1. Overview
Section 11.2 of our Terms of Service and the corresponding section of our Privacy Policy permit certain data-partner activities only after a Candidate affirmatively opts in to a specific partner SourceHire has identified by name. This page is the roster of those partners.
The page is updated within seven (7) days of any change to the roster — partner addition, removal, change in purpose, change in fields transferred, or change in whether the partner uses the data for its own business operations.
2. Current Roster
Smmt
Listed since 2026-06-02Legal entity: Smmt
- Purpose
- Recruitment matching, automated pipeline signaling, and proprietary machine learning model training and evaluation. Used both on SourceHire’s behalf and for the partner’s own business operations.
- Fields transferred
- candidate ID, full name, email address, phone number, city and state, resume plaintext, industry and skills tags, structured work history, structured education history, employer identifier of the job applied to, consent status flag, timestamp, and IP address
- Consent option that authorizes transfer
- data_partner_rinaldi_data_portal
- Partner uses data for own business operations?
- Yes
Partner's privacy policy: https://rinaldi.dev/privacy
Smmt (expanded scope — pending)PENDING
Disclosed since 2026-06-15Legal entity: Smmt
Status: PENDING: Awaiting external privacy-counsel approval of the v2.3 Privacy Policy / Terms of Service amendments, the consent text, and the bias-audit + Title VII indemnity clauses in the Data Sharing Agreement. No transfers under this entry until counsel approval is on file. Disclosed publicly so candidates have visibility into pending data-partner activity.
- Purpose
- Population-level statistics, machine-learning model training, candidate matching that influences hiring outcomes, and cross-context behavioral advertising via IAB / UID2 framework participation. Used both on SourceHire’s behalf and for Smmt’s own business operations.
- Fields transferred
- candidate ID, full name, email, phone, street address, city, region, postal code, country, demographic data: gender, ethnicity, cultural affinity, age, birth year, marital status, household composition, household income band, education and profession: education level, occupation, job title, seniority level, current employer, industry vertical, life stage, certifications, skills, device and platform: primary OS, primary device type, connected-TV devices, wearables, primary browser, advertising identifiers: IAB Transparency & Consent Framework strings (GPP, USP, TCF), UID2 matched flag, consent metadata: consent status flag, timestamp, IP address
- Consent option that authorizes transfer
- data_partner_smmt_audience_share
- Partner uses data for own business operations?
- Yes
Partner's privacy policy: https://rinaldi.dev/privacy
3. How a Partner Gets On (or Off) This List
A third-party data partner is added to this roster only after all of the following are in place:
- A signed controller-to-controller data sharing agreement (or controller-to-processor DPA, where the partner truly acts under our instructions) covering lawful basis, deletion mechanics, breach notification, and audit rights.
- A dedicated consent option in our public consent registry, naming the partner, describing exactly what data is transferred, and stating the purpose in plain language.
- External privacy-counsel review of the consent text and the data flow.
- A migration to the consent ledger that links every partner-authorizing opt-in event to the named partner and to the policy version in effect at the time of the grant.
A partner is removed from this roster when either party terminates the arrangement, or when the relationship materially changes (e.g. expanded purpose). Removal is posted here within seven (7) days, and we cease new transfers on the removal-effective date. Data already transferred is deleted or returned per the agreement.
4. Your Rights
You can revoke any data-partner opt-in at any time from /apply/me. Revocation stops future transfers immediately. To request that data already transferred to a partner be deleted on the partner's side, email privacy@sourceunlimited.co and we will forward the request to the partner under the deletion clause of our agreement with them.