Data Retention & Storage

Last updated:

This document is part of the Wigiwork Legal & Trust Center. View all policies.

1. General Retention Principles

Wigiwork retains personal data, Company Data, account information, platform records, and other information only for as long as reasonably necessary for the purpose for which it is processed.

Retention periods may depend on:

  • the nature and sensitivity of the information;
  • the account, feature, transaction, or workflow involved;
  • security, fraud-prevention, audit, and dispute requirements;
  • applicable legal, regulatory, tax, payment, and recordkeeping obligations; and
  • technical requirements concerning backups, logs, and system integrity.

When information is no longer reasonably required, Wigiwork deletes or irreversibly anonymizes it where technically and legally permitted, subject to the limited-retention rules described in this policy.

Some user-facing lists, histories, and archived views display records only for a limited period. Removal of a record from a user-facing view does not by itself delete the underlying information, which remains subject to the retention and deletion rules in this policy, including the limited lawful-retention rules in Section 3.

1A. Skill Confirmations and References

Unanswered reference and Skill Confirmation request links expire after 5 days. A submitted reference does not expire. When a confirmation or reference is hidden, deleted, or withdrawn, display and active derived-signal use stop, subject to reasonable processing time and limited lawful retention.

Permanent candidate-account deletion deletes or irreversibly anonymizes confirmation and reference information under the ordinary account-deletion rules, subject to the lawful-retention exceptions stated in this policy.

1B. Optional Public Professional Profile Imports

Imported profile information that a candidate discards or does not save is deleted when it is no longer needed to complete the requested import and is not retained as Wigiwork profile content.

Wigiwork may retain limited import provenance and audit information, including the submitted profile URL, retrieval timestamp, import confirmation record, provider request reference, and import outcome, only for as long as reasonably necessary for account integrity, fraud prevention, misuse investigation, security, dispute resolution, enforcement, or legal compliance.

The name shown on the source profile is used only for temporary mismatch review, is not saved as imported profile content, and is deleted or irreversibly anonymized when no longer needed for that review, subject to the limited lawful-retention rules in Section 3.

Temporary copies may remain in protected system logs or backups according to applicable retention schedules and are subject to Sections 3 and 4.

1C. Outreach and Sourcing Records

Professional, job, and contact information used for sourcing or outreach is retained only while reasonably necessary for the relevant invitation or workflow.

Limited records follow these retention periods:

  • Outreach compliance records: metadata recording where the contact address was obtained, the sending basis relied on, and when the email was sent is retained for 12 months from sending.
  • Contact-frequency records: minimum information needed to enforce the global 30-day outreach limit is retained for 30 days from sending.
  • Opt-out records: minimum suppression information is retained for as long as necessary to prevent further outreach and honour the opt-out.
  • Job-specific contact restrictions: minimum duplicate-prevention records are retained only while necessary to enforce the applicable restriction.

These records are used only for their stated compliance and contact-control purposes.

The 12-month outreach compliance period may be extended only for relevant records reasonably necessary for an actual complaint, investigation, legal claim, or applicable legal requirement. Extended records remain restricted to that purpose and are deleted or irreversibly anonymized when no longer necessary.

1D. Data Download Copies

Temporary download copies are available for 72 hours after we email you that they are ready and are then deleted. This does not delete your account data or change its applicable retention periods. You may request a new copy.

1E. AI Improvement Data

Conversations with Wigiwork AI, search activity and related feedback used for AI improvement, including model training or refinement, are retained only while reasonably necessary for that purpose.

We review whether this information is still needed and delete or irreversibly anonymize it when no longer necessary. Applicable privacy choices, objections and deletion rights remain available as described in the Privacy Policy.

Account history and limited lawful retention follow the applicable provisions of this policy.

2. Account Closure and Deletion

Candidates and employers may request account deletion through the available account controls or an applicable support or privacy process.

