Privacy Policy

01Who we are

AS9 is an organizational intelligence company. We build software that helps employers understand the shape of their teams and helps professionals be found for work that fits them. Our products are SPEAR, ABLE, The Nines, Next9 and drift.

This policy explains what we hold about you, why we hold it, who ever sees it, and how to make us stop. It applies to our websites, our applications, and the profiles we maintain about professionals.

Questions about this policyprivacy@as9.io

02Two kinds of people, two different promises

Almost every privacy question about AS9 has a different answer depending on which of these you are, so we separate them at the top rather than burying the distinction later.

MembersProfessionals who created an account, accepted an invitation, or joined a pool. You gave us your information directly and you can see, edit, export and delete all of it.

Sourced professionalsPeople we learned about from public and licensed third-party sources before any contact. You did not give us anything. You still have every right described in this policy, and you can leave at any time in one step.

ClientsEmployers and their users who log in to search, shortlist and hire. Their account data is business contact information plus what they enter about their own organization.

If you were sourced and you want out, you do not need an account, a login, or a reason. Write to privacy@as9.io and we remove you and tell any client who saw you to do the same.

03What we collect

From members, we collect what you give us: name, contact details, work history, education, skills, the roles and compensation you are open to, documents you upload such as a resume, and the preferences that shape what we show you.

From sourced professionals, we collect professional information from public sources and licensed data providers. This is the same category of information a recruiter would find by hand, gathered at scale: employer, title, tenure, location at the metropolitan level, publicly stated skills, the technology stack associated with your current employer, and a business email or professional profile link where one is published.

From clients, we collect account and billing details, the searches and shortlists their users create, and the notes they write about candidates inside our products.

From everyone who visits, we collect a small amount of technical information automatically: IP address, browser and device type, pages viewed, and the referring page. Our cookie policy explains what is stored in your browser and what you can switch off.

We do not collect government identifiers, financial account numbers, health information, biometric data, or criminal history. We do not buy or infer race, religion, sexual orientation, disability, union membership, or political affiliation, and we do not accept them from clients.

04Where sourced information comes from

When we hold a profile you did not create, we record where each field came from and when. That record travels with the profile for its whole life. We call it provenance, and it is enforced in the software rather than promised in a document.

Public professional sources, such as company sites, public directories and published talks or writing.
Licensed data providers who contract with us and represent that they collected the information lawfully.
Information you later give us directly, which supersedes anything sourced.
Referrals, where a person who already knows you introduces you and tells us so.

Sourced fields and consented fields are stored separately and are never blended into one indistinguishable record. If you tell us a sourced field is wrong, we correct it and mark it as corrected by you.

05Why we hold it

We hold professional information for one purpose: connecting people to work. Everything below is in service of that, and we do not repurpose your information for anything outside it.

MatchingUnderstanding what you do so we can put you in front of roles that plausibly fit, and keep you out of ones that do not.

ContactReaching out once about a specific opportunity, and then only again if you say yes.

Client searchLetting employers who pay for access search for the skills they need and see the professionals who have them.

Product and safetyKeeping the service running, preventing abuse, measuring whether what we built actually works, and meeting our legal obligations.

We do not sell advertising, we do not build advertising profiles, and we do not feed your information into advertising networks.

06About fit scores and automation

Our products calculate internal signals that help our team and our clients decide who to look at first. These are search and sorting aids. They are not a judgment about your ability, your character, or your suitability for employment, and they are never presented to a client as a hiring verdict.

No hiring decision at AS9 is made by software alone. A person decides who to contact and a person at the employer decides who to hire.

AS9 is not a consumer reporting agency, and the profiles we maintain are not consumer reports. We do not conduct background checks, we do not verify criminal or credit history, and our products may not be used to make eligibility determinations covered by the Fair Credit Reporting Act.

08Sale, sharing, and your opt-out

Because we charge employers for access to profiles, California and several other states may treat that access as a sale or a sharing of personal information, regardless of what we intend by it. Rather than argue the definition, we assume it applies and give everyone the opt-out.

You may direct us to stop selling or sharing your personal information at any time, from any state, whether or not your state's law grants that right. The opt-out is on our privacy choices page and takes effect for future disclosures immediately.

We honor the Global Privacy Control. If your browser sends the signal, we treat it as a valid opt-out for that browser without asking you to do anything else.

Opt out by mail or messageprivacy@as9.io

09Your rights

These rights apply to everyone we hold information about, whether or not the law where you live requires it of us.

KnowAsk what we hold about you, where each piece came from, and who we have disclosed it to.

CorrectTell us something is wrong and have it fixed and marked as corrected by you.

DeleteHave your profile removed. We propagate the removal to clients who accessed it and instruct them to delete their copies.

ExportReceive a machine-readable copy of what you gave us.

Opt outStop the sale or sharing described above, and stop hearing from us entirely.

Be left aloneWe will never retaliate, degrade your experience, or charge you differently for exercising any of these.

We answer within forty-five days and tell you if we need longer. We may ask for enough information to be confident you are who you say you are, and we use what you send for verification only.

Exercise any rightprivacy@as9.io

10How we contact you

If you are a member, we send you what you asked for and the operational messages the service requires.

If you are a sourced professional, we may write to you once about a specific opportunity. Every message says plainly where we got your information and how to leave. If you do not reply, we do not keep writing.

We do not send text messages to a phone number we sourced rather than received from you.

We never use a real person's name or profile in marketing, in a public preview, or in a demonstration without that person's permission.

11How long we keep it

Member information stays for as long as your account is open, and for thirty days afterward so an accidental deletion can be undone.

Sourced profiles that go untouched, uncontacted and unclaimed are removed on a rolling schedule rather than held indefinitely against the chance they become useful.

When you ask to be deleted, we remove the profile and retain only a minimal suppression record, which is your contact identifier and nothing else, so that we can recognize you and decline to source you again.

We keep consent and opt-out records for as long as we are required to be able to prove them.

12Security

Information is encrypted in transit and at rest. Access inside AS9 is limited to the people whose work requires it and is logged. Client access is scoped to the client's own account and enforced on the server rather than in the browser.

No system is perfect. If a breach affects your information we will tell you and the appropriate regulators within the time the law allows, and we will tell you what we know rather than what sounds best.

Report a vulnerabilitysecurity@as9.io

13Where we operate

AS9 operates in the United States and our services are directed to people in the United States. Information is stored and processed here.

We do not knowingly source or hold profiles of people located in the European Economic Area, the United Kingdom or Switzerland. If you are in one of those places and we hold something about you, write to us and we will remove it.

Our services are not directed to anyone under eighteen and we do not knowingly collect information from children.

14Changes to this policy

When we change this policy we change the effective date at the top and keep the previous version available. If a change materially affects your rights we tell members directly rather than relying on you to notice.

This policy is published in English, Spanish, French and Portuguese. If a translation and the English version disagree, the English version governs.

Our postal address is The Deco · 5211 Peachtree Blvd · Atlanta, Georgia 30341.