Global Privacy Policy

Last Updated: October 2026

dstribute Software Solutions Inc., operating as dstribute.io (“dstribute,” “we,” “us,” or “our”), respects the privacy of individuals whose personal information we collect or process.

This Privacy Policy explains how dstribute collects, receives, uses, processes, stores, discloses, transfers, retains, and protects personal information in connection with our websites, software platform, job distribution services, compliance services, integrations, candidate and business data services, AI-assisted functionality, communications, and related products and services collectively referred to as the “Services.”

This Privacy Policy should be read together with our Terms of Service, Data Processing Addendum (“DPA”), Cookie Policy, and Subprocessor disclosures.

This Privacy Policy is intended to address applicable privacy and data protection requirements in the United States and, where applicable, Canada, the European Economic Area (“EEA”), United Kingdom, Switzerland, and other jurisdictions in which our Services are used or personal information is processed.

The specific rights available to an individual depend upon applicable law, the individual’s location, the nature of the information, and the capacity in which dstribute processes that information.

1. Our Role in Processing Personal Information

dstribute processes personal information in different capacities depending upon the Service and our relationship with the individual or organization.

1.1 Customer and Candidate Data

When dstribute processes personal information to provide job distribution, application routing, compliance, integration, or related Services on behalf of a customer, the customer generally acts as the Controller or Business and dstribute acts as the Processor or Service Provider.

In this capacity, dstribute processes personal information on the customer’s documented instructions and for purposes of providing the Services.

This may include:

• Distributing customer job postings
• Connecting customer jobs with job boards and aggregators
• Connecting with state workforce and employment systems
• Receiving candidate applications generated from distributed jobs
• Normalizing application information
• Delivering candidate information to the customer’s ATS or designated application endpoint
• Maintaining integrations
• Recording job posting activity
• Providing reporting and compliance documentation
• Providing technical support
• Maintaining temporary records necessary to provide, support, secure, troubleshoot, and audit the Services

The customer determines the purposes for which Candidate Data is collected and subsequently used.

dstribute does not independently use Customer Candidate Data for unrelated advertising or marketing purposes.

1.2 dstribute as Controller or Business

dstribute may independently determine the purposes and means of processing and therefore act as a Controller, Business, or equivalent entity for information associated with:

• Website visitors
• Prospective customers
• Customer account contacts
• Customer users and administrators
• Sales and marketing
• Customer support
• Billing
• Platform administration and security
• Business operations
• dstribute-data
• Candidate and business data discovery
• Professional contact information
• Business intelligence
• Hiring intelligence
• Legal and regulatory compliance

The distinction between these roles is important because the party responsible for responding to a privacy request may differ depending upon the information involved.

2. Categories of Personal Information We Process

Depending upon the applicable Service and relationship, we may process the following categories of information.

Contact and Business Information

This may include:

• Name
• Business email address
• Telephone number
• Company
• Employer
• Job title
• Business address
• Professional profile information
• Business relationships
• Communications with dstribute

Customer Account Information

This may include:

• Account holder information
• Usernames
• User and account identifiers
• User roles and permissions
• Authentication information
• Account settings
• Service configurations
• Usage information
• Support history

Candidate and Application Information

When processing applications on behalf of customers, information may include:

• Name
• Email address
• Telephone number
• Resume or CV
• Employment history
• Education
• Skills
• Qualifications
• Professional licenses or certifications
• Location
• Job preferences
• Application responses
• Employment and application-related information
• Source information
• Other information voluntarily provided by a candidate

dstribute does not intentionally require sensitive personal information as part of its standard job distribution and application-routing Services unless such processing is required by the customer and permitted by applicable law.

Integration Information

To establish and maintain integrations, dstribute may process:

• API credentials
• OAuth tokens
• Job board credentials
• State workforce or state job bank credentials
• API endpoints
• Webhook configurations
• ATS identifiers
• Authentication information
• Integration settings
• Other technical information required to maintain an authorized connection

Such information is used for operating and securing the applicable integration and providing the Services.