After the user confirms the request through the emailed confirmation link:

  • the account enters a 30-day deletion-pending period;
  • the relevant profile or account presence is hidden where applicable;
  • for candidates, the protected Public profile stops being served on Wigiwork's public website and is removed from Wigiwork-controlled public listings; and
  • account activity is paused.

Logging in during the 30-day period cancels the pending deletion and reactivates the account.

If the user does not log in before the stated deletion date, the account is permanently deleted or irreversibly anonymized at the end of the 30-day period and cannot be restored.

Limited information may remain where reasonably necessary for:

  • legal or regulatory compliance;
  • fraud prevention, security, or investigations;
  • tax, payment, accounting, audit, or reporting obligations;
  • dispute resolution, enforcement, or legal claims;
  • backup integrity or disaster recovery; or
  • another purpose permitted or required by applicable law.

Information retained after deletion remains subject to the restrictions in Section 3.

Previously indexed or cached copies may remain temporarily with search engines, AI services, or other third parties. Wigiwork does not control their removal timelines.

A statutory request to exercise a right to erasure is handled separately under applicable privacy law. Wigiwork will take the required action and respond without undue delay and within the legally required timeframe.

3. Limited and Lawful Retention

Wigiwork may retain limited information after an account, access, workflow, or processing purpose ends where reasonably necessary for:

  • legal, regulatory, sanctions, tax, accounting, payment, audit, or reporting obligations;
  • fraud prevention, security, incident response, or platform integrity;
  • dispute resolution, complaint handling, investigations, or enforcement;
  • establishing, exercising, or defending legal claims;
  • backup integrity and disaster recovery; or
  • another purpose permitted or required by applicable law.

Information retained under this section must be limited to what is reasonably necessary, protected against unauthorized access, and used only for the applicable retention purpose.

Access to retained information may be restricted, and the information may be deleted or irreversibly anonymized when the retention purpose ends and deletion is technically and legally permitted.

4. Backups and System Logs

Wigiwork retains encrypted backups and system logs according to applicable retention schedules.

Backups and logs may be retained or accessed where reasonably necessary for:

  • service restoration and business continuity;
  • security, fraud prevention, and incident response;
  • audit, investigation, and enforcement;
  • dispute resolution or legal claims; and
  • legal, regulatory, payment, or recordkeeping obligations.

They are not used for ordinary advertising or marketing purposes and are not ordinarily accessible to candidates or employers.

Access is restricted to authorized personnel and service providers with a legitimate need. Backups and logs are deleted or irreversibly anonymized when no longer required and where technically and legally permitted.

5. Employer-Held Candidate Information

When a candidate deletes their account or Profile Access expires, is revoked, or is no longer needed for the authorized purpose, Wigiwork-controlled employer and recruiter access ends or is restricted through Wigiwork-controlled systems, subject to reasonable processing delays, technical limitations, and applicable law.

Employers, recruiters, agencies, clients, and other recipients must:

  • stop using candidate information for the ended or revoked purpose;
  • stop further contact based on that access where continued contact is no longer authorized;
  • delete manually retained information, notes, screenshots, references, and copies; and
  • prevent further disclosure, transfer, synchronization, or reuse.

Limited information may be retained only where required by applicable law. Any legally retained information must remain confidential and secure, be used only for the applicable legal, regulatory, audit, dispute, or recordkeeping purpose, and must not be reused for further hiring, outreach, marketing, profiling, another role, another client, or an unrelated purpose.

Wigiwork cannot automatically delete information previously copied or retained outside Wigiwork. Recipients remain responsible for complying with applicable deletion, confidentiality, purpose-limitation, security, and data-protection obligations.

6. Company Data Retention

Wigiwork retains Company Data only for as long as reasonably necessary to:

  • operate employer accounts and authorized hiring workflows;
  • manage job postings, verification, support, billing, and payments;
  • maintain security and prevent fraud or misuse;
  • comply with legal, regulatory, tax, accounting, audit, and reporting obligations;
  • resolve disputes and enforce agreements; and
  • maintain required backups and business records.

