Privacy Policy

Version 2026-10-17a

1. Who is responsible

Talent Scope Group LLC, 1309 Coffeen Avenue, STE 1200, Sheridan, WY 82801, United States of America, operates ReqOwner and is the controller of the personal data described here. For every privacy question or request, write to privacy@reqowner.com.

This policy covers two groups of people: our customers and visitors to reqowner.com (Section 2), and the professionals who appear among the people we found for a job posting (Section 3). If you are in the second group, you did not sign up for anything; Section 3 explains what we hold about you and how to stop it.

2. Customers and visitors

What we collect.

• Account data: email address, a password if you set one (stored only as a hash by our sign-in provider), firm name, website, LinkedIn page if you give it, the niche you describe, target companies, and the date and version of the Terms you accepted.
• If you book a walkthrough without an invitation: your work email, your firm's website, the niche you recruit for and, if you give one, the link to one open job posting. We ask for these so that a person can prepare the call and confirm you recruit for a living before we approve your account. A person opens your firm's website in an ordinary web browser, and we write down what they checked and whether the call took place. The time you pick, and the name and email you give there, go to Google's appointment scheduling, which takes the booking (see the technical data below and the list of processors). We do not collect anything from a LinkedIn profile by machine. We keep this for as long as the request or your account exists; if we decline the request, we delete it with the account.
• If you get contacts for one job posting without an account: the job posting you paste (its text or its link), the email address you give at Stripe's checkout, where you also accept our Terms, and a scrambled form of your IP address that we keep with the payment to limit how many job postings one network can start. We make an account for that address, without a password, and email it a sign-in link; it cannot be signed in to until that link is used. In the browser you paid from we set one cookie, for two hours, that opens that job posting's contacts and nothing else. If the address already has an account, we change nothing in it, release the hold and only email that address. We keep this for as long as the account exists.
• What you do in the Service: advertisements you release, get contacts for or paste in, labels you set, and the credits you use.
• Billing data: your plan and payment status. Card details go to Stripe and never reach us.
• Technical data: IP address, browser and server logs, one sign-in cookie that is strictly necessary for the Service, and, when you open an invitation link, one cookie that carries the invitation to the sign-up page, and, when you pay for one job posting without an account, one cookie that opens that job posting's contacts in that browser (each strictly necessary for that). We use no advertising cookies and no session recording. Analytics are described below. The booking page (/book) shows Google's appointment scheduling in a frame: when the page loads, Google receives your IP address and browser data and may set cookies of its own, which we do not control.
• The check against automated sign-ups: on the sign-up, sign-in and password-reset pages, and on the page where you paste a job posting without an account, from the moment the page opens, Cloudflare Turnstile reads your IP address and signals from your browser (such as its user agent and TLS fingerprint) to tell a person from a script, and may keep data in your browser for that check. It is strictly necessary to keep the Service free of fake accounts.

Why, and on what legal basis. To review your application, provide the Service and bill you (performance of a contract, GDPR Art. 6(1)(b)); to keep the Service secure and prevent misuse (legitimate interests, Art. 6(1)(f)); and to keep records that tax law requires (legal obligation, Art. 6(1)(c)). We send you service emails; we send marketing emails only where the law allows it, and you can stop them at any time.

How long. Account data for as long as your account exists. If we decline your application, we delete the account and its data at that moment. When your subscription ends, your access to the contacts you got ends. If you subscribe again within 12 months, that access returns. We keep the record of the contacts you got for 12 months for that reason, then delete it. We keep billing records as long as tax rules require. Contact data you copied into your own systems is your responsibility. After those 12 months we delete only the record of the contacts you got. Your account stays until you ask us to delete it. If you ask us at privacy@reqowner.com to delete your account, we delete it and its data within 30 days, except billing records, which we keep as long as tax law requires.

Analytics and measurement. We keep our own record of what happens on the website and in the Service. It is stored by us and kept for as long as the account, or the invitation it is linked to, exists; we do not delete it on a schedule. We use it to run the Service, to see where our customers come from, and to decide whom to contact about a trial. It is linked to the account or to the invitation you arrived through: that an invitation link was opened, the pages a signed-in customer or an invited visitor opens, the steps of signing up and signing in, and, for a signed-in customer, what they do in the Service (searches, advertisements released or whose contacts they got, exports, labels). It also records every click on a link or a button, as two things only: the page (its address without anything after a question mark except the campaign tags, and with internal numbers removed), and which link or button it was: our own short name for it, the page it leads to on our site, the domain of a site such as linkedin.com, or only that it was an email or phone link. A click never records the text on the page, the full address of another site, or a name, email address, phone number or company, including those of the professionals shown in the Service.

We also measure visits with Umami, an analytics tool that we run ourselves, on our own infrastructure. It is served from our own domain, sets no cookie and shares nothing with Google or any other third party. It receives, for each page you open: the page address without anything after a question mark except the campaign tags utm_source, utm_medium andutm_campaign where the link carried them, the page’s path in place of its title, the site you came from (its domain only), your browser and operating system, screen size, language, and your country and city as far as your IP address shows them (the address itself is not kept). It also receives every click on a link or a button, described as above, from every visitor, and, for a signed-in customer, a random internal number (never an email address, name, phone number or company). Our servers additionally send four events, starting a trial, getting the contacts for a job posting, starting a checkout and a purchase, with that internal number. Nothing is sent from the pages of the admin area. The visit counter in your browser honours your browser’s Do Not Track setting; the four events our servers send and our own record above do not, because they are part of running the Service. We use no advertising cookies, no session recording and no other tracker of our own; the one outside page is the booking page, described under technical data above. We keep Umami's visit data with no end date; we do not delete it on a schedule. Our legal basis is our legitimate interest in understanding how the Service is found and used (Art. 6(1)(f)); you can object at any time by writing to privacy@reqowner.com.

