NDA & Confidentiality

By accessing or using Wigiwork, users agree to contractual confidentiality and NDA-Safe™ obligations covering information accessed through the platform.

Users must treat non-public information accessed through Wigiwork, and information made available through restricted platform areas, as confidential unless disclosure is expressly permitted by Wigiwork, the applicable data owner, the applicable candidate authorization or Profile Access workflow, or applicable law. The following information is confidential to the extent it is non-public or made available through a restricted platform area:

• Candidate profiles, whether anonymous-facing or made available through authorized Profile Access.
• Employer and company information.
• Job postings and non-public hiring details.
• Internal notes, tags, and communications.
• Files, images, and documents.
• Messages exchanged through the platform.
• Wigi Highlights, messaging-assistance outputs, AI-generated summaries, recommendations, search results, and other system-generated outputs.
• Other information that is marked confidential or should reasonably be understood as confidential.

Users must not disclose, forward, copy, export, publish, or reuse confidential information outside Wigiwork unless expressly permitted by the applicable data owner, candidate authorization, Wigiwork, an approved platform workflow, or applicable law.

Confidentiality obligations extend to data, content, system-generated outputs, and AI-derived information accessed through Wigiwork.

AI-generated summaries, Wigi Highlights, recommendations, search results, and system-generated profile or hiring information may be incomplete, inaccurate, outdated, or misleading. Users must not treat, repeat, publish, forward, or rely on those outputs as verified factual statements about identity, employment, affiliation, qualifications, availability, hiring status, compensation, company relationships, or suitability unless Wigiwork expressly marks the relevant information as verified.

Users must not:

• Capture, record, save, copy, or distribute a profile or confidential content except as expressly authorized.
• Upload candidate information into an ATS, CRM, spreadsheet, database, AI system, messaging tool, or other external system except through a Wigiwork-approved integration and within the applicable candidate authorization, Profile Access, confidentiality, purpose, expiry, revocation, and deletion conditions.
• Share candidate information with unauthorized individuals, teams, clients, organizations, affiliates, or third parties.
• Attempt to identify, re-identify, or deanonymize candidates outside candidate-authorized Profile Access or another specific sharing control.
• Combine candidate information with external sources to identify, profile, track, or contact a candidate without authorization.
• Scrape, harvest, extract, compile, or systematically collect candidate, employer, or platform information.
• Repurpose information for marketing, sales, solicitation, advertising, resale, unrelated profiling, or another unauthorized purpose.
• Build external candidate libraries, directories, datasets, talent pools, models, or databases using Wigiwork information.
• Contact candidates outside Wigiwork without candidate authorization.
• Violate applicable access-level, purpose, recipient, expiry, revocation, deletion, or duration conditions.
• Bypass Wigiwork's confidentiality, visibility, identity-protection, access, or sharing controls.

Candidate and employer information remains subject to the applicable confidentiality protections regardless of whether the parties have entered into a separate NDA.

Users are responsible for how they access, use, store, disclose, and otherwise handle information obtained through Wigiwork.

Unauthorized retention, reuse, disclosure, or distribution may result in restricted access, suspension, termination, or legal action, subject to applicable law.

Wigi-DNA™ may be applied to eligible documents and images as a safeguard intended to deter misuse and support investigation of suspected unauthorized use. Wigi-DNA™ does not apply to WigiPics or avatars.

Users must not:

• Remove, alter, obscure, hide, or misrepresent Wigi-DNA™ safeguards.
• Bypass, disable, evade, reverse-engineer, or interfere with Wigi-DNA™ safeguards.
• Use an eligible document or image beyond the applicable authorization, purpose, recipient, access level, or duration.
• Use an external tool or service to remove, bypass, interfere with, or misrepresent a Wigi-DNA™ safeguard.

Wigi-DNA™ does not authorize access to, use of, or disclosure of a document or image that would otherwise be prohibited. All applicable confidentiality, purpose, access, expiry, revocation, deletion, and data-use restrictions continue to apply.

Wigiwork does not guarantee that Wigi-DNA™ will prevent every instance of copying, capture, redistribution, or misuse.

Employer accounts are organization accounts rather than the personal property of the individual who initially created or administered them.

This means:

• An employee, recruiter, contractor, or other authorized user does not personally own the employer account or candidate access made available to the employer organization.
• Wigiwork may update employer-account ownership or administrative control after appropriate authorization and verification.
• Recruiters and other authorized users must not retain or assert control over an employer account after their authority ends.
• Employers must maintain appropriate control over their authorized users and promptly remove or update access when it is no longer required.