Device and Internet Activity Information

When an individual interacts with our website or platform, we may collect information such as:

• IP address
• Browser type
• Device type
• Operating system
• Referring URL
• Pages viewed
• Dates and times of interactions
• Website and platform interactions
• Cookie identifiers
• Approximate location derived from IP address
• Security information
• Diagnostic and performance information

Billing and Transaction Information

We may process:

• Billing contacts
• Subscription information
• Transaction records
• Payment status
• Invoices
• Accounting records

Payment card information may be processed by payment service providers rather than directly stored by dstribute.

Support and Communications Information

We may process:

• Contact information
• Support requests
• Support ticket content
• Communications
• Technical information
• Diagnostic information
• Other information voluntarily provided when communicating with us

3. Candidate Application Processing

dstribute’s job distribution Services allow customers to distribute jobs to job boards, aggregators, state employment systems, and other recruitment channels.

Candidates may subsequently submit applications through those channels.

Candidate application information may be transmitted to dstribute for the purpose of delivering the application to the customer.

dstribute may normalize, structure, or otherwise technically process application information so that it can be delivered to the customer’s ATS or designated application endpoint.

Candidate application information is not collected by dstribute to create an independent marketing database.

Candidate information may be temporarily processed or maintained where reasonably necessary to:

• Receive the application
• Normalize the application
• Transmit the application
• Confirm delivery
• Troubleshoot transmission problems
• Maintain security
• Prevent fraud or abuse
• Maintain appropriate audit records
• Meet applicable legal or regulatory obligations

Once information has been successfully transmitted to a customer-controlled system, the customer’s privacy policy and retention practices generally govern the customer’s subsequent use and retention of that information.

4. dstribute-data

dstribute provides data discovery, candidate sourcing, contact information, business intelligence, hiring intelligence, prospecting, enrichment, and related data services collectively referred to as “dstribute-data.”

dstribute-data is separate from Candidate Data processed by dstribute solely on behalf of customers through our job distribution and application-routing Services.

Information Available Through dstribute-data

Depending upon availability, dstribute-data may include:

• Candidate names
• Professional histories
• Job titles
• Employment information
• Skills and experience
• Professional profiles
• Email addresses
• Telephone numbers
• Other available professional contact information
• Company names
• Company information
• Hiring activity
• Job openings
• Business contact information
• Professional contact information
• Prospective client information
• Business-development intelligence
• Related employment, candidate, company, and market information

Sources of dstribute-data

Information may originate from:

• Public sources
• Commercially available sources
• Licensed data providers
• Third-party platforms
• Data enrichment providers
• Aggregated sources
• Other legally accessible sources

dstribute may aggregate, organize, normalize, enrich, match, or present information obtained from these sources.

Permitted Purposes

Candidate information provided through dstribute-data is intended for legitimate:

• Recruiting
• Talent acquisition
• Candidate sourcing
• Candidate engagement
• Employment opportunity communications
• Directly related professional purposes

Business and professional contact information may be used for legitimate business-to-business purposes, including:

• Identifying prospective customers
• Identifying organizations with hiring requirements
• Communicating staffing or recruitment services
• Developing commercial relationships
• Other lawful business-development activities

Access to contact information does not itself mean that an individual has consented to receive communications through every channel.

Customers are responsible for determining whether their communications are legally permitted and for maintaining appropriate unsubscribe, consent, opt-out, and suppression procedures.

Prohibited Uses

dstribute-data may not be used for:

• Unlawful discrimination
• Harassment
• Surveillance
• Fraud
• Deceptive communications
• Unlawful mass messaging
• Unlawful automated calling or texting
• Circumventing an opt-out or suppression request
• Unauthorized resale or redistribution
• Unlawful profiling
• Consumer credit eligibility
• Insurance eligibility
• Housing eligibility
• Government-benefit eligibility
• Other regulated consumer eligibility determinations
• Any other unlawful purpose

Unless expressly stated otherwise, dstribute-data is not provided as a consumer report, and dstribute does not represent that it may be used for purposes regulated by the Fair Credit Reporting Act or equivalent consumer-reporting legislation.

