Privacy Policy

This Privacy Policy explains how LadderUp (“LadderUp,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit our websites, create an account, book or take a pre-qualification interview, receive a scorecard or credential, or otherwise interact with our services (collectively, the “Services”).

If you do not agree with this Policy, please do not use the Services.

1) Who we are & how to contact us

Privacy inquiries, legal notices & data rights requests: legal@ladderup.ai

2) Scope & applicability

This Policy applies to information we collect:

directly from you through the Services;
automatically (e.g., via cookies/analytics);
from third parties (e.g., payment processors, scheduling/conferencing tools), to the extent they send us data to deliver the Services.

This Policy does not cover third-party websites or services that we do not control. Their terms and privacy policies govern those services.

3) Information we collect

3.1 Information you provide

Account & profile: name, email, phone, address, age, login credentials, communication preferences.
Booking & payment: selected role/level, scheduling choices, billing country; payment status and amounts. (We do not collect or store full payment card numbers.)
Interview materials: your work during the interview (e.g., code, answers), chat messages, and Scorecard outcomes.
Communications: messages you send us (support, verification requests, appeals).
Consents & preferences: e.g., consent to recording (if offered), marketing preferences.

3.2 Information collected automatically

Device & usage: IP address, device/browser type, operating system, pages viewed, referring/exit pages, timestamps.
Cookies & similar tech: used for sign-in, session security, preferences, analytics, and performance. See Section 10.

3.3 Information from third parties

Payments (e.g., Stripe): payment status, last four digits & brand, fraud signals (no full card numbers).
Scheduling & conferencing (e.g., Google Calendar/Meet): event metadata (title, start/end, invitees), meeting link/ID.
Verification partners (if enabled by you): identity or academic verification data you ask us to check.
Recruiters/employers (at your direction): information related to authenticity requests or feedback about your credential.

4) Special notes: interviews, recording, and credentials

Proctoring/recording (optional): Some sessions may be proctored or recorded only with your consent and subject to applicable law. Recordings may capture audio/video, screen-share metadata, and session activity. If you do not consent, you may request a non-recorded session (availability may vary) or reschedule under our Terms.
Scorecards & credentials: After your interview, we may generate a Scorecard and/or credential (e.g., “pass” at a given calibration level). These may be visible in your account. We will share them externally only at your direction or with your consent (e.g., when you present a credential to an employer).
Calibration & quality: We may review anonymized/interviewer-identified content and recordings to improve rubrics, calibrate levels, and investigate suspected misconduct.

We do not use facial recognition or biometric templates. Recordings may include your image and voice as part of the interview.

5) How we use personal information

We use information to:

Provide the Services: account creation, authentication, scheduling, interviewing, credential generation, and delivery of Scorecards.
Process payments: charge fees, apply credits/refunds, and prevent fraud/abuse.
Communicate: confirmations, operational notices, policy changes, and support responses.
Verification: confirm authenticity of a credential or Scorecard when you share it with an employer or ask us to do so.
Improve, secure, and analyze: measure performance, debug issues, develop features, and protect against misuse.
Legal & compliance: meet legal obligations, resolve disputes, and enforce our Terms.
Sell contact information to companies for the purposes of recruiting.

Legal bases (EEA/UK): performance of contract; legitimate interests (e.g., product improvement, security); consent (e.g., recording, certain cookies/marketing); and compliance with legal obligations.

6) How we share personal information

We share information with:

Service providers (processors): hosting, email delivery, payments, analytics, conferencing, anti-fraud, support, and verification vendors under contracts that restrict use to our instructions.
Employers or recruiters: when you direct us to share a credential/Scorecard or to confirm authenticity, or when such a party is interested in candidates like you.
Corporate transactions: if we undergo a merger, acquisition, or asset transfer, your data may be transferred consistent with this Policy.
Legal/compliance: when required by law, subpoena, or to protect rights, safety, and our Terms.

7) Your choices & rights

7.1 Account settings

You can update certain profile details and preferences in your account.

7.2 Marketing communications

You can opt out of non-essential marketing emails via the unsubscribe link or by contacting legal@ladderup.ai. We may still send transactional/operational messages.

