Cantaloupe

Cantaloupe AI Privacy Policy

1. Introduction

Cantaloupe Technologies Corporation ("Cantaloupe AI," "we," "us," or "our") is committed to protecting your privacy and ensuring compliance with applicable data protection and employment laws, including the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), the Americans with Disabilities Act (ADA), Equal Employment Opportunity (EEO) laws, and U.S. state privacy laws. This Privacy Policy describes how we collect, use, and share your information when you use our AI-powered interview platform and related services. Cantaloupe AI is only for users 16+ years of age.

2. Information We Collect

2.1 Information You Provide Directly

  • Name, email, phone number, and job application details
  • Voice recordings and transcripts from AI-powered interviews conducted via Vapi AI
  • Responses to interview questions and structured assessment data
  • Text messages and responses in SMS-based communications
  • Information provided by employers and hiring managers using our platform
  • Any self-reported demographic information if submitted voluntarily

2.2 Information Collected Automatically

  • AI-analyzed behavioral and linguistic data from interviews
  • Device information (e.g., browser type, IP address, operating system)
  • Interaction data (e.g., how users engage with the AI interview system)
  • Metadata related to applicant assessments, including timestamps and hiring outcomes

2.3 Information from Third-Party Sources

  • Employers or organizations that use Cantaloupe AI for hiring
  • Third-party integrations (e.g., Vapi AI (voice processing), OpenAI (natural language processing), AWS (data hosting), and Fly.io (database infrastructure))
  • External reference checks and employment verification services when applicable

3. How We Use Your Information

We use collected data for the following purposes:

  • Conducting AI-driven interviews and voice-based pre-screening assessments
  • Processing and analyzing applicant responses using AI models to predict compatibility and early turnover likelihood
  • Reducing bias in hiring by ensuring all applicants receive a structured, standardized interview experience
  • Ensuring fair and non-discriminatory hiring practices through AI-driven consistency in evaluations
  • Maintaining ADA-compliant accessibility options (e.g., text-based alternatives for voice interviews, screen reader compatibility)
  • Communicating with users via email, phone, or SMS, in compliance with 10DLC regulations
  • Storing and analyzing applicant data for hiring insights and dashboard analytics
  • Complying with GDPR, CCPA, and state employment laws

4. SMS/Text Messaging Compliance

Cantaloupe AI enables SMS-based communications between employers and applicants. We comply with A2P 10DLC regulations, including:

  • Consent: Users must opt in before receiving SMS messages
  • Opt-Out: Users can reply "STOP" to unsubscribe from SMS communications
  • Messaging Transparency: Employers must disclose the nature and frequency of SMS communications
  • Data Protection: SMS interactions are stored securely and not shared for marketing purposes

5. Data Sharing and Transfers

We do not sell personal data. We may share data with:

  • Employers using our platform for hiring purposes
  • Cloud service providers (e.g., AWS, Fly.io) for secure storage and AI model training
  • AI technology partners (e.g., OpenAI, Anthropic, Vapi AI) for voice processing and automated assessments
  • Legal authorities if required for compliance

We use Standard Contractual Clauses (SCCs) for GDPR compliance when transferring data internationally.

6. Your Privacy Rights

6.1 General Rights

Under the CCPA, GDPR, and other U.S. state privacy laws, you have the following rights:

  • Right to Know – You have the right to request details about the personal information we collect and how we use it
  • Right to Access – You may request a copy of the personal data we have collected about you
  • Right to Correct – If your information is inaccurate or incomplete, you can request corrections
  • Right to Delete – You may request that we delete your personal information, subject to certain legal obligations
  • Right to Opt-Out of Data Sharing – You may opt-out of any data sharing for targeted advertising or other secondary uses
  • Right to Non-Discrimination – We will not discriminate against you for exercising your privacy rights

To exercise any of these rights, contact us at help@trycantaloupe.com.