Data Accuracy

Professional and business information changes frequently.

dstribute does not guarantee that third-party-sourced information is complete, current, or error-free.

The presence of an individual within dstribute-data does not mean that the individual:

• Is actively seeking employment
• Has applied for a particular job
• Has consented to representation by a customer
• Has consented to receive every form of communication
• Is interested in a particular employment opportunity

Likewise, the presence of a company or business contact does not mean that the organization has requested staffing services or agreed to receive every form of marketing communication.

5. How We Use Personal Information

Depending upon our role and the applicable Service, we may process personal information to:

• Provide the Services
• Distribute jobs
• Maintain job board connections
• Provide OFCCP and other compliance-related functionality
• Connect with ATS platforms
• Receive and route applications
• Normalize data
• Maintain integrations
• Provide dstribute-data
• Provide candidate sourcing and data discovery
• Provide business intelligence
• Provide contact information and enrichment
• Authenticate users
• Administer accounts
• Provide customer support
• Process subscriptions and billing
• Communicate with customers and prospective customers
• Improve and develop the Services
• Monitor performance
• Maintain platform and network security
• Detect fraud, abuse, and unauthorized activity
• Maintain audit and operational records
• Conduct lawful business-to-business marketing
• Exercise or defend legal rights
• Comply with applicable legal and regulatory requirements

We seek to limit personal information to information reasonably necessary and proportionate for the applicable purposes.

6. AI-Assisted Processing

Certain Services may use artificial intelligence or machine-learning technology to assist with functionality such as:

• Job description enhancement
• Data analysis
• Data organization
• Matching
• Candidate or company identification
• Information summarization
• Enrichment
• Platform functionality

AI-assisted results may be probabilistic and may contain inaccuracies.

dstribute does not rely upon AI functionality within the Services to make final hiring or employment decisions on behalf of customers.

Customers remain responsible for reviewing AI-assisted output and for their own employment, recruiting, business, and other decisions.

Where third-party AI providers process information on our behalf, applicable providers are identified through our Subprocessor disclosures where required.

7. Legal Bases for International Processing

Where EU GDPR, UK GDPR, or another law requiring a legal basis applies, dstribute relies upon one or more applicable legal bases.

Contract

Processing may be necessary to perform a contract or take requested steps before entering into a contract.

Legitimate Interests

We may process information where necessary for legitimate interests including:

• Providing and improving our Services
• Maintaining business relationships
• Business-to-business communications
• Recruitment and professional networking
• Candidate sourcing
• Maintaining professional and business information
• Security
• Fraud prevention
• Customer support
• Protecting our legal rights

We consider the nature of the information and the interests and rights of affected individuals when relying upon legitimate interests.

Consent

We rely upon consent where required, including for certain cookies, tracking technologies, marketing communications, or other processing.

Consent may be withdrawn at any time where processing is based upon consent.

Withdrawal does not affect processing lawfully undertaken before consent was withdrawn.

Legal Obligations

We may process personal information where necessary to comply with legal, regulatory, tax, accounting, employment, security, or other obligations.

8. Cookies and Similar Technologies

Our websites use cookies and similar technologies.

These may include technologies categorized as:

• Strictly necessary or functional
• Preferences
• Statistics or analytics
• Marketing

Strictly necessary technologies may operate without consent where permitted by applicable law.

Where consent is required, non-essential technologies will not be activated until the applicable consent has been provided.

Visitors may accept, deny, or manage applicable categories through our consent management controls.

Consent choices may subsequently be changed or withdrawn.

Additional information is available in our Cookie Policy.

9. Analytics, Tag Management and Consent

We may use analytics and tag-management technologies to understand use of our websites, measure performance, administer technologies, and improve the Services.

Where applicable law requires consent, analytics, marketing, advertising, and other non-essential technologies are subject to our consent-management configuration.

