Privacy Policy

Louis Laine LLC, doing business as Loam ("Loam," "we," "us," or "our"), provides an applicant tracking and hiring workspace for startups. This Privacy Policy describes how we process personal information that we collect through our website, application, communications, marketing activities, and related services that link to this Privacy Policy (collectively, the "Service").

If you use Loam on behalf of an employer or hiring team, that organization generally controls the candidate and applicant data in its workspace. In those cases, Loam processes that data as a service provider or processor on the organization's behalf. If you apply for a job through a Loam-powered careers page, the employer that posted the job generally decides how your application data is used.

1. Personal information we collect

Information you provide to us

Contact and account data: name, email address, company name, professional title, password or authentication data, and other information you provide when creating or managing an account.
Customer and workspace data: jobs, hiring stages, notes, feedback, team settings, candidate records, and other content submitted to or generated in a Loam workspace.
Candidate and applicant data: resumes, cover letters, work history, education, skills, links, contact information, application answers, messages, interview feedback, and other materials submitted by or about candidates and prospects.
Communications data: support requests, product feedback, emails, chat messages, and other communications with us or sent through the Service.
Billing data: billing contact details, subscription status, invoices, and payment-related records. Payment card details are processed by our payment provider, and we do not store full payment card numbers.

Information from third-party sources

We may receive personal information from customers, candidates, service providers, data providers, public sources, connected integrations, business partners, and parties involved in an actual or prospective business transaction. For example, a customer may upload a candidate resume, connect an email account, or use sourcing features that collect publicly available professional profile information.

Information collected automatically

Device and log data: IP address, browser type, operating system, device identifiers, language settings, access times, referring URLs, and error logs.
Usage data: pages or screens viewed, features used, navigation paths, actions taken in the Service, and interactions with emails or product communications.
Cookies and similar technologies: information collected through cookies, pixels, local storage, and similar tools used for authentication, security, analytics, and product functionality.

2. How we use personal information

We use personal information for the following purposes:

Provide, operate, secure, and maintain the Service.
Create and manage accounts, workspaces, jobs, and hiring workflows.
Process applications, candidate records, resumes, notes, feedback, and communications at the direction of our customers.
Power AI-assisted features, including candidate summaries, resume parsing, suggested responses, sourcing workflows, and hiring workflow assistance.
Send transactional communications, including account notices, application notifications, billing messages, security alerts, and service updates.
Respond to support requests, troubleshoot problems, and improve the Service.
Analyze usage patterns, measure product performance, and develop new features using aggregated, de-identified, or anonymized data where appropriate.
Prevent fraud, abuse, security incidents, and violations of our terms or applicable law.
Comply with legal obligations and protect our rights, users, customers, and business.

3. AI and candidate data

Loam uses artificial intelligence to support hiring workflows. AI outputs are suggestions and do not make hiring decisions. Employers using Loam are responsible for reviewing AI outputs and making all employment decisions.

Candidate and customer data is used to generate outputs for the relevant customer workspace.
We do not use customer candidate data to train generalized models for other customers unless we clearly disclose that change and obtain any consent required by law.
We use third-party AI providers and require them to process data only as instructed and to maintain appropriate confidentiality and data protection safeguards.
Loam does not use AI to make automated decisions that produce legal or similarly significant effects about candidates.

4. How we share personal information

We do not sell personal information or candidate data for money. We share personal information only as described below:

Service providers: vendors that help us provide hosting, infrastructure, authentication, analytics, payment processing, email delivery, customer support, AI infrastructure, security, and other business operations.
Customers and workspace users: information may be visible to the employer, hiring team, or other authorized users of the workspace where it was submitted or created.
Connected integrations: third-party services you choose to connect, such as email, calendar, AI client, or developer tool integrations.
Professional advisors: lawyers, auditors, accountants, insurers, and other advisors where reasonably necessary.
Authorities and legal process: law enforcement, courts, regulators, or other parties when required by law or when we believe disclosure is necessary to protect rights, safety, security, or the integrity of the Service.
Business transactions: parties involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, including during diligence.
With your direction or consent: when you ask us to disclose information or otherwise consent to the disclosure.

