This policy applies to everyone who uses FoundOne, including the client portal and the Browser Extension. It is part of the Agreement. If you breach it, we may restrict data, suspend or terminate, as Section 7 describes. You are responsible for your Authorized Users and Clients complying with it.
1. People’s data
You may not:
- add a person without their consent, or keep them after their consent is withdrawn or has ended (Section 7.4 of the Terms of Service);
- confirm consent you do not have;
- present a person to a Client their consent does not cover;
- deliberately record health, ethnic origin, religion or beliefs, political opinions, trade union membership, sex life or sexual orientation, genetic or biometric data, or criminal records;
- add children under 16;
- sell, rent or share your candidate database, or use it for anything other than recruitment;
- use FoundOne to treat people unfairly because of sex, age, disability, ethnic origin, nationality, religion, sexual orientation or any other protected characteristic.
2. Collecting data from other websites
You may not:
- use the Browser Extension, imports or any other means to collect profiles in bulk or automatically, from LinkedIn or any other website;
- save profiles from a website whose terms forbid it, or bypass its limits or access controls;
- use another person’s account, including a LinkedIn or LinkedIn Recruiter seat, to collect profiles.
3. Messages and spam
You may not send unsolicited bulk messages, or anything misleading, through invitations, portal emails, client updates or any other feature that sends email.
4. Security and platform abuse
You may not:
- probe, scan or test the Service for vulnerabilities, except under Section 8;
- access other customers’ data, or circumvent sign-in, roles, portal sharing, limits or payments;
- overload the Service, including denial-of-service attacks and load tests we have not approved in writing;
- create multiple accounts or Workspaces to extend trials, or resell access;
- get around Usage Limits, for example by splitting one agency into several Workspaces, sharing accounts or using scripts;
- use automated means to access the Service other than features we provide.
5. AI Features
You may not use AI Features to:
- produce anything this policy prohibits;
- infer a person’s emotions, personality, health or other characteristics listed in Section 1;
- decide about a person without human review;
- search, filter, check or rank people by age, sex, origin, nationality, religion or belief, disability, health, sexual orientation, pregnancy, family situation or union membership, or by stand-ins for them (for example the year someone finished school, as a stand-in for age);
- get around Find’s screening of such criteria or its removal of personal details;
- reject a person because of an AI answer you have not checked, or because something is “Not in profile”;
- extract system instructions, keys or other customers’ data.
You must also comply with the usage policy of our AI provider, currently the Anthropic Usage Policy.
6. Reporting
6.1 If an agency keeps your details. If you believe an agency keeps your details in FoundOne without your consent, contact the agency first. If you do not know which agency it is, or it does not respond within one month, write to hello@foundone.io. We forward your message to the agency and act under Section 7.11 of the Terms of Service.
6.2 Illegal content. Anyone can report content in the Service that they consider illegal, under Article 16 of the Digital Services Act. Write to hello@foundone.io and include:
- where the content is, as precisely as you can;
- why you consider it illegal;
- your name and email, unless the report concerns child sexual abuse material;
- a statement that you believe in good faith that the report is accurate and complete.
6.3 We confirm receipt, decide promptly, diligently and objectively, with human review, and tell you our decision and how to seek redress. We may forward your report to the customer responsible.
6.4 Authorities send orders to the same address. If we learn of information suggesting a criminal offence that threatens someone’s life or safety, we inform the competent authorities.
6.5 We may stop handling reports from someone who frequently submits manifestly unfounded reports, after warning them.
7. Enforcement
7.1 If we reasonably believe this policy is breached, we may: warn you; ask you to show consent; restrict or delete particular data; disable the client portal or the Browser Extension for your Workspace; suspend AI Features; suspend or terminate your Workspace or account; preserve evidence; and report to the authorities. We choose a measure proportionate to the breach. In serious cases we act immediately and without prior notice.
7.2 When we restrict data or a Workspace, we send you a statement of reasons: what we restricted, the facts we relied on, whether we used automated means, the legal or contractual ground, and how to contest the decision. We may withhold it where an authority’s order or the law requires.
7.3 You may contest a decision by replying to the statement of reasons within six months. A person who did not take the original decision reviews it, and we reverse it if it was wrong. You may also go to court.
7.4 Fees are not refunded for suspension or termination caused by a breach of this policy. We may update this policy under Section 18 of the Terms of Service.
8. Security research
Report vulnerabilities to hello@foundone.io. We will not pursue good-faith research that: tests only your own accounts and data; stops at the minimum needed to show the issue; does not degrade the Service; reports the issue promptly; and keeps it confidential until we have fixed it. Other testing is prohibited.