Consent choices are communicated to applicable technologies so they can operate or remain restricted according to the visitor’s selection.

10. Universal Opt-Out Signals

Where required by applicable law, dstribute recognizes legally valid universal opt-out mechanisms, including Global Privacy Control (“GPC”), for applicable requests concerning sale, sharing, or targeted advertising.

Traditional browser “Do Not Track” signals are separate from legally recognized universal opt-out mechanisms and may not carry the same legal effect.

11. Service Providers and Subprocessors

dstribute uses service providers and subprocessors to support the delivery, operation, security, and maintenance of the Services.

Depending upon the Services used, these may include providers supporting:

• Cloud infrastructure
• Application hosting
• Database hosting
• Email delivery
• Application monitoring
• Logging and diagnostics
• Customer support
• AI-assisted functionality
• Candidate, business, and contact data services
• Platform infrastructure

Our current Subprocessor list is maintained separately and forms part of our privacy and data-processing framework.

The subprocessors used may vary according to the Services and integrations used by a particular customer.

Where subprocessors process Customer Personal Data on our behalf, we require appropriate contractual data-protection obligations consistent with applicable law and our DPA.

12. Job Boards, ATS Platforms and Distribution Partners

Our Services interact with third-party job boards, aggregators, applicant tracking systems, state employment systems, APIs, and other recruitment platforms.

Depending upon the integration, these organizations may act as:

• Independent controllers
• Joint or separate businesses
• Processors
• Service providers
• Recipients acting under customer instructions

dstribute may transmit job and application information to these organizations based upon customer configuration and instructions.

Third-party organizations maintain their own privacy and data-processing practices where they operate independently from dstribute.

13. How We Disclose Personal Information

Depending upon the applicable Service, we may disclose or transmit information to:

• Customers
• Employers
• Staffing and recruitment organizations
• Applicant tracking systems
• Job boards
• Job aggregators
• State workforce and employment systems
• Recruitment platforms
• Cloud and infrastructure providers
• Database providers
• Communications providers
• Analytics providers
• Consent-management providers
• Payment processors
• Security and monitoring providers
• Customer-support providers
• AI service providers
• Data and enrichment providers
• Professional advisers
• Auditors
• Regulators
• Courts
• Government authorities
• Law enforcement where legally required
• Other parties where authorized by the individual, customer, contract, or applicable law

We may also disclose information in connection with a merger, acquisition, financing, corporate restructuring, sale of assets, or similar transaction, subject to applicable law.

14. Sale, Sharing, Targeted Advertising and Commercial Data Services

Privacy laws define terms such as “sale,” “sell,” “share,” “sharing,” and “targeted advertising” differently.

dstribute does not sell Customer Personal Data that it processes solely in its capacity as a Processor or Service Provider on behalf of a customer, and does not use such Customer Personal Data for unrelated third-party advertising or marketing.

dstribute-data is a separate commercial data service.

Providing access to professional, candidate, contact, business, or related information through dstribute-data may constitute a “sale,” “sharing,” or other regulated disclosure under the broad definitions contained in certain privacy laws even though the transaction does not constitute a transfer of ownership of dstribute’s underlying database or intellectual property.

Where applicable law provides individuals with the right to opt out of such processing, dstribute will provide and honor applicable opt-out mechanisms.

15. Data Broker Requirements

Certain jurisdictions regulate organizations that collect personal information about individuals with whom they do not have a direct relationship and make that information available to third parties.

Because aspects of dstribute-data may involve information obtained indirectly from public, commercial, licensed, enrichment, aggregated, or other legally accessible sources, certain data-broker requirements may apply depending upon the jurisdiction and applicable legal definitions.

Where dstribute is required to register, provide notices, participate in a centralized deletion mechanism, maintain suppression records, or satisfy other data-broker obligations, dstribute will comply with applicable requirements.

Individuals may exercise applicable rights directly with dstribute and, where available and legally applicable, through government-operated privacy or deletion mechanisms.

