Privacy Policy & Terms - Cantaloupe AI

Cantaloupe AI Privacy Policy

1. Introduction

Cantaloupe Technologies Corporation ("Cantaloupe AI," "we," "us," or "our") is committed to protecting your privacy and ensuring compliance with applicable data protection and employment laws, including the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), the Americans with Disabilities Act (ADA), Equal Employment Opportunity (EEO) laws, and U.S. state privacy laws. This Privacy Policy describes how we collect, use, and share your information when you use our AI-powered interview platform and related services. Cantaloupe AI is only for users 16+ years of age.

2. Information We Collect

2.1 Information You Provide Directly

Name, email, phone number, and job application details
Voice recordings and transcripts from AI-powered interviews conducted via Vapi AI
Responses to interview questions and structured assessment data
Text messages and responses in SMS-based communications
Information provided by employers and hiring managers using our platform
Any self-reported demographic information if submitted voluntarily

2.2 Information Collected Automatically

AI-analyzed behavioral and linguistic data from interviews
Device information (e.g., browser type, IP address, operating system)
Interaction data (e.g., how users engage with the AI interview system)
Metadata related to applicant assessments, including timestamps and hiring outcomes

2.3 Information from Third-Party Sources

Employers or organizations that use Cantaloupe AI for hiring
Third-party integrations (e.g., Vapi AI (voice processing), OpenAI (natural language processing), AWS (data hosting), and Fly.io (database infrastructure))
External reference checks and employment verification services when applicable

3. How We Use Your Information

We use collected data for the following purposes:

Conducting AI-driven interviews and voice-based pre-screening assessments
Processing and analyzing applicant responses using AI models to predict compatibility and early turnover likelihood
Reducing bias in hiring by ensuring all applicants receive a structured, standardized interview experience
Ensuring fair and non-discriminatory hiring practices through AI-driven consistency in evaluations
Maintaining ADA-compliant accessibility options (e.g., text-based alternatives for voice interviews, screen reader compatibility)
Communicating with users via email, phone, or SMS, in compliance with 10DLC regulations
Storing and analyzing applicant data for hiring insights and dashboard analytics
Complying with GDPR, CCPA, and state employment laws

4. SMS/Text Messaging Compliance

Cantaloupe AI enables SMS-based communications between employers and applicants. We comply with A2P 10DLC regulations, including:

Consent: Users must opt in before receiving SMS messages
Opt-Out: Users can reply "STOP" to unsubscribe from SMS communications
Messaging Transparency: Employers must disclose the nature and frequency of SMS communications
Data Protection: SMS interactions are stored securely and not shared for marketing purposes

5. Data Sharing and Transfers

We do not sell personal data. We may share data with:

Employers using our platform for hiring purposes
Cloud service providers (e.g., AWS, Fly.io) for secure storage and AI model training
AI technology partners (e.g., OpenAI, Anthropic, Vapi AI) for voice processing and automated assessments
Legal authorities if required for compliance

We use Standard Contractual Clauses (SCCs) for GDPR compliance when transferring data internationally.

6. Your Privacy Rights

6.1 General Rights

Under the CCPA, GDPR, and other U.S. state privacy laws, you have the following rights:

Right to Know – You have the right to request details about the personal information we collect and how we use it
Right to Access – You may request a copy of the personal data we have collected about you
Right to Correct – If your information is inaccurate or incomplete, you can request corrections
Right to Delete – You may request that we delete your personal information, subject to certain legal obligations
Right to Opt-Out of Data Sharing – You may opt-out of any data sharing for targeted advertising or other secondary uses
Right to Non-Discrimination – We will not discriminate against you for exercising your privacy rights

To exercise any of these rights, contact us at help@trycantaloupe.com.

6.2 California Consumer Privacy Act (CCPA) Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information:

6.2.1 Right to Know

You have the right to request that we disclose the following information about the personal data we've collected over the past 12 months:

The categories of personal information collected
The sources of that information
The business or commercial purposes for collecting or sharing it
The categories of third parties we may share it with
The specific pieces of personal information we've collected about you

6.2.2 Right to Delete

You may request that we delete personal information we have collected from you, unless we need it to complete a transaction, detect security incidents, comply with legal obligations, or for other permitted uses.

