Candidate Rights Policy

1Your Core Rights

1.1 Right of Access

You have the right to request a copy of all personal data Oodser holds about you. This includes your profile data, application history, behavioral data, and any AI-generated assessments associated with your account.

How to exercise: Submit a Subject Access Request to data@oodser.com. We will respond within 30 days with a structured copy of your data.

1.2 Right to Rectification

You have the right to correct any inaccurate or incomplete personal data. Most profile data can be corrected directly through your account settings. For data you cannot edit directly, contact us at data@oodser.com.

1.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data where:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there is no overriding legitimate interest
• The data has been unlawfully processed

Deleting your account initiates the erasure process for personal data. Anonymised behavioral data contributing to aggregate intelligence products is not subject to erasure as it cannot be linked to you individually.

1.4 Right to Restriction

You may request that we restrict processing of your personal data where:

• You contest the accuracy of the data, pending verification
• Processing is unlawful but you prefer restriction to erasure
• We no longer need the data but you require it for legal claims
• You have objected to processing and verification is pending

1.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON or CSV), and to transmit it to another service. This right applies to data you have provided to us and which is processed by automated means on the basis of your consent or contract.

Request your portable data export through your account settings or by contacting data@oodser.com.

1.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interest, including profiling for professional intelligence purposes. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for legal claims.

1.7 Rights Related to Automated Decision-Making

Where automated processing significantly affects you — such as AI-assisted candidate screening — you have the right to:

• Be informed that automated processing is taking place
• Request human review of any automated decision
• Express your view and contest the decision
• Receive a meaningful explanation of how the decision was reached

Oodser's Platform is designed to require human review for all consequential hiring decisions. See the AI Processing Disclosure for full details.

2Candidate-Specific Rights in the ATS

When your data is processed through an employer's ATS workflow on Oodser:

• You have the right to know which companies have accessed your profile or application data
• You have the right to withdraw an application at any time prior to a final decision
• You have the right to request deletion of your application data from a specific employer's pipeline
• You have the right to request an explanation of any screening outcome where AI assistance was used

3Verified Work History

When an employer confirms your work history through Oodser's verified work feature:

• You will be notified of any verification request before it is processed
• You may dispute any verified data you believe is inaccurate
• Verification data is stored separately from self-reported profile data
• You may request removal of a specific verification entry subject to legal retention requirements

4How to Exercise Your Rights

All rights requests should be submitted to: data@oodser.com

Please include:

• Your full name and registered email address on Oodser
• The specific right you wish to exercise
• Any relevant details to help us locate the relevant data

We will acknowledge your request within 72 hours and respond substantively within 30 days. Complex requests may be extended by a further 60 days with notification.

We do not charge fees for rights requests unless they are manifestly unfounded or excessive, in which case we will notify you before proceeding.

5Right to Complain

If you are unsatisfied with our response to a rights request or believe we have not handled your data lawfully, you have the right to lodge a complaint with:

• Rwanda Utilities Regulatory Authority (RURA) — if you are in Rwanda
• Your local EU data protection authority — if you are in the EEA
• The UK Information Commissioner's Office (ICO) — if you are in the UK
• Your local data protection authority — in any other jurisdiction

6Updates

This policy will be updated to reflect changes in law or our practices. We will notify you of material changes via the Platform or email.

7Contact

• Data Protection Contact: data@oodser.com
• Company: Oodser Ltd
• Website: oodser.com