Privacy Policy

Last updated: March 8, 2026

This Privacy Policy explains how Loam ("we," "us," "our") collects, uses, and shares information when you use our website and applicant tracking services ("Services").

Loam is currently operated directly by its founder and not yet through a separate legal entity. If that changes, we may update this policy to reflect the name and contact details of that entity.

1. Information We Collect

Information you provide

  • Account information: name, email address, company name, and password when you register
  • Candidate data: resumes, cover letters, contact information, and other application materials submitted by candidates through your job postings
  • Communications: messages you send through the platform, support requests, and feedback
  • Payment information: billing details processed by our payment provider (we do not store full payment card numbers)

Information collected automatically

  • Usage data: pages visited, features used, and actions taken within the Services
  • Device information: browser type, operating system, and device identifiers
  • Log data: IP addresses, access times, and referring URLs
  • Cookies: we use essential cookies for authentication and optional analytics cookies (see Section 6)

2. How we use your information

We use the information we collect to:

  • Provide, maintain, and improve the Services
  • Process candidate applications and power AI-assisted features such as candidate summaries and suggested responses
  • Send transactional emails (account confirmations, application notifications, billing receipts)
  • Respond to support requests
  • Detect and prevent fraud, abuse, or security incidents
  • Analyze usage patterns to improve the product (using aggregated, de-identified data)

3. Customer data roles

When an employer or hiring team uses Loam to collect and review applications, that customer generally controls the candidate data in its workspace. In those cases, Loam acts as a service provider or processor on the customer's behalf.

If you are a candidate applying through a job posting powered by Loam, the employer that posted the job usually decides how your application data is used. We process that data to provide the service to the employer.

4. AI and candidate data

Loam uses AI to help you evaluate candidates, draft communications, and streamline your hiring workflow. When AI processes candidate data:

  • Candidate data is used only to generate outputs for your organization
  • We do not use customer candidate data to train generalized models for other customers unless we clearly disclose that change and obtain any required consent
  • AI outputs are suggestions, and all hiring decisions remain with the employer using the platform
  • We use third-party AI providers who are contractually bound to process data only as instructed and to maintain confidentiality

5. How we share information

We do not sell your personal information or candidate data. We share information only in these circumstances:

  • Service providers: hosting, payment processing, email delivery, and AI infrastructure providers who process data on our behalf under strict contractual obligations
  • Legal requirements: when required by law, regulation, legal process, or governmental request
  • Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to affected users
  • With your consent: when you direct us to share information with a third party

6. Cookies and analytics

We use essential cookies and similar technologies for authentication, session management, security, and core product functionality.

We also use analytics tools to understand product usage and improve the Services. On marketing pages, that may include tools such as PostHog. If you block non-essential cookies through your browser or a consent tool we provide, some analytics features may stop working, but the core Service should still function.

7. Data retention

We retain your account information for as long as your account is active. Candidate data is retained according to your organization's settings and applicable data retention laws. After an account is closed, we may retain information for a reasonable period for backup, legal, security, fraud-prevention, and compliance purposes, then delete or de-identify it in the ordinary course.

8. Data security

We use administrative, technical, and physical safeguards designed to protect personal information. Those measures include access controls, logging, and encryption in transit. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Request deletion of your information
  • Export your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent

To exercise these rights, contact us at support@hireloam.com. We will review and respond in accordance with applicable law.

For candidates

If you applied for a job through Loam and wish to exercise your privacy rights, please contact the employer who posted the job. They are the data controller for your application data. You may also contact us directly and we will help route your request.

10. Legal bases for processing

Depending on where you are located, we rely on different legal bases to process personal information. These may include performing a contract, providing the Services you request, complying with legal obligations, pursuing legitimate interests such as security and product improvement, and consent where required.

11. International data transfers

Our Services are hosted in the United States. If you access the Services from outside the US, your information may be transferred to and processed in the US. We use appropriate safeguards for international data transfers as required by applicable law.

12. Children's privacy

Our Services are not directed at individuals under 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Services. The "last updated" date at the top reflects the most recent revision.

14. Contact

If you have questions about this Privacy Policy or our data practices, contact us at support@hireloam.com.