6.2.3 Right to Opt-Out

You have the right to opt out of the sale or sharing of your personal information. If we sell or share your personal information, we will provide a clear and accessible way for you to opt out.

6.2.4 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. That means no denial of services, no different prices or rates, and no lower quality of service.

6.2.5 Right to Correct Inaccurate Information

If you believe we hold inaccurate personal information about you, you have the right to request that we correct it.

6.2.6 Right to Limit Use of Sensitive Personal Information

You can ask us to limit how we use or disclose sensitive personal information, such as precise geolocation or specific demographic details, to only what's necessary to perform essential services.

7. Security Measures

All applicant data is securely transmitted and stored using industry-standard encryption and security protocols. We partner with trusted AI providers that comply with best practices for data protection.

8. User Impersonation for Support

To provide effective customer support and troubleshooting, authorized Cantaloupe AI support personnel may access your account with your permission through a feature commonly known as "user impersonation" or "login as user." This feature is used exclusively for:

Diagnosing and resolving technical issues you report
Providing guided assistance with platform features
Investigating and resolving account-specific problems
Demonstrating functionality or helping with setup

When support personnel access your account:

All actions are logged and auditable
Access is limited to the minimum necessary to resolve your issue
Support staff cannot view passwords or payment card details
You may request a record of support access to your account
Support access is terminated immediately after issue resolution

By using our support services, you consent to this limited access. You may opt out of impersonation-based support by requesting alternative assistance methods.

9. Google and Microsoft Integrations and API Usage

Cantaloupe AI integrates with Google and Microsoft in order to schedule calendar events. We also use Google APIs to process and analyse user-provided locations in accordance with hiring needs.

9.1 Scope & Purpose

Cantaloupe AI requests only the calendar permissions from Google and Microsoft required to:

Read your availability (free/busy)
Create, update, reschedule or delete interview events on your behalf
Handle the scheduling process

9.2 Purpose of Requesting Google and Microsoft Data

We need Google and Microsoft data in order to book interviews between business users and job applicants, as well as facilitate joining the meeting, rescheduling, cancelling, and related functions. Calendar data is never sold, shared for marketing, or used for advertising profiles.

9.3 User Control

You may disconnect at any time via the Cantaloupe AI dashboard or in your Google or Microsoft account's security settings. Revocation stops all future reads and writes.

9.4 Security

Calendar tokens and metadata are encrypted in transit and at rest, and are accessible only to automated scheduling services that require them for the functions described here.

9.5 Compliance

Cantaloupe AI's use of Google and Microsoft user data is strictly limited to the practices described above, satisfying Google's API Services Limited-Use requirements and Microsoft's comparable API terms. Cantaloupe AI is not responsible for third-party provider outages or inaccuracies that lead to missed or conflicting events.

Important: Cantaloupe does NOT retain user data obtained through Google Workspace APIs or Google Calendar integrations to develop, improve, or train generalized AI and/or ML models.

10. Updates to This Policy

We may update this Privacy Policy as laws evolve. If we update this policy, we will require consent again before continuing to use the application. The latest version will be posted on our website.

11. Contact Information

For privacy-related questions or to exercise your rights, contact us at:

Email: help@trycantaloupe.com
Address: Cantaloupe Technologies Corporation, 201 Holiday Blvd, Covington, LA 70433

Last Updated: 07/02/2025

By using Cantaloupe AI services, you acknowledge that you have read and understood this Privacy Policy.

07/02/2025

Cantaloupe Technologies Corporation

201 Holiday Blvd. in Covington, LA 70433

Cantaloupe Technologies Corporation Master Service Agreement

MASTER SERVICE AGREEMENT

This Master Service Agreement ("Agreement") is entered into by and between: Cantaloupe Technologies Corporation, a Delaware corporation, with a principal place of business at 201 Holiday Blvd, Covington, LA 70433 ("Cantaloupe"), and the customer identified in the applicable Order Form ("Customer"). Effective as of the date set forth in the Order Form ("Effective Date"), this Agreement governs Customer's access to and use of Cantaloupe's services.