Opening this invitation link is recorded so we can manage your trial.

The cookies of this kind are ro_invite, set when you open an invitation link, for 14 days: it carries the invitation to the sign-up page; andro_job, set in the browser that paid for one job posting without an account, for two hours: it opens that job posting's contacts and nothing else.

3. Professionals we found for a job posting

ReqOwner tells recruiting firms which professionals are connected to a specific open job advertisement, so that they can contact those professionals in their professional capacity about that role. For each advertisement a customer releases, we show at most five people.

What we hold. Your name, job title, employer, work location (city, state or region, country), the address of your public LinkedIn profile and the professional text on it (headline, summary, role description), a work email address, and a phone number with its line type. We also record our own assessment: how your role relates to the advertisement, how many management levels above the advertised role you sit, and the evidence for it. We do not collect sensitive data such as health, religion, ethnicity or political opinions.

Where it comes from. Job advertisements that employers publish on their career sites and applicant-tracking systems; public web search results; public professional profile data supplied by third-party data providers; and contact-data providers that find and check work email addresses and phone numbers. We use third-party data services to retrieve publicly available information. ReqOwner does not log in to LinkedIn and does not give LinkedIn credentials or session cookies to those services.

Legal basis. Our legitimate interest, and that of our customers, in business-to-business recruitment communication (GDPR Art. 6(1)(f)). We keep the interference small: only professional data, only in connection with a real, open advertisement, at most five people per advertisement, no sensitive data, and an objection from you ends it at once. Because we do not hold your contact details before we compile them, informing each person individually at that moment would require disproportionate effort (Art. 14(5)(b)); this public notice is how we inform you, and a customer who contacts you must tell you where they obtained your details.

Who receives it. Customers who get the contacts for a job posting see the rows for it. From then on they are independent controllers of what they saw, bound by our Terms to use it only for professional recruitment contact, to stop on your objection and to delete your data when we ask them to. No decision with legal or similarly significant effect on you is made automatically (Art. 22).

How long. A company’s list of employees is reused for at most 180 days and then read again. A customer who got the contacts for a job posting sees them while their account has access. When that access ends, those contacts are kept, locked, for 12 months; then we delete the record that this customer got them. What we hold about you is not deleted on a schedule: we keep it until you ask us to remove it, as described below.

To stop it. Write to privacy@reqowner.com with your name and the work email address, phone number or LinkedIn profile you want removed, and the employer you work for: with the employer we withhold your name at that company only, and with an email address, phone number or profile we withhold you wherever you appear. With only your name, we withhold everyone who has it until we can tell you apart. From the moment we record your request, we deliver your email address and phone number to no one — every delivery checks the request first — and we remove you from the people we found for every job posting. We keep your name and the details you sent us for at most 30 days, for that purpose only. After that we keep only keys made from them, which cannot be turned back into your name or details, so that we can recognize you and keep you off every set of people we find for a job posting if your details turn up again.

4. Service providers

We use these providers to run the Service. Each receives only what its task needs.

5. International transfers

We are based in the United States, and your data is processed there. Where our providers process data of people in the EU, the EEA, Switzerland or the UK outside those areas, they do so under the EU-U.S. Data Privacy Framework (with its UK and Swiss extensions) where they are certified, and otherwise under the European Commission’s Standard Contractual Clauses or the UK’s International Data Transfer Addendum.

6. Your rights in the EU, the EEA and the UK

You may ask for access to your data, correction, erasure, restriction of processing and data portability, and you may object at any time to processing based on legitimate interests. You may also complain to the data protection authority where you live or work, or, in the UK, to the Information Commissioner’s Office.

7. Your rights in California and other U.S. states

In the last twelve months we collected, about professionals we found for a job posting, identifiers (name, email address, phone number, profile address) and professional or employment-related information (title, employer, work location), from the sources in Section 3, for the purpose in Section 3. We disclose these categories to our customers for payment, which California and several other states treat as a “sale”. We do not use or disclose sensitive personal information, and we do not knowingly sell data of anyone under 16.

Depending on your state, you have the right to know what we hold, to delete it, to correct it, and to opt out of its sale or sharing, and not to be treated differently for using these rights. To opt out or to use any other right, write to privacy@reqowner.com with the subject “Do not sell or share”, or send any request; an authorised agent may do this for you with your signed permission. We verify a request by matching the details you give us against what we hold, and we answer within 45 days. If we refuse, you may appeal by replying to our answer.

8. Security

Data travels encrypted. Each customer can read only their own account’s rows, enforced in the database. Keys to our providers are kept outside our code.

9. Children

The Service is for businesses. We do not knowingly collect data of anyone under 18.

10. Changes

When this policy changes, the version date above changes. We tell customers about a material change by email before it takes effect.