Privacy Policy

Last Updated 1 August, 2025


At Truffle Spritz, Inc. (“Truffle”, “we”, “our”, “us”), we respect your privacy and data protection rights and recognize the importance of protecting the personal data we collect and process. This Privacy Policy is designed to help you to understand what personal data we collect about you and how we use and share it.

We may collect information that can be used to identify you (“Personal Information”) when you use www.hiretruffle.com (the “Site”), use the Truffle software platform, or apply for a job with us. This Privacy Policy explains how we collect, use, disclose, and otherwise process Personal Information in connection with our Site and related services (collectively, our “Services”).

We provide our platform to employer customers who invite candidates to record interviews. For that activity we act as a service provider/data processor and process candidate Personal Information on their instructions. This Privacy Policy describes that processing at a high level, but the inviting company’s privacy notice controls and candidate rights requests should be directed to that company. We will assist the inviting company in responding to requests. In limited cases, we may process certain Personal Information as an independent controller (e.g., to maintain the security of the Services, prevent fraud/abuse, comply with law, or manage our customer billing/records); in those cases, this Privacy Policy applies to our processing.

What information do we collect and where do we collect it from?

‍Personal Information You Provide: We collect Personal Information that you intentionally provide to us. For example, when you fill-out an online form (such as when you sign-up to schedule a demo, receive our newsletter, or watch a webinar recording), we collect the information you provide and use it for the purposes described in this Privacy Policy.

We collect the following types of Personal Information you provide in connection with our Services:
‍Contact Information, such as name, email address, mailing address, or phone number.
‍Professional Information, such as the name of your employer, your title and business responsibilities.
‍Account Information, such as account credentials, billing information, payment information and other information used to administer your account, including the Services you have purchased or may be interested in.
‍Event Information, such as event attendance, dietary restrictions and travel accommodations.
‍Support Information, such as the content of requests or correspondence we may receive from you.
‍Feedback Information, such as information shared with us to provide feedback on our Services or to participate in an optional survey.
‍Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.
‍Applicant Information of Individuals Applying to Work for Truffle, such as your education and employment history and personal contact information.
When you sign-up for an account or sign-in to your account, you may have several options for doing so. If you choose to sign-in using a third-party account (such as Google), that third party may use your Personal Information for its own purposes.

Please see that third party’s website to view their Privacy Policy. That third party may also gather certain information about you when you use our Services.

Please note that when you are signed-in to your account, we may be able to connect your activities with respect to the Services with you and your account.

Personal Information Automatically Collected: As is true of most websites and digital platforms, we collect certain Personal Information automatically when you visit and/or use our Services, including:
‍Log File Data, including your internet protocol (IP) address, operating system, browser type, browser id, date/time of visit, and pages visited.
‍Analytics Data, including the electronic path you take to our Services, through our Services and when exiting our Services, as well as your usage and activity on our Services, such as the links and objects you view, click or otherwise interact with.
‍Location Data, including your general geographic location based on your IP address.

‍Personal Information from Other Sources and Third Parties:
‍We also may obtain Personal Information from other sources, which we may combine with Personal Information we collect either automatically or directly from you.

We may receive the same categories of Personal Information as described above from the following sources and third parties:
Employers: We may receive certain information about you in connection with your employer’s interest in or use of our Services. For example, your employer may provide us with your contact information and account information to allow us to set up an account for you.
‍Social Media: If you choose to interact with us or otherwise post on social media, we may collect Personal Information you chose to make public or share directly with us. For example, if you choose to send us a question through social media, we may collect the Personal Information you provide and other Personal Information from your publicly available account to provide a response to your question.
Information Providers: We may from time to time obtain information from third-party information providers to correct or supplement other Personal Information we collect. For example, we may obtain updated contact information from third-party information providers to reconnect with you.
‍Publicly Available Information: We may also collect Personal Information from publicly available sources, such as government records or publicly available websites to supplement other Personal Information we collect.