7.3 Privacy rights (EEA/UK & certain U.S. states)

Subject to applicable law, you may have the right to:

access, correct, or delete personal information;
obtain a portable copy;
object to or restrict certain processing;
withdraw consent (e.g., recording, marketing) at any time (withdrawal does not affect prior processing);
appeal a decision (for certain U.S. states).

To exercise rights, email legal@ladderup.ai with your name, account email, and request. We may ask for additional information to verify your identity and will respond within the time required by law. You may also lodge a complaint with your local supervisory authority (EEA/UK).

8) Data retention

We retain personal information for as long as needed to provide the Services and for legitimate purposes, including:

Account data: while your account is active and for up to 24 months after last activity (or as required by law) unless you request deletion earlier.
Scorecards/credentials: typically 12–24 months after expiration or revocation, to maintain auditability and respond to authenticity inquiries.
Payments/financial records: 7 years (or longer if required) for tax and accounting.
Recordings (if applicable): generally 90–180 days unless a longer retention is needed for investigation, appeals, or legal reasons.

We may anonymize data for analytics and product improvement.

9) Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and logging. No method of transmission or storage is 100% secure. If we discover a breach affecting your data, we will notify you and/or regulators as required by law.

10) Cookies & similar technologies

We use:

Essential cookies: authentication, session management, security.
Analytics/performance cookies: to understand usage and improve the Services.
Preference cookies: to remember settings where applicable.

Where required, we present a consent banner and honor your choices. You can manage cookies via browser settings; disabling cookies may affect functionality. We do not respond to “Do Not Track” signals at this time.

11) Children’s privacy

The Services are intended for individuals 18 years or older (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a minor has provided information, contact legal@ladderup.ai and we will take appropriate action.

12) International data transfers

We operate in the United States and may transfer personal information to service providers in other countries. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) to protect personal information during transfers.

13) Third-party services

We integrate with third-party services such as payment processors (e.g., Stripe) and scheduling/conferencing tools (e.g., Google Calendar/Meet). Your use of those services is subject to their respective terms and privacy notices. We encourage you to review them.

14) Automated decision-making

We do not use automated decision-making that produces legal or similarly significant effects without human involvement. Scorecards are based on interviewer evaluation; any automated checks (e.g., anti-fraud signals) are reviewed by humans before action is taken.

15) Your responsibilities

You are responsible for maintaining accurate account details, safeguarding login credentials, and complying with our Terms. When you share your credential with an employer, you do so at your discretion.

16) U.S. state privacy disclosures (CPRA/“CCPA”, etc.)

16.1 Categories of personal information collected (past 12 months)

Identifiers: name, email, phone, device identifiers, IP address.
Customer records: billing country, partial payment info (via processor).
Commercial information: purchases, refunds, booking history.
Internet/electronic activity: usage data, log data, cookies.
Audio/visual: interview recordings if you consent.
Professional/education: role/level applied for; optional CV/portfolio links you provide.
Inferences: performance insights (e.g., score ranges) derived from interviews.

16.2 Sensitive information

We do not intentionally collect government IDs, financial account numbers, or precise geolocation. If recording is enabled, video/audio may be sensitive under some laws; we process such data only with consent and for legitimate purposes (quality/integrity, appeals).

16.3 Sale/share of personal information

We may provide interested companies with your contact information strictly for the purpose of recruiting.

16.4 Purposes of collection & disclosures for business purposes

See Sections 5 and 6. We disclose personal information to service providers for operational purposes (e.g., hosting, payments, conferencing, support, analytics).

16.5 Your CPRA rights

California (and certain other states) residents have the rights described in Section 7. To exercise, contact legal@ladderup.ai. You may authorize an agent to submit a request; we will verify identity and authority. We will not discriminate against you for exercising your rights.

17) Changes to this Policy

We may update this Policy from time to time. The “Last Updated” date reflects the latest changes. If changes materially affect your rights, we will provide additional notice (e.g., email or in-product notice). Your continued use of the Services after changes means you accept the updated Policy.

18) How to reach us

Questions or requests about this Policy or your information:
legal@ladderup.ai