Confidentiality & Wigi-DNA™

Non-public candidate, employer, message, profile, document, file, workflow, account, and platform information accessed through Wigiwork must be treated as confidential unless disclosure is authorized by the relevant user, Wigiwork, an approved platform workflow, or applicable law.

All users and recipients must:

• access and use confidential information only for the authorized professional, hiring, account, or platform purpose;
• limit access to authorized recipients who reasonably need the information for that purpose;
• protect the information against unauthorized access, copying, capture, disclosure, export, transfer, publication, retention, or misuse;
• use external systems or integrations only where expressly permitted and within the applicable authorization, purpose, access, expiry, revocation, and deletion conditions; and
• not identify, deanonymize, profile, or externally cross-reference a candidate beyond the access and purpose authorized by that candidate.

Confidentiality applies regardless of whether the parties have entered into a separate non-disclosure agreement.

Unless Wigiwork expressly marks information as verified, Wigi Highlights, automated profile explanations, recommendations, and other generated outputs must not be presented or relied on as verified facts.

Wigiwork's NDA-Safe™ environment applies the confidentiality obligations in Section 1.

Employers, recruiters, agencies and other recipients must ensure that their personnel, contractors, representatives, clients and approved recipients comply with the same confidentiality and purpose restrictions.

NDA-Safe™ does not expand a recipient's Profile Access, ownership, disclosure rights or permitted use of information.

Candidate information may be accessed and used only by the authorized recipient and only for the role, opportunity, employer inquiry, or other legitimate professional purpose approved by the candidate through the applicable Profile Access or sharing workflow described in Visibility & Identity Controls.

Locked or blurred sections do not authorize access to the underlying restricted content. Recipients must not attempt to reveal, reconstruct, scrape, infer, or bypass that content outside a candidate-authorized Profile Access workflow.

Recipients must not:

• reuse candidate information for another role, client, company, recipient, or purpose without separate candidate authorization;
• disclose or transfer candidate information to unauthorized teams, clients, affiliates, services, systems, or third parties;
• build candidate libraries, databases, directories, talent pools, datasets, models, or profiling systems from Wigiwork information;
• contact candidates outside Wigiwork without candidate authorization;
• use candidate information for advertising, marketing, solicitation, resale, competitive intelligence, unrelated profiling, AI or model training, or other unauthorized commercial purposes; or
• bypass or interfere with confidentiality, visibility, identity, recipient, purpose, Profile Access, expiry, revocation, deletion, or data-use controls.

Candidate information must not be retained, reused, or repurposed after the authorized purpose ends, except where limited retention is required by applicable law. Any legally retained information remains subject to applicable confidentiality, security, purpose-limitation, and restricted-use obligations.

Wigiwork may apply Wigi-DNA™ safeguards to eligible documents and images to deter unauthorized copying, disclosure, redistribution, or misuse and to support investigation of suspected violations.

Wigi-DNA™ does not apply to WigiPics, avatars, Wigi Highlights, profile outputs, or other platform content unless Wigiwork expressly states otherwise.

The absence of Wigi-DNA™ does not by itself make content unrestricted or waive any applicable confidentiality, Profile Access, recipient, purpose, expiry, revocation, deletion, or data-use requirements.

Users must not:

• remove, obscure, hide, alter, falsify, or misrepresent Wigi-DNA™ safeguards;
• bypass, disable, evade, reverse-engineer, or otherwise interfere with those safeguards;
• use tools, services, automation, or other methods intended to remove, defeat, or conceal them; or
• use protected documents or images beyond the authorized recipient, purpose, access level, and duration.

The presence of Wigi-DNA™ does not grant any additional right to access, copy, capture, download, disclose, distribute, retain, or use the protected document or image. All applicable confidentiality, Profile Access, purpose, recipient, expiry, revocation, deletion, and data-use restrictions continue to apply.

Wigi-DNA™ is a protective and investigative safeguard. It does not guarantee that every instance of copying, capture, redistribution, tampering, or misuse will be prevented or detected.

Wigiwork may investigate suspected interference with Wigi-DNA™ or unauthorized use of protected material and may take appropriate action under its policies and applicable law.

Profile Access remains subject to the recipient, purpose, visible information, access level, duration, expiry, revocation, account status, and other conditions applicable to the relevant candidate-authorized workflow.