What do we use Personal Information for?
We use Personal Information we collect for the following purposes:
‍Service Delivery: Truffle’s primary purpose in collecting Personal Information is to facilitate and provide the Services. We use Personal Information to perform our contractual obligations under our Terms of Service, including to: (i) provide, operate, and improve our Services and our business; (ii) generate transcripts and technical previews/excerpts of interview recordings to help reviewers navigate content; (iii) plan and manage events (e.g., registration, billing, connecting with other event attendees); and (iv) communicate with you about our Services, including by sending announcements, updates, security alerts, and support and administrative messages. Our legal bases include performance of a contract, legitimate interests (e.g., service improvement, security), compliance with legal obligations, and, where required, your consent (e.g., certain marketing).
‍Marketing and Advertising: We may collect and use your Personal Information for marketing and advertising purposes. Where required under applicable law, we will only engage in marketing and advertising activities with your consent.
‍Direct Marketing: Truffle uses Personal Information about you to contact you for marketing purposes, including telemarketing calls, and to send marketing emails that we believe may be of interest to you, such as product announcements, newsletters, educational materials, and details on upcoming events. You may opt-out of marketing emails as described in the “Opt out of marketing communications” section below.
‍Interest-based advertising: Truffle and our advertising providers use website data collection technologies to display products or features that are tailored to your interests and to present advertising on other sites. Compliance and Protection: Truffle may use your Personal Information to comply with our legal obligations, including to prevent, detect, mitigate, and investigate potential security issues, as well as fraudulent or illegal activity. Truffle may also use your Personal Information to comply with and enforce applicable legal requirements or to protect our interest or the interest of other third parties.
‍Research and Development: Truffle uses Personal Information in our legitimate business interests to diagnose technical problems, as well as to understand how our Services are being used, and to make improvements. As part of these activities, we may create aggregated, de-identified or other anonymous data from Personal Information we collect. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Services, and promote our business.
‍Hiring for Internal Openings: We may use Personal Information you provide to us as a job applicant on the basis of our legitimate interests to make decisions about filling roles within Truffle that we have open. For example, we may confirm prior employment you have provided to us in your resume or via your LinkedIn profile and may use your personal contact information to schedule and conduct interviews with you.

Do we use cookies?
Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the Site or our service providers' systems to recognize your browser and capture and remember certain information.

Where do we process data?
We process Personal Information in the United States. Where applicable law requires safeguards for international transfers, we use appropriate safeguards (e.g., Standard Contractual Clauses) as described in Cross-Border Processing of Personal Information.

‍How long do we retain your data?
We delete interview Media (audio/video files) after the Retention Period set in the inviting company’s plan. We may retain limited Non-Media Information (e.g., candidate name, contact details, timestamps, and security/audit logs) only for as long as needed to provide the Services and for security, fraud-prevention, and legal/compliance purposes, after which we delete or de-identify it. We may retain de-identified or aggregated information that does not identify you.

‍Do we disclose any information to outside parties?
We share information about you as follows:
Service Providers. We may share your information with our agents, vendors and other service providers (collectively “Service Providers”) in connection with their work on our behalf. Service Providers assist us with services such as payment processing, credit checks, data analytics, marketing and promotional services, website hosting, and technical support. Service Providers are prohibited from using your information for any purpose other than to provide this assistance, although we may permit them to use aggregate information which does not identify you or de-identified data for other purposes. You can find a list of Service Providers (Sub-processors) in the following section.
‍Third-Party Integrations: In connection with providing our Services, we may disclose your Personal Information to third parties that integrate with our Services, including providers listed in Sub-Processors.
‍Affiliates. We may share your information with our related entities, including our parent and sister companies. For example, we may share your information with our affiliates for customer support, marketing and technical operations.
‍Business Partners. We may share your information with our business partners in connection with offering you co-branded services, selling or distributing our Service, or engaging in joint marketing activities.
‍Business Transferees: We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose Personal Information to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction and with respect to any related due diligence. Personal Information may also be disclosed in the event of insolvency, bankruptcy, or receivership.
Security and Compelled Disclosure. We may share your information to comply with the law or other legal process, and where required, in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also share your information to protect the rights, property, life, health, security and safety of Truffle, our Services or any third party.
‍Consent. We may share your information for any other purpose disclosed to you and with your consent.
Without limiting the foregoing, in our sole discretion, we may share aggregated information that does not identify you or de-identified information about you with third parties or affiliates for any purpose except as prohibited by applicable law.

We do not sell, trade, or otherwise transfer your Personal Information except in accordance with this Privacy Policy.

Sub-Processors: The following sub-processors provide services necessary for core platform features:

Amazon Web Services - Cloud hosting and data storage
Intercom - Customer support and in-app messaging
Stripe -Payment processing
Postmark - Transactional email delivery
ElevenLabs - Audio processing
OpenAI - LLM text generation and audio processing
Google - LLM text generation and cloud services
We may update this list as our services evolve; material changes will be reflected here.