An outreach job draft that has not been activated is deleted 30 days after company account creation, and its attached shortlist is released. Limited records retained for separate compliance or contact-control purposes remain subject to this policy.

Employers may request deletion of Company Data where permitted by applicable law.

Account closure or a deletion request does not require Wigiwork to delete information that must or may lawfully be retained. Information retained after closure remains subject to applicable confidentiality, security, access, and purpose limitations.

Deletion of Company Data does not authorize an employer, recruiter, agency, client, or other recipient to retain candidate information beyond the candidate-authorized purpose or duration.

7. Identity Reset and Account Deletion

Identity Reset is not account deletion. It replaces the candidate's anonymous username, WigiPic or avatar, and anonymous profile ID while retaining the professional profile, Profile Strength, and Verified Tick status. Existing Wigi Highlights are cleared and regenerated from the retained professional profile information and authorised professional documents.

As part of the reset:

  • visibility history, employer-access history, and pending or active Profile Access connected to the previous identity are cleared or revoked from normal user-facing workflows;
  • existing conversations end for the candidate; companies may retain earlier conversation history under the previous anonymous identity without a link to the new identity, and the previous username is permanently retired;
  • External Private Share Links connected to the previous identity are revoked; and
  • any Wigiwork-controlled public profile page connected to the previous identity stops being served, is removed from Wigiwork-controlled public listings, and is not redirected to the new anonymous identity.

The candidate then appears under a new anonymous identity in Discovery.

Identity Reset is permanent and cannot be reversed. Wigiwork does not publicly link the previous and new anonymous identities. Limited internal records may remain where reasonably necessary for security, fraud prevention, audit, dispute resolution, legal compliance, or enforcement. Those records are not displayed or restored through normal user-facing workflows.

Account deletion follows the separate 30-day deletion-pending process in Section 2 and results in permanent deletion or irreversible anonymization, subject to limited lawful-retention exceptions.

Neither Identity Reset nor account deletion removes information already viewed, copied, indexed, cached, or lawfully retained outside Wigiwork, or overrides applicable confidentiality, deletion, and legal-retention obligations.

8. Access Request and Access History Retention

Access Requests declined by the candidate or automatically declined after 5 days without a response are deleted after 45 days, subject to the limited lawful-retention rules in Section 3.

When approved Profile Access expires, is revoked, or otherwise ends, Wigiwork retains limited access-history and related authorization information for 12 months after access ends. For members, this includes authorization records for profile sharing through outreach invitations. The information records the access relationship, relevant dates, and how the access ended.

Wigiwork does not retain an old copy or snapshot of the candidate's profile solely for access-history purposes. After the applicable retention period ends, the information is deleted or irreversibly anonymized, subject to the limited lawful-retention rules in Section 3.

9. Storage Locations and International Processing

Wigiwork may store or process information in countries other than the country where the user resides or where the information was originally collected, including through authorized service providers and distributed operations.

Where required by applicable law, Wigiwork uses appropriate safeguards for international transfers and processing.

International storage or processing does not remove or reduce applicable retention, deletion, confidentiality, security, purpose-limitation, or user-rights obligations.

Further information about international data transfers is provided in the Privacy Policy and Data Protection Notice.

10. Retention and Deletion Rights

Depending on applicable law, individuals, including people who have not registered with Wigiwork, may have rights concerning retained information, including access, correction, deletion, restriction, objection, and data portability.

Requests may be submitted to privacy@wigiwork.com.

You can stop outreach emails at any time without an account; see the Privacy Policy. Minimum suppression information may remain to honour the request.

For other privacy requests, Wigiwork may request information reasonably necessary to verify the requester and process the request securely.

A deletion or objection request does not require removal of information lawfully retained under this policy. Retained information remains limited to its lawful retention purpose and subject to appropriate confidentiality, security, access, and use restrictions.

Wigiwork will honour objections to direct marketing, including related profiling. Retaining compliance or suppression records does not authorize further marketing to someone who has objected.

Wigiwork will respond within the timeframes required by applicable law.

Related Policies