Privacy Policy

1. Scope and role

This Privacy Policy explains how WorkOnward ("Tahoe," "we," "us," or "our") collects, uses, stores, discloses, and protects personal information when you use tahoe.workonward.com, create an account, sign in with Google, connect a Gmail or Google Workspace mailbox, search for candidates, or otherwise interact with the Service. This Policy is written for U.S. business use and should be read together with the consent screens and in-product disclosures shown when you authorize Google access.

2. Information we collect

• Account and profile information, such as your name, work email address, password hash, organization details, and account preferences.
• Authentication information from Google Sign-In, such as your Google account identifier, basic profile details, and email address, to the extent you authorize them.
• Mailbox connection and Gmail API data if you connect a mailbox, including OAuth refresh tokens, mailbox address, send settings, message metadata, thread metadata, message content you instruct Tahoe to process, and reply status information needed to send or monitor outreach from your own inbox.
• LinkedIn publishing data if you connect a LinkedIn account, including the access token LinkedIn issues (stored encrypted), its expiry, your LinkedIn member identifier and display name, the permissions you granted, and the identifier and timestamp of posts published through Tahoe. See section 6.1.
• Recruiting workflow data, such as search prompts, filters, saved candidates, lists, notes, enrichment requests, campaign drafts, sequence content, mailbox health data, and usage history.
• Chrome extension data if you install the Tahoe for LinkedIn browser extension, including the LinkedIn profile fields visible on a page you choose to save (such as name, headline, current company, location, connection count, and profile photo) and the Tahoe authentication token used to make extension requests as you.
• Technical and device data, such as IP address, browser type, device information, approximate location inferred from IP, logs, timestamps, session identifiers, and security telemetry.
• Support and communications data, such as messages you send to support or legal contacts and related troubleshooting materials.
• Billing or payment-related data if paid features are enabled, typically through our payment providers rather than directly in Tahoe.

3. How we collect information

• Directly from you when you register, sign in, complete forms, configure campaigns, save candidates, request enrichment, contact support, or otherwise use the Service.
• From Google when you sign in with Google or connect a Gmail or Google Workspace mailbox using OAuth.
• From the Tahoe for LinkedIn browser extension, if installed, when you affirmatively choose to save, enrich, or act on a LinkedIn profile you are viewing.
• From third-party data providers and integrations that supply candidate, enrichment, or operational data that you request through the Service.
• Automatically through logs, browser storage, security monitoring, and similar technical means used to operate and secure the Service.

4. How we use information

• Provide, maintain, secure, and improve the user-facing features of Tahoe.
• Authenticate you, manage accounts and sessions, and prevent abuse, fraud, or unauthorized access.
• Process recruiter workflows, including candidate search, list management, enrichment, Gmail-native outreach, reply detection, and related operational analytics.
• Provide support, troubleshoot problems, communicate service updates, and respond to legal or security issues.
• Enforce our Terms, protect our rights, protect users and third parties, and comply with applicable law.
• Operate billing, credits, payment processing, and service administration if paid features are enabled.

5. Google Sign-In, Gmail API data, and Google limited-use commitments

When you use Google Sign-In or connect a Gmail or Google Workspace mailbox, Tahoe requests only the scopes needed for the features you choose to use. Tahoe’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google account data to authenticate you and manage your Tahoe account.
• We use Gmail API data only to provide user-facing recruiting features that are prominent in Tahoe, such as sending outreach from your mailbox, monitoring replies, and displaying mailbox status or thread context.
• We do not sell Google user data, use it for advertising, use it to determine credit-worthiness, or transfer it to data brokers or information resellers.
• We do not use Google Workspace API data to develop, improve, or train generalized artificial intelligence or machine learning models.
• We limit human access to Google data except where necessary for support you request, security investigation, legal compliance, or other circumstances allowed by Google policy and applicable law.
• If Tahoe changes how it uses Google data in a materially different way, we will update this Policy and, where required, obtain updated consent before that new use begins.

6. Tahoe’s Chrome extension ("Tahoe for LinkedIn")

Tahoe offers an optional Chrome browser extension, "Tahoe for LinkedIn," that lets a signed-in Tahoe user save and enrich LinkedIn profile information from within LinkedIn’s own website. The extension only operates on linkedin.com and tahoe.workonward.com, and only acts on a profile you are actively viewing or an action you affirmatively take, such as clicking Save, Reveal Email, Reveal Phone, or Request Connection.

• The extension reads the Tahoe authentication token already stored in your browser for tahoe.workonward.com so that extension requests are made as you, the signed-in user, subject to the same account permissions as the main Tahoe product.
• When you choose to save a LinkedIn profile, the extension captures the publicly visible profile fields shown on that page (such as name, headline, current company, location, connection count, and profile photo) and sends them to Tahoe’s backend over an encrypted connection, where they are stored as a candidate or contact record in your Tahoe workspace, the same as if you had entered or imported them yourself.
• The extension does not read or transmit any LinkedIn data beyond the profile fields described above, and it does not run on any site other than linkedin.com and tahoe.workonward.com.
• The extension requests only the storage permission, plus host access to linkedin.com, tahoe.workonward.com, and Tahoe’s backend API domain, and does not request or use broader browsing history, other open tabs, or other websites.
• We do not sell, rent, or transfer LinkedIn or extension-collected data to third parties, and we do not use it for advertising, cross-context behavioral advertising, determining creditworthiness, or training generalized artificial intelligence or machine learning models.
• Data captured through the extension becomes part of your Tahoe workspace data and is subject to the same retention, security, and deletion practices described elsewhere in this Policy. Uninstalling the extension stops future data capture; it does not delete records already saved to your Tahoe workspace, which you can delete from within Tahoe.

