Privacy Policy

Who we are

B-Seen is operated by B-SEEN, LLC, a Massachusetts limited liability company formed March 17, 2026 (the “Company”, “we”, or “us”). For privacy questions, contact privacy@b-seen.io. For GDPR/UK GDPR purposes, B-SEEN, LLC is the controller of personal data described in this policy.

1. Information we collect

Account information

When you create an account, we collect your name, email address, and role (employer or professional). If you sign up via Google OAuth, we receive your name, email, and profile photo from Google.

Profile information

Professionals may provide a headline, location, experience level, specialties, job-seeking status, license information (NPI for verification), and resume. Employers may provide practice name, website, location, description, equipment, and benefits. Sales-role users may add company and territory information.

Compensation submissions

If you submit a Reported salary, we collect role, state, setting, years of experience, and pay structure as described in the salary methodology. Submissions are not tied to a public profile.

Communications

Messages between users, news comments, collaborate posts, lookbook captions, equipment listings, and content reports.

Usage data

Pages visited, jobs viewed, applications submitted, messages sent, and similar interaction events. Server logs include IP, user-agent, and timestamps as needed for security and rate-limiting.

Cookies and similar technology

See our Cookie Policy for the full list. We use essential authentication cookies always, and Google Analytics 4 only when you grant consent through the cookie banner.

Sensitive information

Resumes may contain sensitive personal information (e.g. disability-related accommodations, demographic details). We treat resume content as sensitive: it is stored in a private storage bucket and is visible only to you and to employers you choose to apply to or who you authorize to view your profile.

2. How we use your information

• Create and maintain your account and profile.
• Display your profile to relevant employers or candidates based on your visibility settings.
• Facilitate applications and direct messages.
• Generate aggregated, anonymized salary insights at or above the published sample-size threshold.
• Send transactional emails (verification, application status, password reset) and, when you opt in, marketing or job-alert digests.
• Detect abuse, prevent fraud, enforce our Terms, and respond to legal requests.
• Improve the platform and fix bugs.

We do not use your data to train third-party machine-learning models. AI-generated summaries on news articles use third-party models on the article text only, not on your personal data.

3. Legal bases (EU/UK visitors)

If you are in the EEA, UK, or Switzerland, we rely on the following GDPR legal bases:

• Contract (Art. 6(1)(b)): account, profile, applications, messaging, and the core marketplace features.
• Legitimate interests (Art. 6(1)(f)): abuse detection, security, fraud prevention, product improvement, and limited direct communications.
• Consent (Art. 6(1)(a)): analytics cookies, marketing emails.
• Legal obligation (Art. 6(1)(c)): compliance with subpoenas, court orders, and applicable law.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

4. Sharing your information

We do not sell your personal information. We share it only as described below.

• With employers or candidates: profile information is visible to other users based on your visibility settings. Anonymous Mode hides your name and current employer from the candidate database.
• With service providers (sub-processors): see the sub-processor table below.
• For legal reasons: when required by law, court order, or to protect rights, safety, or property.
• In a business transfer: if B-Seen is acquired or merged, personal data may transfer to the acquirer subject to this policy.

5. Sub-processors

The following providers process personal data on our behalf. Each is bound by data-processing terms.

We update this list as sub-processors change. Material additions will be communicated by email or in-app notice with at least fourteen (14) days' notice.

6. International transfers

B-Seen is operated from the United States. If you access the service from outside the US, your data will be transferred to and processed in the US. For EEA/UK transfers, we rely on Standard Contractual Clauses with our US-based sub-processors and on the UK International Data Transfer Addendum where applicable.

7. Data retention

8. Your rights

Depending on where you live, you may have some or all of the following rights. We extend these rights to all users regardless of jurisdiction where practical.

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate or incomplete data.
• Deletion: ask us to delete your account and personal data, subject to legal-retention exceptions.
• Portability: request your data in a structured, machine-readable format.
• Restriction / objection: ask us to stop processing on certain bases (e.g. legitimate interests).
• Opt out of “sale” or “sharing”: B-Seen does not sell personal information. To the extent analytics could be considered “sharing” for cross-context behavioral advertising under CCPA/CPRA, you can opt out via the cookie banner.
• Limit use of sensitive personal information (CA): exercise via the request form below.
• Withdraw consent: where we process based on consent (analytics, marketing).
• Non-discrimination: we will not deny service, charge different prices, or provide different quality of service because you exercised a privacy right.
• Appeal: if we decline a request, you may appeal as described below. EU/UK residents may also lodge a complaint with a supervisory authority.

To exercise any right, use our request form at /privacy/requests or email privacy@b-seen.io. We will acknowledge your request within ten (10) business days and respond substantively within forty-five (45) days (with a possible 45-day extension where allowed by law).

9. US state privacy law notice

This section provides additional disclosures required by state privacy laws including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Florida (FDBR), Texas (TDPSA), Oregon (OCPA), Minnesota (MCDPA), New Jersey (NJDPA), Delaware (DPDPA), Maryland (MDODPA), and Indiana (CDPA).

Categories of personal information collected (CCPA)

• Identifiers (name, email, IP address, user ID).
• Customer records (resume contents, profile information).
• Professional or employment information (job history, license/NPI, employer affiliation).
• Internet activity (pages viewed, search terms).
• Geolocation (city/state-level, never precise location).
• Inferences drawn from the above (e.g. role category, career stage).

We do not knowingly collect biometric information, precise geolocation, government IDs other than the optional voluntary NPI, or information about children under 16.

Sale and sharing

We do not sell personal information for money. We do not knowingly “share” personal information for cross-context behavioral advertising other than as analytics consented to via the cookie banner. We do not process personal information for profiling that produces legal or similarly significant effects.

Sensitive personal information

Resume content may contain sensitive PI (e.g. disability disclosures). We use it only to provide the service you requested (e.g. submitting an application). We do not use sensitive PI to infer characteristics for advertising or profiling.

10. Privacy controls in the product

• Anonymous Mode: hide your name and current employer from the candidate database.
• Employer blocking: prevent specific employers from viewing your profile.
• Account deletion: available from your account settings or via /privacy/requests.
• Email preferences: unsubscribe links in every non-transactional email; transactional emails (account, applications, password reset) cannot be unsubscribed while you have an active account.

11. Security

We use industry-standard security measures including TLS in transit, row-level security on our database, encrypted file storage, and short-lived authenticated sessions. Resumes are stored in private buckets accessible only to the uploader and authorized employers. No system is perfectly secure, and we cannot guarantee absolute security.

In the event of a personal-data breach, we will notify affected users and applicable regulators as required by law.

12. Children

B-Seen is not intended for users under 18. We do not knowingly collect information from anyone under 16. If you believe a minor has provided us with personal information, contact privacy@b-seen.io and we will delete it.

13. Changes

We may update this policy. Material changes will be communicated by email or in-app notice with at least fourteen (14) days' notice before taking effect. The “Last updated” date at the top reflects the current version.

14. Contact

For privacy questions or to exercise your rights: privacy@b-seen.io or use the form at /privacy/requests.

EEA / UK residents may also lodge a complaint with their local data protection authority.