5. Cookies, analytics, and tracking technologies

We use essential cookies and similar technologies for authentication, session management, security, and core product functionality. We may also use analytics tools, including PostHog, to understand how users interact with the Service and improve the product.

We currently do not use personal information for targeted advertising. Some browsers can send "Do Not Track" signals. We do not currently respond to those signals. You may be able to limit cookies through your browser settings, but disabling essential cookies may prevent parts of the Service from working.

6. Your choices

Access or update account information: you may review and update certain account information by logging into your account.
Marketing communications: you may opt out of marketing emails by using the unsubscribe link in those emails or by contacting us. You may still receive non-marketing service messages.
Connected services: you may disconnect certain third-party integrations through your account settings or the relevant third-party service.
Required information: if you decline to provide information that is required for the Service, we may not be able to provide the Service.

7. Privacy rights

Depending on your location and the nature of your relationship with Loam, you may have the right to request access to, correction of, deletion of, or portability of your personal information. You may also have the right to object to or restrict certain processing, withdraw consent where processing is based on consent, appeal a denied request, or opt out of certain uses of personal information.

To exercise privacy rights, contact us at support@hireloam.com. We may need to verify your identity before processing your request. You may also authorize an agent to submit a request on your behalf where permitted by law, and we may ask for evidence of that authorization.

For candidates

If you applied for a job through Loam, please contact the employer that posted the job to exercise rights over your application data. That employer is generally the controller or business responsible for your application data. If you contact us directly, we may route your request to the relevant employer or assist as required by applicable law.

8. State privacy rights notice

Residents of certain U.S. states may have additional rights under state privacy laws. These rights may include the right to know or access the categories and specific pieces of personal information we collect, the categories of sources, the purposes for collection, the categories of third parties to whom information is disclosed, and the categories of information disclosed for business purposes.

We do not sell personal information for money, and we currently do not process personal information for targeted advertising. We do not use personal information to engage in profiling or automated decision making that produces legal or similarly significant effects. We do not knowingly collect, sell, or share personal information of consumers under 16 years of age.

We may process sensitive personal information if it is included in candidate data, application materials, or other content submitted to the Service, but we do not process sensitive personal information for the purpose of inferring characteristics about consumers.

9. Notice to European users

If you are located in the European Economic Area or the United Kingdom, references to personal information include personal data under applicable data protection laws. For personal information that Loam controls, Louis Laine LLC, doing business as Loam, is the controller. For candidate and applicant data processed on behalf of a customer, the customer is generally the controller and Loam is generally the processor.

Our legal bases for processing personal information may include performing a contract with you, complying with legal obligations, pursuing legitimate interests such as providing, securing, and improving the Service, and consent where required. European users may have rights to access, correct, delete, transfer, restrict, or object to processing of their personal data, and to withdraw consent where processing is based on consent.

You may submit requests using the contact information below. You also have the right to lodge a complaint with the data protection regulator in your place of residence.

10. Retention

We retain personal information for as long as necessary to provide the Service, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, and maintain appropriate business records. Candidate data is retained according to the relevant customer's settings, instructions, and applicable law. When we no longer need personal information, we delete, de-identify, or anonymize it in the ordinary course, subject to backup and legal retention requirements.

11. Security

We use technical, organizational, and administrative safeguards designed to protect personal information, including access controls, logging, and encryption in transit. No internet or information system can be guaranteed to be completely secure.

12. International data transfers

We are headquartered in the United States, and the Service is hosted in the United States. If you access the Service from outside the United States, your personal information may be transferred to and processed in the United States or other locations where our service providers operate. We use appropriate safeguards for international transfers as required by applicable law.

13. Other sites and services

The Service may link to or integrate with third-party websites, applications, and services. We do not control those third parties, and their own terms and privacy policies govern their practices.

14. Children

The Service is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children in a manner prohibited by law. If we learn that we have collected such information, we will delete it as required by law.

15. Changes to this Privacy Policy

We may modify this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date, posting the updated policy through the Service, or using other appropriate means. Your continued use of the Service after the updated policy becomes effective means the updated policy applies to your interactions with the Service and our business.

16. How to contact us

If you have questions about this Privacy Policy, our data practices, or privacy rights that may be available to you, contact us at support@hireloam.com.