The Blue Line Mutual Data Pact

Why this exists

When recruiters bring a new tool into their workflow, they're handing it three of their most valuable assets at once: their clients, their candidates, and their proprietary sourcing approach. We hear the same concern in every demo — “will my data be used to train your AI? Will my candidates end up in someone else's search? Will my clients be poached?”

This document answers every version of that question. It's mutual on purpose — we hold the same line in both directions — and it's public on purpose so you can read it before you sign up, not after. By using Blue Line, both parties agree to the commitments below.

What “Customer Data” means

Everything you bring to or generate on the platform: job descriptions, candidate records (names, emails, resumes, notes, stage history), pipeline structure, sourcing keywords, outreach templates, screening questions, AI-generated content tied to your jobs, billing details, and any client information you enter or upload. You own all of it. We are a data processor, not a data owner.

Our commitments to you

1. We do not sell, lease, or share your data

We will never sell, rent, lease, syndicate, or otherwise transfer your Customer Data to any third party for their own commercial use. Not to data brokers. Not to other recruiters. Not to other customers. Not aggregated, not de-identified, not at all.

2. We do not train AI models on your data

Your candidate data, client data, job descriptions, outreach, and pipeline information are never used to train any AI model — including ours, including Anthropic's, including any other model provider we may use now or in the future. When we send your content to the Anthropic Claude API for AI-powered scoring, optimization, or chat, those API calls are governed by Anthropic's zero-retention policy for API customers — no training, no logging, no fine-tuning. We do not opt in to model training on your behalf, ever.

3. We do not aggregate to resell market intelligence

Some platforms quietly aggregate customer data into “market insights” reports that are then sold back to the industry (or to your competitors). We do not. The only platform-wide analytics we publish are derived from public job board feeds we license separately (Workable, Ashby, SmartRecruiters) — never from your private data.

4. Your data, your control

• Export anytime. CSV / JSON export is available from the dashboard for candidates, jobs, pipeline, and outreach history.
• Delete on cancellation. When you cancel, we permanently delete your Customer Data within 30 days, except where retention is required by law (e.g., financial records).
• Encryption. All data is encrypted in transit (TLS 1.2+) and at rest (database-layer encryption via Neon Postgres).
• Breach notification.We notify affected customers within 72 hours of confirming a security incident that exposes Customer Data, and provide what's known about scope and impact.

5. Subprocessors — named and accountable

We use the following third-party services to run the platform. Each is bound by their own data protection commitments and is listed publicly so you can audit:

• Anthropic — Claude API for AI features (zero-retention, no training)
• Neon — managed Postgres database (encrypted at rest)
• Vercel — application hosting + DNS
• Stripe — payment processing (we never see card numbers)
• Resend — transactional and outreach email
• Daily.co — video screening calls + recordings
• People Data Labs (PDL) — public-data candidate enrichment (your private data is not sent to PDL; we only query public attributes)

We will give 30 days' advance notice via email before adding a new subprocessor that handles Customer Data, so you can object or terminate.

6. Sourcing and outreach you create stays yours

Sourcing keywords, screening questions, outreach templates, AI chat conversations, pipeline workflows, and any other artifacts you build inside Blue Line are yours. We do not promote them as templates to other customers. We do not analyze them to inform our roadmap without explicit opt-in. You can delete them at any time and they're gone from our active systems within 24 hours.

7. Your clients are off-limits

Companies you work with as a recruiter — your clients — are your business relationships. We do not contact them, market to them, recruit them onto Blue Line, or use the fact of your relationship in our sales conversations.

Your commitments to us

The Pact is mutual. In exchange for the protections above, you agree to the following on the platform side.

8. Don't reverse-engineer or extract

• You won't reverse-engineer, decompile, or attempt to recreate the platform's AI logic, prompt engineering, or scoring models.
• You won't scrape, bulk-export, or republish our aggregated job feed (licensed from Workable, Ashby, SmartRecruiters, and other partners). Use within Blue Line: yes. Republishing as your own job board: no.
• You won't use the platform to train competing AI products or to build a directly competing recruiting platform.

9. Don't share access

Your account is for you and your authorized teammates only. Don't share credentials with people outside your organization, sublicense access, or resell platform access. Add teammates through the Team Management settings — that's what it's there for.

10. Confidentiality on beta features and pricing

Beta features, internal pricing discussions, roadmap previews, and operational details we share with you in confidence stay confidential — same standard we hold for your data. This is standard practice and applies for two years after your account ends.

Standard provisions

Permitted disclosures

Either side may disclose the other's confidential information if compelled by law (subpoena, court order, regulatory request) — but we'll give you advance notice when legally permitted so you have a chance to object or seek a protective order.

Term and survival

This Pact is in effect for the duration of your Blue Line subscription. Confidentiality and data-protection obligations survive for two years after termination, except for trade secrets, which survive indefinitely.

Remedies

Both sides agree that breach of confidentiality or data-protection terms can cause irreparable harm and entitles the non-breaching party to seek injunctive relief in addition to any other remedies available.

Governing law

This Pact is governed by the laws of the State of Ohio, without regard to its conflict-of-laws rules.

Updates

If we change this Pact, we'll email all active customers at least 14 days before the change takes effect, with a clear summary of what changed and why. Continued use after the effective date constitutes acceptance.

Questions

For data-protection questions, reach privacy@bluelinesearch.ai. For legal or contractual questions on this Pact, reach legal@bluelinesearch.ai.