Employers are responsible for actions taken under their accounts by employees, recruiters, contractors, agency representatives, administrators, and other authorized users, except where responsibility cannot be assigned to them under applicable law.

Employer organizations must ensure that their authorized users comply with applicable confidentiality, purpose, identity-protection, access, expiry, revocation, deletion, and data-use restrictions.

Recruiters, staffing firms, and agencies must:

• Accurately disclose the employer clients they represent.
• Identify the specific hiring client for each job, search, Access Request, or other hiring action.
• Act only for employer clients they are authorized to represent.
• Use candidate information only for the disclosed employer client, role, opportunity, inquiry, or other hiring purpose authorized through the applicable Profile Access workflow.
• Not pool or reuse candidates across multiple clients, roles, companies, or unrelated hiring processes.
• Not store or export candidate information to agency or external systems except through a Wigiwork-approved integration and within the applicable authorization.
• Maintain confidentiality across clients, roles, personnel, and recipients.
• Ensure that approved end clients and recipients comply with applicable confidentiality, purpose, expiry, revocation, deletion, and identity-protection requirements.
• Stop using and delete candidate information when access expires or is revoked, the authorized purpose ends, or the relevant role closes, except where retention is strictly required by applicable law.

Recruiter and agency access is limited to the disclosed employer client and authorized hiring purpose. A different client, role, company, or hiring purpose requires separate candidate authorization through an applicable Wigiwork-approved Profile Access workflow unless the existing authorization expressly covers that purpose.

Before candidate information is disclosed to an approved end client, that recipient must be subject to obligations prohibiting unauthorized disclosure, re-identification, deanonymization, external cross-referencing, scraping, unauthorized off-platform contact, external database creation, and use beyond the approved purpose.

Failure to comply may result in restricted access, suspension, termination, organization-wide restrictions, or legal action.

Candidates appear anonymous by default.

Wigiwork-controlled direct identity and contact information is disclosed only through candidate-authorized Profile Access, another specific sharing control, or where disclosure is required by law, subject to platform limitations and residual re-identification risks.

Users must not:

• Attempt to guess, infer, discover, expose, or confirm a candidate's identity without authorization.
• Combine profile information with external data sources to identify or contact a candidate.
• Analyze writing style, skills, employment history, location, activity, or other details to determine identity.
• Scrape, search, compare, or cross-reference Wigiwork information against external profiles, databases, images, or records for re-identification.
• Discuss, distribute, or publish information in a way that could reveal a candidate's identity.
• Ask another person or service to perform prohibited identification or cross-referencing.
• Contact a candidate outside Wigiwork without candidate authorization.

Recipients of External Private Share Links must respect the included information, purpose, recipient scope, and duration selected by the candidate. Possession of a link does not authorize forwarding, redistribution, reuse, deanonymization, external cross-referencing, off-platform contact, or use beyond the candidate's authorization.

Blocking a company or recruiter does not automatically revoke or delete an External Private Share Link. The candidate must separately revoke or delete the link. Revocation ends future special link access, subject to reasonable processing delays, caching, technical limitations, and information already copied or retained outside Wigiwork.

Wigiwork does not guarantee that identification is impossible in all circumstances. Anonymity may be affected by information users choose to include, authorized disclosures, actions outside Wigiwork's control, and other residual re-identification risks.

6A. WigiPic™

WigiPic processing, retention, deletion, permitted use, and recognition or re-identification risks are described in the WigiPic™ Terms & Use, Privacy Policy, and Data Retention & Storage.

Employers, recruiters, agencies, and other recipients must not use a WigiPic to identify or re-identify a person, infer personal or protected characteristics, assess professional ability or hiring suitability, compare it with external images, or copy, scrape, export, repurpose, or analyze it for identity, personal traits, or hiring decisions.

Misuse of a WigiPic may be treated as a confidentiality violation and may result in enforcement under the applicable Terms and policies.

Account verification requirements and service communications are described in Eligibility & Verification and the Privacy Policy.

Users must keep their account and verification information accurate and current and must not provide false, misleading, unauthorized, or fraudulent contact information.

Users must protect their account credentials and promptly report suspected unauthorized access or account compromise.

Wigiwork may restrict, suspend, or terminate access where account information cannot be verified or where reasonably necessary for security, safety, fraud prevention, compliance, or platform integrity.

Users must not use VPNs, proxies, location-masking services, or similar tools to bypass sanctions, geographic restrictions, verification requirements, account restrictions, company-blocking controls, safety measures, or other platform rules.