16. Privacy Rights

Depending upon applicable law, individuals may have rights including:

• Confirmation of whether personal information is being processed
• Access
• Correction
• Deletion
• Data portability
• Restriction of processing
• Objection to processing
• Withdrawal of consent
• Opt-out of sale
• Opt-out of sharing
• Opt-out of targeted advertising
• Opt-out of certain profiling or automated decision-making
• Limitation of certain uses of sensitive personal information
• Information regarding categories and sources of personal information
• Information regarding recipients or categories of recipients
• Appeal of certain privacy-request decisions
• Non-discrimination for exercising applicable privacy rights

Rights differ by jurisdiction and may be subject to legal exceptions.

17. United States State Privacy Rights

Residents of states with applicable comprehensive privacy laws may have additional rights concerning their personal information.

These may include rights under applicable privacy laws in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states adopting applicable privacy legislation.

Depending upon the applicable jurisdiction, individuals may have rights to:

• Access
• Correct
• Delete
• Obtain a portable copy
• Opt out of sale
• Opt out of sharing
• Opt out of targeted advertising
• Opt out of certain profiling
• Limit certain processing of sensitive information
• Appeal a privacy decision

Where applicable, dstribute will honor legally recognized universal opt-out mechanisms.

18. California Privacy Notice

This section supplements the remainder of this Privacy Policy for California residents where the California Consumer Privacy Act, as amended (“CCPA”), applies.

Depending upon the applicable relationship, dstribute may process statutory categories including:

• Identifiers
• Customer records information
• Commercial information
• Internet or electronic network activity
• Professional or employment-related information
• Geolocation information
• Inferences
• Sensitive personal information where applicable

Sources may include:

• Individuals
• Customers
• Public sources
• Commercial sources
• Licensed data providers
• Third-party platforms
• Data enrichment providers
• Aggregated sources
• Service providers
• Business partners

Business and commercial purposes are described throughout this Privacy Policy.

California residents may have the right to:

• Know
• Access
• Correct
• Delete
• Opt out of sale or sharing
• Limit certain uses of sensitive personal information
• Obtain information concerning sources and recipients
• Receive non-discriminatory treatment for exercising their rights

Where dstribute engages in activity defined as selling or sharing personal information under California law, applicable California residents may exercise their right to opt out.

dstribute honors Global Privacy Control where required by California law.

We do not knowingly sell or share personal information of individuals under 16 in circumstances requiring affirmative authorization without obtaining the authorization required by law.

Where California data-broker requirements apply to dstribute, we will comply with applicable registration, disclosure, deletion, suppression, and centralized deletion requirements.

19. European Economic Area Rights

Where EU GDPR applies, individuals may have rights including:

• Access
• Rectification
• Erasure
• Restriction
• Data portability
• Objection
• Withdrawal of consent
• Rights concerning certain automated decision-making
• The right to lodge a complaint with an applicable supervisory authority

Where we rely upon legitimate interests, an individual may have the right to object based upon their particular circumstances.

Individuals have the right to object to processing for direct-marketing purposes where EU GDPR applies.

20. United Kingdom Rights

Where UK GDPR and the UK Data Protection Act 2018 apply, individuals may have rights including:

• The right to be informed
• Access
• Rectification
• Erasure
• Restriction
• Data portability
• Objection
• Rights relating to certain automated decision-making
• Withdrawal of consent where consent is relied upon

Individuals may also have the right to lodge a complaint with the UK Information Commissioner’s Office.

21. Canada

Where Canadian privacy law applies, dstribute processes personal information in accordance with applicable Canadian privacy requirements, including applicable federal and provincial requirements.

Individuals may have rights to request access to and correction of personal information and other rights provided by applicable Canadian law.

22. Information Obtained Indirectly

Some information, particularly information within dstribute-data, may be obtained from sources other than the individual to whom the information relates.

These sources are described in this Privacy Policy.

Where applicable law requires individual notice following indirect collection, dstribute will provide the required information within the applicable timeframe unless an applicable exemption applies.