1. DEFINITIONS

1.1 "Services" refers to access to the Cantaloupe AI platform, including voice-based interviews, applicant tracking system (ATS), turnover prediction tools, applicant dashboards, and interview scheduling.

1.2 "Data Processing Addendum (DPA)" means the data protection terms attached as Exhibit B.

1.3 "Order Form" means a document referencing this Agreement that sets forth the commercial terms, including subscription tier, pricing, and any add-ons.

1.4 "Applicant Data" refers to any personal information submitted by or collected about job applicants through the Services.

1.5 "Users" means employees or agents of Customer authorized to use the Services.

2. SCOPE OF SERVICES

2.1 Cantaloupe will provide the Services as defined in Section 1.1 and further detailed in the applicable Order Form, including any specific features, usage limits, or add-ons selected by Customer.

2.2 Customer will receive access to features defined by the selected subscription tier, including interview capacity, user accounts, in-app scheduling, and optional integrations.

2.3 Post-hire sentiment tracking is currently in beta and not guaranteed as part of the Services until formally released.

3. FEES AND PAYMENT

3.1 Fees are defined in the Order Form. Customer may choose monthly or annual billing.

3.2 Payments are due Net 15 from invoice date. Overages are billed monthly in arrears.

3.3 Auto-pay via credit card or ACH is preferred but not required.

3.4 All new customers receive 50% off their first month with no commitment. After the first month, a 12-month contract begins unless otherwise stated in the Order Form.

3.5 Taxes are the responsibility of the Customer unless proof of exemption is provided.

4. TERM AND TERMINATION

4.1 The term of this Agreement is twelve (12) months from the Effective Date unless a different duration is specified in the Order Form. Each subscription auto-renews for successive twelve (12) month periods unless terminated with 30 days' written notice prior to renewal

4.2 Each subscription auto-renews for successive 12-month terms unless terminated by either party with 30 days' notice prior to the renewal date.

4.3 Either party may terminate for material breach upon 30 days' written notice if the breach remains uncured.

4.4 Upon termination, Customer's access to the Services will cease, and Customer data will be deleted within 30 days, unless legally required to retain it.

5. DATA PRIVACY AND SECURITY

5.1 Cantaloupe acts as a data processor for all Applicant Data and will process such data in accordance with applicable laws and the DPA.

5.2 Cantaloupe uses industry-standard encryption and secure hosting providers including AWS, Vapi AI, OpenAI, Fly.io, and others.

5.3 Customer represents it has obtained all rights and consents required to provide Applicant Data.

5.4 Impersonation features may be used by Cantaloupe's support team solely for troubleshooting purposes.

5.5 Cantaloupe may collect form of transportation (e.g., car, bike, public transit) for purposes of calculating commute time and compatibility scoring, subject to anti-discrimination protections.

6. CUSTOMER RESPONSIBILITIES

6.1 Customer is responsible for: Configuring job roles and interview settings. Ensuring legal use of AI assessments. Providing accommodations under ADA when requested. Customer agrees to use the Services in compliance with all applicable labor and employment laws, including Title VII of the Civil Rights Act, the ADA, the FCRA (if applicable), and state employment regulations.

6.2 Customer agrees to supervise hiring decisions and not rely solely on AI-generated scores.

6.3 Customer agrees not to reverse engineer, tamper with, or resell access to the Services.

6.4 Customer agrees to comply with all applicable local, state, and federal laws in connection with its use of the Services, including, without limitation, laws related to employment, data protection, and intellectual property.

