Data Processing Agreement

For candidate personal data the Agency uploads or enters, the Agency is the controller: it decides which candidates to add, what to share, and with whom. Throughline is the processor, acting only on the Agency's instructions as expressed through the product (importing a resume, formatting it, creating a submittal link, deleting a candidate).

The Agency confirms, for every candidate it imports, that it has a lawful basis to store and share that candidate's resume for recruitment, and that the candidate has been told this will happen. The import step records who gave that confirmation and when.

Candidate data is whatever is in the uploaded resume: name, contact details, work history, education, skills, and any free text the candidate included. We process it to extract it into a structured resume, render it in the Agency's branded template, generate the Agency's PDF export, serve submittal links the Agency creates, and, when the Agency uses AI features, send the resume text to our model provider to produce the requested edits. We do not use candidate data to train models, build profiles across agencies, or contact candidates for our own purposes.

We use a small number of infrastructure providers to run the service. Each is bound by written terms at least as protective as this agreement:

• Vercel (hosting and application delivery)
• A managed PostgreSQL provider (database storage)
• Anthropic (AI model inference for formatting and writing features; data is not retained for training under their commercial terms)
• Clerk (authentication and billing)
• Stripe (payments; no candidate data)

We will give the Agency at least 30 days' notice before adding a sub-processor that would handle candidate data, with the right to object.

Candidate data is encrypted in transit and at rest. Access inside Throughline is limited to the Agency's own workspace members. Submittal links are unguessable tokens that the Agency can withdraw at any time, after which the page shows nothing. We will notify the Agency without undue delay, and in any case within 72 hours of becoming aware, of a personal data breach affecting candidate data.

Where a candidate exercises a right of access, correction, deletion, or objection, the Agency is responsible for responding. Throughline will help: deleting a candidate in the workspace removes their resume, export history, and submittal links, and we will delete backups in the normal rotation. If a candidate contacts us directly, we will refer them to the Agency unless law requires otherwise.

Candidate data stays as long as the Agency keeps the candidate in its workspace. When the Agency deletes a candidate, closes its workspace, or its subscription ends, we delete or return the data within 30 days, except where retention is required by law.

Our infrastructure is hosted in the United States. For candidates in the UK or EEA, the Agency relies on the standard contractual clauses incorporated by reference here, and we will sign them on request.

We will answer reasonable written questions about our processing, and once a year, on request, provide the information an Agency needs to show its own compliance. Agencies that need a countersigned copy of this agreement with their legal name filled in can request one at our contact page.

If a recruiter sent you a link to your resume on Throughline, or you were shown a resume through such a link, here is what that means.

• The agency that shared it is responsible for your data. They confirmed to us that you agreed to them storing and sharing your resume for recruitment.
• Throughline stores and formats the resume on the agency's behalf. We do not sell it, use it to train AI, or contact you ourselves.
• Submittal links are private and can be withdrawn by the agency at any time. The page asks viewers not to forward or store the document beyond the purpose it was sent for.
• To see, correct, or delete what the agency holds, contact the agency. If you cannot reach them, write to us through the contact page and we will help.