6.2 California Consumer Privacy Act (CCPA) Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information:

6.2.1 Right to Know

You have the right to request that we disclose the following information about the personal data we've collected over the past 12 months:

  • The categories of personal information collected
  • The sources of that information
  • The business or commercial purposes for collecting or sharing it
  • The categories of third parties we may share it with
  • The specific pieces of personal information we've collected about you

6.2.2 Right to Delete

You may request that we delete personal information we have collected from you, unless we need it to complete a transaction, detect security incidents, comply with legal obligations, or for other permitted uses.

6.2.3 Right to Opt-Out

You have the right to opt out of the sale or sharing of your personal information. If we sell or share your personal information, we will provide a clear and accessible way for you to opt out.

6.2.4 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. That means no denial of services, no different prices or rates, and no lower quality of service.

6.2.5 Right to Correct Inaccurate Information

If you believe we hold inaccurate personal information about you, you have the right to request that we correct it.

6.2.6 Right to Limit Use of Sensitive Personal Information

You can ask us to limit how we use or disclose sensitive personal information, such as precise geolocation or specific demographic details, to only what's necessary to perform essential services.

7. Security Measures

All applicant data is securely transmitted and stored using industry-standard encryption and security protocols. We partner with trusted AI providers that comply with best practices for data protection.

8. User Impersonation for Support

To provide effective customer support and troubleshooting, authorized Cantaloupe AI support personnel may access your account with your permission through a feature commonly known as "user impersonation" or "login as user." This feature is used exclusively for:

  • Diagnosing and resolving technical issues you report
  • Providing guided assistance with platform features
  • Investigating and resolving account-specific problems
  • Demonstrating functionality or helping with setup

When support personnel access your account:

  • All actions are logged and auditable
  • Access is limited to the minimum necessary to resolve your issue
  • Support staff cannot view passwords or payment card details
  • You may request a record of support access to your account
  • Support access is terminated immediately after issue resolution

By using our support services, you consent to this limited access. You may opt out of impersonation-based support by requesting alternative assistance methods.

9. Google and Microsoft Integrations and API Usage

Cantaloupe AI integrates with Google and Microsoft in order to schedule calendar events. We also use Google APIs to process and analyse user-provided locations in accordance with hiring needs.

9.1 Scope & Purpose

Cantaloupe AI requests only the calendar permissions from Google and Microsoft required to:

  • Read your availability (free/busy)
  • Create, update, reschedule or delete interview events on your behalf
  • Handle the scheduling process

9.2 Purpose of Requesting Google and Microsoft Data

We need Google and Microsoft data in order to book interviews between business users and job applicants, as well as facilitate joining the meeting, rescheduling, cancelling, and related functions. Calendar data is never sold, shared for marketing, or used for advertising profiles.

9.3 User Control

You may disconnect at any time via the Cantaloupe AI dashboard or in your Google or Microsoft account's security settings. Revocation stops all future reads and writes.

9.4 Security

Calendar tokens and metadata are encrypted in transit and at rest, and are accessible only to automated scheduling services that require them for the functions described here.

9.5 Compliance

Cantaloupe AI's use of Google and Microsoft user data is strictly limited to the practices described above, satisfying Google's API Services Limited-Use requirements and Microsoft's comparable API terms. Cantaloupe AI is not responsible for third-party provider outages or inaccuracies that lead to missed or conflicting events.

Important: Cantaloupe does NOT retain user data obtained through Google Workspace APIs or Google Calendar integrations to develop, improve, or train generalized AI and/or ML models.

10. Updates to This Policy

We may update this Privacy Policy as laws evolve. If we update this policy, we will require consent again before continuing to use the application. The latest version will be posted on our website.

11. Contact Information

For privacy-related questions or to exercise your rights, contact us at:

Email: help@trycantaloupe.com
Address: Cantaloupe Technologies Corporation, 201 Holiday Blvd, Covington, LA 70433

Last Updated: 07/02/2025

By using Cantaloupe AI services, you acknowledge that you have read and understood this Privacy Policy.