpose of Data Collection

We use the data collected for the following purposes:

• Service Delivery: To provide AI-powered job screening services, including pre-screening interviews, turnover risk assessments, and employer reports.
• Improvement of Services: To analyze usage patterns, improve our AI algorithms, and enhance user experience.
• Compliance: To comply with applicable legal obligations, industry standards, and privacy laws.
• Marketing and Communication: To send service updates, promotions, and relevant information about Cantaloupe AI’s offerings.

3. How We Share Your Information

We may share your data under specific circumstances, as outlined below.

A. Service Providers

We may share your data with third-party vendors, including Google Cloud Services, for purposes such as hosting, payment processing, marketing campaigns, and platform functionality. All third parties are contractually bound to protect your data under stringent security and privacy measures in compliance with CCPA and CPRA.

B. Employers

Hiring partners (such as hospitality employers) may receive data such as AI-generated pre-screening results and turnover assessments to aid in hiring decisions.

C. Legal Requirements

We may disclose your data if required by law or to respond to legal processes, subpoenas, or to protect the rights and safety of Cantaloupe AI, our users, or the public.

D. Sale of Data

We do not sell personal information for monetary value. However, we may share anonymized or aggregated data with third parties for business insights and non-personal use. In compliance with CCPA/CPRA, you have the right to opt out of any data sharing that qualifies as a sale. To exercise this right, email us at help@trycantaloupe.com. We do not sell personal phone numbers or sensitive data unless explicitly consented to by the user.

4. Data Security

We take reasonable security measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. Google Cloud Services, our primary hosting provider, complies with recognized security standards such as ISO 27001 and SOC 2. Security measures include access controls and other safeguards, but we do not encrypt all data at rest or in transit. We do not currently conduct formal security audits, though we periodically review our security practices.

While we strive to protect your personal data, no system is entirely secure, and we cannot guarantee absolute security.

In the event of a data breach, we will notify affected individuals in accordance with state data breach notification laws and other applicable regulations.

5. Consumer Rights

You have specific rights regarding your data under CCPA, CPRA, and other applicable privacy laws. These rights include:

A. Right to Know

You have the right to request details about the personal information we collect, including the sources of information, the purposes for collecting it, and the categories of third parties with whom we share your data.

B. Right to Delete

You may request that we delete your personal data, subject to certain exceptions (e.g., data necessary to comply with legal obligations or for legitimate business purposes).

C. Right to Opt-Out of Sale

You have the right to opt out of any sharing of personal information that qualifies as a sale under CCPA/CPRA. To opt out, email help@trycantaloupe.com.

D. Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights. You will not be denied services, charged different prices, or receive a different service level.

E. Right to Correct

If your personal data is inaccurate or incomplete, you have the right to request corrections.

F. Right to Limit Use of Sensitive Personal Information

You can limit the use or disclosure of sensitive personal information, especially for purposes not essential to the services we provide.

G. Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and transmit it to another controller.

H. Right to Opt-Out of Automated Decision-Making

You may opt out of automated decision-making processes, such as AI-based hiring algorithms, in compliance with New York Local Law 144 and other state laws. You can request an alternative process involving human review.

6. Bias Audits and Transparency in Automated Employment Tools

While we have not yet conducted bias audits, we plan to perform these audits annually once the service is fully operational, as required by New York Local Law 144. The results of these audits will be made available upon request to ensure compliance with anti-discrimination laws.

7. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including complying with legal, accounting, or reporting obligations. You may request deletion of your data at any time by contacting us at help@trycantaloupe.com.

8. Opt-In and Opt-Out for SMS Text Messages (10DLC Compliance)

We comply with 10DLC regulations for sending SMS messages. 10DLC (10-digit long code) supports compliant SMS messaging, particularly for business communications. We provide SMS services to keep you informed about job applications, interview statuses, and relevant updates. We do not sell mobile phone numbers or SMS message data to third parties.

A. Opt-In Policy

By providing your phone number, you consent to receive SMS messages from Cantaloupe AI, including notifications related to job applications, AI screenings, and marketing communications. All SMS messaging is compliant with 10DLC requirements.

B. Opt-Out Policy

You can opt out of SMS messages by replying "STOP" to any message or by contacting help@trycantaloupe.com. Your opt-out request will be processed within 48 hours. Standard message and data rates may apply. Message frequency varies, and carriers are not liable for delayed or undelivered messages.

9. Third-Party Links

Our platform may include links to third-party websites. This Privacy Policy does not apply to those websites. Please review their privacy policies before sharing any personal information.

10. Children's Privacy

Cantaloupe AI is not intended for individuals under 13. If we learn that we have collected data from a child under 13 without parental consent, we will delete it promptly.

11. Compliance with Laws Across All 50 States

We comply with privacy laws in all U.S. states, including:

• Data Breach Notifications: We will notify affected individuals of any data breach in accordance with state laws.
• Data Collection Limitations: We limit data collection to lawful purposes and in accordance with state regulations.
• Transparency: We maintain transparency in our data practices, providing clear, concise information in compliance with federal and state laws.

12. Changes to Our Privacy Policy

We may update this policy periodically. Any changes will take effect immediately upon posting. We encourage you to review this policy regularly.

13. Contact Us

If you have any questions regarding this policy, your data rights, or how your personal information is handled, please contact us at:

Cantaloupe Technologies Corporation Email: help@trycantaloupe.com Address: 900 Camp St., New Orleans, LA

By using our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

Opt Out of Text Alerts