7. CONFIDENTIALITY

7.1 Each party agrees to hold in confidence all non-public information disclosed by the other party.

7.2 Confidentiality obligations survive for 3 years post-termination.

8. INTELLECTUAL PROPERTY

8.1 Cantaloupe owns all intellectual property related to the Services, including software, branding, and AI models.

8.2 Customer retains ownership of any Applicant Data it provides.

8.3 Feedback provided by Customer may be used by Cantaloupe without restriction.

9. WARRANTIES AND DISCLAIMERS

9.1 Cantaloupe warrants it will provide the Services in a professional and workmanlike manner.

9.2 Except as stated herein, the Services are provided 'as is' without any warranties of any kind, express, implied, or statutory, including but not limited to any warranties of merchantability, fitness for a particular purpose, or non-infringement. Cantaloupe shall not be liable for hiring decisions or employment outcomes resulting from use of the Services. Cantaloupe does not warrant that data transmission or storage through the Services will be completely secure and shall not be liable for unauthorized access unless due to gross negligence or willful misconduct

9.4 Cantaloupe is not a consumer reporting agency and does not perform background checks as defined under the Fair Credit Reporting Act (FCRA).

10. LIMITATION OF LIABILITY

10.1 Except for willful misconduct, each party's liability is limited to the fees paid in the 12 months preceding the claim.

10.2 Neither party shall be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including loss of use, data, or profits, even if advised of the possibility. These limitations apply regardless of the cause of action and survive termination.

11. INDEMNIFICATION

11.1 Each party agrees to indemnify, defend, and hold harmless the other party from and against any third-party claims, liabilities, damages, or expenses (including reasonable attorney's fees) arising from (i) a breach of this Agreement, (ii) misuse of data, or (iii) violation of applicable law. This indemnity obligation shall survive termination of this Agreement

12. GOVERNING LAW

This Agreement shall be governed by the laws of the State of Louisiana, without regard to conflict of law principles. The parties agree that any dispute arising out of or relating to this Agreement shall be brought exclusively in the state or federal courts located in St. Tammany Parish, Louisiana

EXHIBIT A: ORDER FORM TEMPLATE

Field	Description
Plan Tier	Sprite / Canary / Honeydew / Watermelon
Annual Price	$5,000 / $15,000 / $25,000 / $50,000+
Interviews Included	500 / 2,000 / 5,000 / 7,500+ per year
Users Included	3 / 5 / 10 / 20+
Extra User Fee	$100/user/year (first 2 add-ons free)
Interview Overage	$10 / $7.50 / $5 / $3-5 per interview
Add-ons	HRIS integration ($500, waived for pilots)
Billing Frequency	Monthly / Annual (10% discount)
First Month Discount	50% off with no commitment
Pilot Offer	30 days at 50% off with unlimited users
Initial Term	12 months from Effective Date
Auto-Renewal	Yes, unless canceled with 30 days' written notice before renewal

EXHIBIT B: DATA PROCESSING ADDENDUM (DPA)

1. Roles of the Parties: Cantaloupe is the Data Processor; Customer is the Data Controller.

2. Data Types: Applicant name, email, voice/audio recordings, text responses, interview metadata, behavioral insights, and transportation mode.

3. Subprocessors: Cantaloupe uses third-party services (AWS, Vapi AI, OpenAI, Fly.io, Google, Microsoft) to operate the Services.

4. International Transfers: Where applicable, Cantaloupe uses Standard Contractual Clauses (SCCs) for GDPR compliance.

5. Data Rights: Data subjects may request access, correction, or deletion via Customer. Cantaloupe will assist Customer in fulfilling these requests.

6. Retention and Deletion: Applicant data is retained only as long as necessary. Customer may request deletion anytime.

7. Security: Cantaloupe uses industry-standard security including encryption in transit and at rest, access controls, and regular audits.

8. Special Features: "Impersonation" support access is used only for technical troubleshooting. Transportation method is stored and processed solely to improve compatibility predictions and accessibility. Voice data is processed through Vapi AI and retained according to Customer configuration.

By using Cantaloupe AI services, you acknowledge that you have read and understood this Service Agreement.

Privacy Policy & Master Service Agreement