Request your data

Use this page to request a copy of the personal information SourceHire holds about you, to request its deletion, or to ask for a record of which third parties (if any) have received it. You do not need a SourceHire account to submit a request.

Access

GDPR Art 15 · CPRA § 1798.110

Get a structured copy of every piece of data we hold about you — your profile, application history, consent ledger entries, and any audit events on your record.

Deletion

GDPR Art 17 · CPRA § 1798.105

Permanently erase your account and every linked artifact: structured profile, resume blob, application history. The consent ledger retains a tombstone entry that proves the erasure happened.

Portability

GDPR Art 20

Receive your data in a machine-readable format (JSON) suitable for transfer to another service. Available where the data was provided to us directly by you.

Recipients

CPRA § 1798.115

Get a list of every third party — recruiter, data partner, or processor — with whom we've shared any of your personal information in the past 12 months.

Submit a request

Fill in the form below. We'll send an acknowledgment to the email you provide within 7 days, and complete fulfillment within 30 days as required by GDPR Art 12(3) and CPRA § 1798.130(a)(2).

What kind of request?

Access — give me a copy

Structured export of every field we hold about you.

Deletion — erase my account

Permanent removal of profile, resume, application history.

Portability — machine-readable export

JSON format suitable for transfer to another service.

Recipients — who has my data

List of every third party we shared your data with in the past 12 months.

Email address

We'll use this to confirm your identity via a one-time link, and to send the acknowledgment + final response.

Where do you primarily reside?

Informational — your rights apply regardless. This tells us which legal framework to cite in our response.

Additional details (optional)

Specific job postings, date ranges, or anything that helps us scope the request. Avoid sensitive details — this email is unencrypted in transit.

By submitting, you confirm the email above is yours (or that you're an authorized agent — see the section below the form).

How we verify your identity

Both GDPR (Recital 64) and CPRA (§ 1798.140(i)) require us to confirm you are the data subject before we release or delete records. Our verification is calibrated to the sensitivity of the request:

Recipients (who did you share my data with): Email-link confirmation only — same standard as a magic-link sign-in.
Access (give me a copy): Email-link confirmation plus a short matching question against data you originally provided (e.g., the date of an application you submitted).
Deletion (erase my account): Email-link confirmation, the matching question, and a final single-click confirmation on a page that names every artifact about to be removed. Irreversible.
Portability: Same standard as Access.

Filing on behalf of someone else

Authorized agents may submit requests under CCPA § 1798.135(c) (California) or GDPR Article 12 (everywhere else). Email privacy@sourcehire.app with the data subject's signed written authorization attached. We will not action third-party requests submitted through the form above.

Service level: Acknowledgment within 7 days. Fulfillment within 30 days for non-complex requests, with a one-time 30-day extension for complex requests (GDPR Art 12(3) / CPRA § 1798.130(a)(2)(B)). You will be notified before any extension.

Cost: Free. We do not charge for any request under either regime, and do not invoke the “manifestly unfounded or excessive” exception unless we can specifically document why a request meets that bar (we never have to date).

Appeals: If your request is denied or only partially fulfilled, you may appeal by replying to the acknowledgment email. You also retain the right to lodge a complaint with your supervisory authority (your country's data protection authority under GDPR, or the California Privacy Protection Agency under CPRA).