‍Privacy Rights and Choices

We offer the following privacy rights and choices in connection with Personal Information:
‍Access to account information. You may update, correct, or delete your account information by accessing the account you have established with us on the Services.
Opt out of marketing communications. You can opt out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the emails you receive from us. If you do so, you will continue to receive service-related and other non-marketing emails until you cease using our Services linked to those service updates.
‍Privacy rights. You have the right to submit the following requests about your Personal Information, depending on your location and the nature of your interactions with our Services: Information about how we have collected and used Personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.Access to a copy of the Personal Information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.Correction of Personal Information that is inaccurate or out of date.Deletion of Personal Information that we no longer need to provide the Services or for other lawful purposes.Opt out of online tracking. You can limit online tracking by disallowing cookies (except for strictly necessary cookies required to provide the Services)Additional rights, such as to object to and request that we restrict our use of Personal Information.You may submit these requests as provided in the “Contact Us” section below. We may request specific information from you to help us confirm your identity and process your request. Applicable law can limit these rights, for example, by prohibiting businesses from providing certain sensitive information in response to an access request and limiting the circumstances in which they must comply with a deletion request. If we decline a request, we will explain why we took that action, subject to legal restrictions.

If you are not satisfied with how we address your request, you may submit a complaint by contacting us. If you are based in certain jurisdictions, you may lodge a complaint about how we handle your Personal Information with a supervisory authority, including in your country of residence, place of work, or where you believe an incident took place.

California Privacy Notice
If you are a California resident, you may have rights under California law (e.g., to know, access, correct, delete, and to limit the use of certain information). We do not sell or share (for cross-context behavioral advertising) Personal Information. You may submit a request to legal@hiretruffle.com. If you submit a request, we will verify your identity and respond as required by law.

Children’s Personal Information
Our Services are not directed to, and we do not knowingly collect Personal Information from, (a) children under thirteen (13) years of age in the United States, or (b) individuals under sixteen (16) years of age in the European Economic Area, the United Kingdom, or Switzerland. If you do not meet the applicable minimum age, do not use the Services. If we learn that we have collected information below these ages, we will delete it. Parents/guardians may contact legal@hiretruffle.com to request deletion.

Candidate Invitees (No Account)
If you receive a private link to record an interview for a company using our platform, you are an Invitee and do not need an account. We collect your name, contact details, and the interview audio/video you record, and we process this information on behalf of the inviting company for its hiring process. The inviting company sets how long interview Media is stored under its plan (“Retention Period”). After that period, we delete the Media. We may retain limited Non-Media Information (e.g., your name/contact details, timestamps, and security/audit logs) only for as long as needed to provide the Services and for legal, security, and fraud-prevention purposes, after which we delete or de-identify it. If transcripts are enabled for a job, they are treated as Non-Media Information and are deleted or de-identified when no longer needed for the hiring process. To request a copy or deletion, contact the inviting company or email privacy@hiretruffle.com; we will assist even if you do not have an account. We do not create biometric identifiers (e.g., faceprints, voiceprints) from candidate recordings and do not perform emotion inference on recordings of minors.

Third-Party Services
Our Site and online Services may include links to third-party websites, plug-ins, applications and other services. Except where we specify otherwise, this Privacy Policy does not apply to, and we are not responsible for, any privacy practices of third-party websites and online services or the practices of other third parties. To learn about the privacy practices of third parties, please visit their respective privacy policies.

Data Security
We use commercially reasonable technical and organizational measures to help secure Personal Information against loss, misuse, and alteration appropriate to the type of Personal Information processed.

However, no data transmission over the internet or between devices can be guaranteed to be 100% secure. While we strive to protect Personal Information, we do not guarantee the security of Personal Information and you provide Personal Information at your own risk.

Cross-Border Processing of Personal Information
If you provide us with Personal Information when using the Services, then please note that we are headquartered in the United States. To provide and operate our Services, it is necessary for us to process Personal Information in the United States.

If we transfer Personal Information across borders such that we are required to apply appropriate safeguards to Personal Information under applicable data protection laws, we will do so. Please contact us for further information about any such transfers or the specific safeguards applied.

Use of our Services
By using the Site or Services, you acknowledge this Privacy Policy describes how we process Personal Information. Where consent is required by law (e.g., certain marketing cookies), we will request it separately.

Updates to This Privacy Policy
We will update this Privacy Policy from time to time. When we make changes to this Privacy Policy, we will change the “Last Updated” date at the beginning of this Privacy Policy.

Contact Us
Truffle is the entity responsible for the processing of Personal Information governed by this Privacy Policy. If you have any questions or requests in connection with this Privacy Policy or other privacy-related matters, please send an email to legal@hiretruffle.com.

Alternatively, inquiries may be addressed to:
Truffle Spritz, Inc.
Attn: Legal Dept.
8 The Green #20671
Dover, DE 19901