Privacy Policy

Ture serves two categories of customer relationship, and our responsibilities differ in each.

• When an employer or partner organization uses Ture to run a workforce-transition program, that organization is the data controller (or “business”) for its participants' personal information, and Ture acts as a data processor (or “service provider”) on its behalf, governed by our customer agreement and applicable data-processing terms.
• When you visit our public websites, contact our sales team, or apply for a role with us, Ture is the controller of the personal information you provide.

Where Ture acts as a processor, the relevant employer's own privacy notice governs the program, and this policy explains our supporting practices.

Information you provide

• Account and profile data, such as name, work email, job title, and organization.
• Career and skills data that participants choose to add, such as work history, skills, education, and documents like résumés.
• Content you create in the platform, including messages to Ture AI, saved jobs, applications, and notes.
• Communications you send us, including sales enquiries, support requests, and survey responses.

Information collected automatically

• Usage and device data, such as pages viewed, features used, IP address, browser type, and approximate location derived from IP.
• Cookies and similar technologies, as described in our Cookie Policy.

Information from third parties

• Identity and provisioning data from an employer's HRIS or identity provider (for example, ADP, Microsoft Entra, or Okta) when an employer enrolls participants.
• Information from marketplace and integration partners that you choose to connect.

We use personal information to operate, secure, and improve the Services, including to:

• Provide and personalize the platform, including AI-assisted career support, job discovery, and skills matching.
• Generate aggregated, de-identified program analytics for employers (see “The privacy boundary” below).
• Provide customer support and respond to enquiries.
• Maintain security, prevent fraud and abuse, and enforce our terms.
• Comply with legal obligations and exercise or defend legal claims.
• With your consent where required, send product updates and marketing communications.

Ture is designed so that an employer's HR team and an employee see different data, and that boundary is enforced by our data model, not by policy alone.

• An employee's job-search activity, chat history with Ture AI, saved jobs, and personal documents are scoped to that employee's private workspace.
• Employers receive program-level metrics only — such as activation, engagement, placement, and spend — in aggregated, de-identified form.
• No HR seat can elevate into an individual employee's private job-search activity.
• Provider and coach seats have a separate permission tier scoped only to the cases assigned to them.

Where the GDPR or similar laws apply and Ture acts as a controller, we rely on the following legal bases: performance of a contract; our legitimate interests in operating and improving the Services; compliance with legal obligations; and your consent where required (for example, for certain marketing or non-essential cookies). You may withdraw consent at any time.

We do not sell personal information. We share it only as needed to run the Services:

• With service providers and sub-processors (such as cloud hosting, analytics, and communications providers) under contractual confidentiality and data-protection obligations.
• With the employer that sponsors a participant's program, limited to the aggregated, de-identified analytics described above.
• With marketplace or integration partners that you choose to engage.
• In connection with a merger, acquisition, or other corporate transaction, subject to this policy.
• When required by law, or to protect the rights, safety, and security of Ture, our customers, or the public.

We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes. Where Ture acts as a processor, retention follows the sponsoring employer's instructions and data-retention policy. When information is no longer needed, we delete or de-identify it.

We protect personal information using technical and organizational measures including encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, single sign-on, and continuous monitoring. For more detail, see our Security & Compliance overview. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

Ture is operated from Canada, and customer data is stored and processed in Canada with tenant-specific residency controls. If a customer-approved transfer is required, we use appropriate safeguards such as standard contractual clauses.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing or withdraw consent. To exercise these rights, contact us using the details below. If Ture processes your information on behalf of an employer, we will refer your request to that employer and support their response. We will not discriminate against you for exercising your rights.

Ture's AI surfaces matches, recommendations, and insights, but it does not make hiring, termination, or other legally significant decisions about individuals on its own. Where automated tools are used in employment contexts, we follow applicable requirements such as New York City Local Law 144, including bias auditing and candidate notice where applicable.

We use cookies and similar technologies to operate our websites, remember your preferences, and understand usage. You can manage your preferences as described in our Cookie Policy.

The Services are intended for use by adults in a workplace context and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where required, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.