6.1 LinkedIn publishing (optional connected LinkedIn account)

Tahoe can draft a hiring post for you without any LinkedIn account connection: the draft is text you copy and publish yourself. Separately, you may choose to connect your personal LinkedIn account so that Tahoe can publish a post to your own LinkedIn profile. Connecting is optional, is initiated by you, and uses LinkedIn’s standard OAuth consent screen.

• If you connect LinkedIn, we store the access token LinkedIn issues to us in encrypted form, its expiry date, your LinkedIn member identifier (the person URN), the permissions you granted, your LinkedIn display name, and, where LinkedIn provides it, the email address on that LinkedIn account.
• We request only the permissions needed to sign you in and to post as you (currently openid, profile, email, and w_member_social). We do not request or use permissions to read your LinkedIn connections, messages, invitations, or feed.
• Tahoe publishes only the exact text you have reviewed and confirmed in the Tahoe interface. Nothing is posted automatically, on a schedule, or without that confirmation. We record the identifier and timestamp of posts published through Tahoe so you can see what was sent.
• We do not sell or rent LinkedIn account data, do not use it for advertising or cross-context behavioral advertising, and do not use it to train generalized artificial intelligence or machine learning models.
• You can disconnect at any time in Tahoe, which deletes the stored token from our systems. LinkedIn keeps its own record of the authorization, so to remove Tahoe on LinkedIn’s side as well, use LinkedIn Settings and Privacy, Data privacy, Other applications, Permitted services.
• LinkedIn access tokens expire, and Tahoe cannot renew them silently without you, so you may be asked to reconnect periodically. If you never connect an account, none of the data in this section is collected.

7. How we disclose information

Tahoe does not sell personal information and does not share personal information for cross-context behavioral advertising.

• Service providers and subprocessors that help us host, secure, support, or operate the Service, subject to contractual confidentiality and security obligations.
• Third-party integrations or providers you direct us to use, such as Google, enrichment vendors, analytics providers, or payment processors.
• Professional advisors, corporate affiliates, or transaction counterparties in connection with financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.
• Law enforcement, regulators, courts, or other parties where disclosure is required to comply with law, enforce our rights, investigate abuse, or protect users, third parties, or the public.

8. Data retention

We retain personal information for as long as reasonably necessary to provide the Service, maintain account functionality, satisfy security and fraud-prevention needs, resolve disputes, comply with legal obligations, and enforce our agreements. Retention periods vary by data type and business need. Where feasible, we delete, anonymize, or de-identify data when it is no longer needed.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information in transit and at rest. Those safeguards may include encryption, access controls, authentication controls, environment segregation, logging, vendor oversight, and incident response procedures. No system is perfectly secure, and we cannot guarantee absolute security.

10. Your choices and U.S. privacy rights

Depending on where you live and the nature of our processing, you may have rights to request access, correction, deletion, portability, or information about how we use your personal information. You may also have the right to appeal certain decisions or opt out of certain processing where applicable law provides that right. To exercise privacy rights, contact us at [email protected] with the subject line "Privacy Request." If we are required to verify your identity, we will use the information you provide only for verification and request-handling purposes.

• For California residents, this Policy is intended to support disclosures commonly associated with CalOPPA and the CCPA/CPRA, including categories of personal information collected, sources, purposes, sharing practices, and how to submit requests.
• If Tahoe is subject to a law requiring a response timeline, we will respond within the timeline required by law, which for certain U.S. state requests is commonly 45 days with extensions where permitted.
• If you are an authorized agent submitting a request on someone else’s behalf, we may ask for proof of authorization and identity verification as permitted by law.

11. Cookies, local storage, and similar technologies

Tahoe uses browser storage, session storage, local storage, and similar technologies to maintain sessions, preserve workflow state, secure the Service, and improve reliability. On Tahoe’s public pages, our consent manager stores consent state in the `tahoe_cookie_consent` cookie and allows users to turn optional analytics on or off. If a user opts in, Tahoe may use Google Analytics on the landing page to measure visits, engagement, and sign-up intent. Tahoe may also store authentication tokens, temporary workflow state, and feature-related settings in your browser. We do not currently use these technologies to build advertising profiles for cross-context behavioral advertising, and users can reopen Tahoe’s public-page preferences through the site’s “Cookie settings” control.

12. Children’s privacy

Tahoe is intended for recruiters, employers, and other business users and is not directed to children under 13. If we learn that we collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date on this page and, where required, provide additional notice or obtain consent before material new uses of personal information begin.

14. Contact

Questions, privacy requests, Google-data questions, extension-related questions, and legal notices relating to this Privacy Policy may be sent to [email protected] or by mail to WorkOnward, 124 E 14th St, New York, NY 10003. If Tahoe later designates a dedicated privacy or legal contact address, that address will control for future requests once posted here.

Relevant standards and policies

Tahoe’s disclosures are informed by Google’s OAuth and Gmail API requirements, FTC security guidance, and California privacy transparency requirements. You can review those materials here:

• Google API Services User Data Policy
• Gmail API scope categories and restrictions
• Google guidance on requesting minimum Gmail scopes
• FTC Start with Security guidance
• California DOJ privacy-policy guidance
• California CCPA / CPRA consumer-rights guidance