When Profile Access expires, is revoked, or is no longer needed for the authorized purpose, recipients must:

• stop using the candidate information;
• stop contact based on that access where continued contact is no longer authorized;
• stop future disclosure or transfer to external systems, integrations, or recipients; and
• delete manually retained information, notes, screenshots, references, and copies unless limited retention is required by applicable law.

Legally retained information must remain confidential and secure, be used only for the applicable legal, regulatory, audit, dispute, or recordkeeping purpose, and must not be reused for further hiring, outreach, marketing, profiling, another role, another client, or another unauthorized purpose.

Expiry or revocation ends future authorized access but cannot reverse disclosures already made or automatically delete information previously copied or lawfully retained outside Wigiwork. Recipients remain responsible for their confidentiality, deletion, purpose-limitation, and lawful-retention duties.

Recruiters and agencies may use candidate information only for the authorized employer client, recipient, role, opportunity, purpose, access level, and duration approved by the candidate.

They must not pool, transfer, disclose, or reuse candidate information for another client, organization, role, recruiter, affiliate, or purpose without separate candidate authorization.

Before candidate information is disclosed to an authorized employer client, the recruiter or agency must ensure that the client and its authorized users are subject to appropriate confidentiality, anonymity, contact, access, retention, revocation, deletion, and data-use restrictions.

Recruiters and agencies remain responsible for ensuring that their personnel and authorized client recipients comply with these requirements.

When access expires, is revoked, or is no longer needed for the authorized purpose, use must stop and retained copies must be deleted unless limited retention is required by applicable law.

Unauthorized disclosure, reuse, or client access may result in restricted access, suspension, termination, or legal action.

Users must not copy, capture, record, transcribe, export, publish, leak, sell, forward, redistribute, or disclose confidential information to an unauthorized person, system, or service.

External Private Share Links and information obtained through them must not be forwarded, published, reused, or retained beyond the recipient, included information, purpose, and duration authorized by the candidate.

Users may submit limited screenshots or other evidence to Wigiwork where lawful and reasonably necessary to report suspected abuse, fraud, deanonymization, confidentiality breaches, or security concerns. Reports must not include more confidential or personal information than reasonably necessary.

Suspected unauthorized disclosure or misuse may result in investigation, access restrictions, suspension, termination, preservation of relevant records, or legal action.

Wigiwork may investigate suspected confidentiality breaches, unauthorized access or disclosure, identity misuse, interference with access or content-protection controls, and other suspected fraud, security, or legal violations.

During an investigation, Wigiwork may preserve relevant records and apply proportionate restrictions to accounts, organizations, access, features, integrations, tools, or content where reasonably necessary to protect users, anonymity, confidentiality, security, platform integrity, legal compliance, or Wigiwork's rights.

Wigiwork does not disclose security-sensitive investigation, detection, fraud-prevention, verification, confidentiality-protection, or abuse-prevention methods where disclosure could increase risk or enable circumvention, except where required by applicable law.

Depending on the nature, severity, frequency, and risk of a violation, Wigiwork may:

• restrict, suspend, or terminate accounts, organizations, access, features, integrations, tools, content, or verification status;
• apply organization-wide restrictions;
• invalidate credits or platform privileges where permitted by applicable billing terms and law;
• preserve relevant records, notify affected parties, report conduct to competent authorities, or pursue legal remedies where appropriate.

An ordinary billing restriction does not by itself revoke Profile Access already authorized by a candidate. Existing access remains subject to its normal expiry, candidate revocation, and any separate confidentiality, fraud, misuse, safety, chargeback, legal, suspension, or termination measures.

Wigiwork may enforce NDA-Safe™, confidentiality, recipient, purpose, access, and content-handling obligations to the extent permitted by applicable law.

Where required by applicable law, Wigiwork will provide any required notice, reasons, review, or appeal opportunity, subject to lawful exceptions.

Applicable confidentiality, NDA-Safe™, Wigi-DNA™, recipient, purpose, access, data-use, retention, deletion, and content-handling obligations continue after account closure, Identity Reset, Profile Access expiry or revocation, completion of a hiring purpose, suspension or termination, and termination of the applicable Terms or agreement.

These obligations continue for as long as the information remains confidential or retention, protection, deletion, or restricted-use duties continue under the Terms, another binding obligation, or applicable law.

Recipients that store, share, or otherwise process candidate information outside Wigiwork remain responsible for that processing and any separate obligations arising under applicable law, without limiting Wigiwork's own legal obligations.