23. Automated Processing and Profiling

The Services may use automated functionality for purposes including:

• Job distribution
• Data normalization
• Search
• Filtering
• Matching
• Enrichment
• Candidate or company identification
• Security
• Fraud prevention
• Workflow automation
• AI-assisted functionality

dstribute does not make final employment decisions on behalf of customers through its standard Services.

Customers remain responsible for their own recruitment, hiring, employment, and business decisions.

Where applicable law provides rights concerning automated processing or profiling producing legal or similarly significant effects, dstribute will provide applicable rights and disclosures where dstribute is responsible for that processing.

24. Sensitive and Regulated Information

dstribute does not intentionally require sensitive personal information unless reasonably necessary for an authorized Service or provided under customer instructions.

Customers should not provide sensitive information unless necessary, legally permitted, and appropriately protected.

dstribute-data is not intended for decisions concerning:

• Consumer credit
• Insurance
• Housing
• Government benefits
• Consumer eligibility determinations regulated by consumer-reporting law

unless expressly authorized in writing and permitted by applicable law.

25. Marketing and Communications

We may send operational, transactional, account, security, support, and service communications where necessary to provide the Services.

Where permitted by law, we may send business-to-business, product, marketing, or promotional communications.

Recipients may unsubscribe from promotional email using the unsubscribe mechanism contained within the communication or by contacting us.

We do not sell SMS opt-in information for unrelated third-party marketing.

Service providers may process information where necessary to deliver authorized communications.

26. Data Retention

We retain personal information only for as long as reasonably necessary for the applicable purpose, subject to contractual, legal, regulatory, security, accounting, compliance, and audit requirements.

Retention depends upon the information and Service involved.

Candidate Application Information

Candidate information processed through job distribution and application routing is maintained only for as long as reasonably necessary to provide, support, troubleshoot, secure, and audit the Services or satisfy applicable legal requirements.

Candidate information delivered to a customer’s ATS or other customer-controlled system becomes subject to that customer’s retention practices.

Customer and Account Information

Customer and account information may be retained for the duration of the customer relationship and thereafter where reasonably necessary for contractual, legal, accounting, security, dispute-resolution, and compliance purposes.

Integration Credentials

Integration credentials are retained only while reasonably necessary to maintain an authorized integration or satisfy applicable security, audit, contractual, or legal requirements.

Billing Records

Billing and transaction records may be retained as required for accounting, tax, contractual, and legal purposes.

Support Records

Support and diagnostic records may be retained where reasonably necessary for customer service, security, troubleshooting, service improvement, audit, and legal purposes.

dstribute-data

Information maintained within dstribute-data may be retained while reasonably necessary for the purposes described in this Privacy Policy, subject to applicable accuracy, correction, deletion, objection, suppression, and opt-out requirements.

Suppression Records

Following a valid opt-out, objection, or deletion request, dstribute may retain the minimum information reasonably necessary to record and continue honoring that request where permitted or required by law.

Upon termination of Customer Services or Customer request, Customer Data will be deleted or returned within a commercially reasonable timeframe unless continued retention is required by applicable law or contractual obligation.

27. Security

dstribute maintains commercially reasonable administrative, technical, and physical safeguards appropriate to the nature and scale of our Services.

Measures may include, where appropriate:

• Encryption in transit
• Authentication controls
• Access controls
• Infrastructure security
• Logging
• Monitoring
• Vulnerability management
• Secure development practices
• Incident-response procedures
• Vendor and subprocessor management
• Backup and resilience procedures
• Employee security controls

No system can be guaranteed to be completely secure.

28. Security Incidents

If dstribute confirms a personal-data security incident requiring notification under applicable law, we will take appropriate steps to investigate, contain, remediate, and provide required notifications.

Where affected information is Customer Data processed on behalf of a customer, dstribute will notify the customer without undue delay and provide reasonable assistance in accordance with our DPA and applicable law.

29. International Data Transfers

dstribute and its current listed subprocessors principally process applicable platform data in the United States.