Use of a VPN, proxy, or location-masking service may result in additional verification or restricted access where reasonably necessary for safety, fraud prevention, sanctions compliance, legal compliance, or platform integrity.

Wigiwork may determine or adjust a user's apparent location where reasonably necessary for those purposes.

Wigiwork does not disclose location-verification, safety, fraud-prevention, or compliance methods where disclosure could increase risk or enable circumvention, except where required by applicable law.

Employers, recruiters, agencies, and other recipients may use candidate information only for:

• Evaluating a candidate for the role, opportunity, employer inquiry, or other legitimate hiring purpose authorized by the candidate.
• Legitimate steps within that authorized hiring workflow.
• Authorized internal hiring collaboration within the same employer organization, subject to the applicable confidentiality, purpose, recipient, access, expiry, revocation, and deletion requirements.

They must not:

• Resell, sublicense, license, or otherwise commercially exploit candidate information.
• Use candidate information for non-hiring or unrelated purposes.
• Build external candidate databases, directories, datasets, talent pools, models, or profiling systems.
• Scrape, harvest, compile, or systematically extract candidate or platform information.
• Contact candidates outside Wigiwork without candidate authorization.
• Forward, publish, redistribute, or reuse an External Private Share Link or information obtained through it beyond the included information, purpose, recipient scope, or duration authorized by the candidate.
• Transfer candidate information to an unauthorized client, affiliate, recipient, platform, AI system, or external service.
• Retain candidate information beyond the authorized purpose or applicable duration except where retention is strictly required by applicable law.

When Profile Access expires, is revoked, or is no longer needed for the authorized purpose, recipients must stop using the information and delete manually stored information, notes, screenshots, references, and copies unless retention is strictly required by applicable law.

Information retained because of a legal requirement must remain confidential, be appropriately protected, and be used only for the applicable legal, regulatory, audit, dispute, or recordkeeping purpose. It must not be reused for further outreach, another role, another client, marketing, profiling, or unrelated evaluation.

Employers, recruiters, agencies, and recipients that store, share, or otherwise process candidate information outside Wigiwork are responsible for that processing and may have independent obligations under applicable data-protection law. This does not limit Wigiwork's own obligations under applicable law.

A violation of this Policy or an NDA-Safe™ obligation may result in proportionate action, including:

• Restriction, suspension, or termination of candidate, employer, recruiter, agency, or organization accounts.
• Removal or restriction of access, features, tools, integrations, content, or verification status.
• Organization-wide restrictions where reasonably necessary.
• Loss or invalidation of credits or platform privileges where permitted by applicable law and the Billing, Credits & Refunds Policy and Payment Terms & Invoice Policy.
• Civil legal action or other available legal remedies.
• Reporting to affected parties, regulators, or competent authorities where appropriate or required by applicable law.

Wigiwork may preserve relevant records and take proportionate action where reasonably necessary to investigate suspected misuse, confidentiality breaches, fraud, security incidents, or legal violations.

Wigiwork may take action without prior notice where reasonably necessary to protect users, candidate anonymity, confidentiality, platform integrity, security, or legal compliance, subject to applicable law.

An ordinary billing restriction does not by itself automatically revoke Profile Access already approved by a candidate. Separate confidentiality, fraud, misuse, safety, chargeback, legal, suspension, or termination action may restrict access under the applicable terms and policies.

Wigiwork may enforce confidentiality and NDA-Safe™ obligations to the extent permitted by applicable law and may pursue available remedies where appropriate.

Confidentiality, NDA-Safe™, Wigi-DNA™, authorized-purpose, recipient, data-use, identity-protection, expiry, revocation, deletion, and content-handling obligations continue where applicable after:

• Profile Access expires or is revoked.
• A role, opportunity, inquiry, or authorized purpose ends.
• An employee, recruiter, contractor, administrator, or other authorized user leaves an organization or loses authority.
• An account is restricted, suspended, closed, or terminated.
• The applicable Terms or agreement ends.

These obligations continue for as long as the information remains confidential or applicable law, the Terms, or another binding obligation requires.

Account closure, deletion, identity reset, or termination does not authorize continued use of information obtained before that event.

For NDA, confidentiality, or platform information-handling inquiries, visit the Legal & Trust Center or contact:

Legal: legal@wigiwork.com
Privacy: privacy@wigiwork.com

Contact details for Wigiwork's appointed regulatory representatives are available on the Regulatory Representatives page.

Users that store, share, or otherwise process information outside Wigiwork remain responsible for that processing. Wigiwork may not control actions taken outside the platform, without limiting Wigiwork's own obligations under applicable law.