Aptus Privacy Policy
This Policy describes how Aptus handles information during the controlled candidate pilot and founder-approved employer access. It is a founder-prepared release draft and should receive attorney review before broader release.
information Aptus collects
how Aptus uses information
- create, authenticate, secure, and support accounts;
- operate the candidate pilot, queue, interviews, approvals, appeals, vouchers, and access controls;
- show candidate-posted professional materials to founder-approved employers;
- send, manage, audit, and enforce PCQs and ED rules;
- review credentials, prevent fraud, investigate abuse, and protect users;
- communicate about pilot participation, account access, support, and policy changes;
- comply with law and establish, exercise, or defend legal claims.
who can see candidate information
Candidate accounts are not intended to be publicly browsable through Aptus. Founder-approved employers may see active candidate discovery cards and, after opening a profile, candidate-posted professional materials needed to evaluate fit. This may include professional name, display image, headline, bio, ED, availability, the generated structured resume, media, tokens, and resume-entry review statuses.
Private credential proof files, issuer details, and verification ticket contents are restricted to authorized Aptus review after submission. Employers receive all submitted resume-entry names, dates, categories, candidate experience descriptions, and review statuses so the candidate's verification percentage has visible context. Verified golden tokens also show their ACV ticket reference number. Employers do not receive issuer details, private proof files, or ticket contents. The generated resume rejects contact information. The current accepted-PCQ handoff shows employer contact details to the candidate so the candidate can initiate external contact; it does not expose candidate contact details to the employer through Aptus.
sharing and service providers
Aptus shares information only as needed to operate the service, follow user-directed marketplace flows, protect the platform, or comply with law. Infrastructure and authentication providers process data on Aptus’s behalf. Aptus does not sell personal information or use candidate information for third-party targeted advertising.
After an accepted PCQ, Aptus shows the candidate the employer's contact details and coordinates the first-interview time. Aptus records whether the employer plans to Proceed or Stop pursuing after that interview, but does not record later interviews, offers, hiring, or employment. Information users exchange outside Aptus is controlled by those users and their organizations.
retention and deletion
Aptus keeps information while needed to operate accounts, enforce marketplace rules, maintain security and audit records, resolve disputes, and meet legal obligations. Candidate-posted media and profile information can be changed or deleted through available product controls.
Credential proof is intended to be deleted after a verify or reject decision. Verification results and audit references may remain. Final pilot rejection may retain restricted SHA-256 hashes of normalized email and phone information to prevent repeat blocked signups; raw contact values are not stored in the blacklist table.
Account deletion and export are currently handled by request. Some PCQ, verification, security, billing-audit, blacklist, and dispute records may need to remain after an account request.
your choices and requests
You may update available profile information, remove candidate-posted content through product controls, and request access, correction, export, or deletion by contacting privacy@joinaptus.com. Aptus will verify requests before acting and may deny or limit a request where retention is required for security, fraud prevention, disputes, or law.
Depending on where you live, applicable law may provide additional privacy rights and a right not to receive discriminatory treatment for exercising them.
security and sensitive information
Aptus uses role-based access controls, row-level database security, restricted storage, short-lived signed links, and audit records. No system can guarantee absolute security.
Do not upload Social Security numbers, banking information, medical records, immigration documents, birth certificates, passports, driver’s licenses, or other unnecessary sensitive information. Aptus will provide a specific approved process if such information is ever genuinely required.
children, changes, and contact
Aptus is intended for adults age 18 or older and is not directed to children. Material policy changes will receive a new version date and may require renewed acceptance.
Privacy questions and requests: privacy@joinaptus.com.