Our Services may nevertheless involve international customers, users, candidates, job boards, ATS providers, distribution partners, or other recipients.

Where personal information from the EEA, United Kingdom, Switzerland, or another jurisdiction restricting international transfers is transferred to another country, dstribute will use an applicable lawful transfer mechanism where required.

Such mechanisms may include:

• Adequacy decisions or regulations
• European Commission Standard Contractual Clauses
• The UK International Data Transfer Agreement
• The UK Addendum to the European Commission Standard Contractual Clauses
• Applicable recognized data-transfer frameworks
• Another legally permitted transfer mechanism

Where appropriate, supplementary contractual, technical, or organizational safeguards may also be implemented.

30. Privacy Requests

Individuals may submit applicable privacy requests concerning information for which dstribute acts as Controller or Business.

Requests may include:

• Access
• Correction
• Deletion
• Suppression
• Objection
• Restriction
• Data portability
• Do Not Sell or Share
• Targeted-advertising opt-out
• Profiling opt-out where applicable
• Withdrawal of consent
• Appeal of a previous privacy decision where applicable

We may request information reasonably necessary to verify identity or authority before fulfilling a request.

Authorized agents may submit requests where permitted by applicable law, subject to appropriate verification.

We will respond within the period required by applicable law.

31. Requests Concerning Customer-Controlled Information

Where dstribute processes information solely on behalf of a customer, the customer remains responsible for validating and responding to applicable privacy requests.

Candidates seeking access to, correction of, or deletion of information submitted in connection with a particular job application should generally contact the applicable employer, staffing company, recruiter, or organization.

Where appropriate, dstribute will reasonably assist customers with applicable:

• Access requests
• Corrections
• Deletions
• Restrictions
• Objections
• Portability requests

in accordance with applicable law and our DPA.

32. Requests Concerning dstribute-data

Individuals may contact dstribute regarding professional or contact information maintained within dstribute-data.

Subject to applicable law, requests may include:

• Access
• Correction
• Deletion
• Objection
• Suppression
• Opt-out of sale or sharing where applicable

Where a valid suppression or opt-out request applies, dstribute may retain a limited suppression record to prevent the information from being unintentionally reintroduced into active use through subsequent data updates or enrichment.

33. Children

The Services are intended for businesses, professional users, recruitment activities, and individuals participating in employment-related activities.

They are not directed toward children.

dstribute does not knowingly sell or share children’s personal information in violation of applicable law.

If you believe personal information concerning a child has been inappropriately processed, please contact us.

34. Complaints

Individuals with concerns regarding our privacy practices are encouraged to contact dstribute so that we can investigate and respond.

Where applicable, individuals retain the right to complain to an appropriate privacy or data-protection authority.

Individuals in the EEA may contact their applicable supervisory authority.

Individuals in the United Kingdom may contact the Information Commissioner’s Office.

US residents may have rights to contact an applicable state privacy regulator or attorney general.

35. Changes to This Privacy Policy

We may update this Privacy Policy as our Services, technology, data practices, regulatory requirements, and business activities evolve.

When changes are made, we will update the Last Updated date.

Where required by applicable law, additional notice will be provided for material changes.

36. Contact Information

Questions, privacy requests, or concerns regarding this Privacy Policy or dstribute’s privacy practices may be directed to:

dstribute Software Solutions Inc.
Privacy and Compliance Team
dstribute.io

Website: www.dstribute.io

Email: info@dstribute.io

Please include “Privacy Request” in the subject line for privacy-related requests.

37. Related Documents

This Privacy Policy should be read together with:

• dstribute Terms of Service
• dstribute Data Processing Addendum
• dstribute Subprocessor List
• dstribute Cookie Policy
• Any applicable Order Form or separately executed customer agreement

Where dstribute processes Customer Personal Data as a Processor or Service Provider, the applicable DPA and customer agreement govern that processing.

© 2026 dstribute Software Solutions Inc. All rights reserved.