Skip to main content
BBulbul

Bulbul Privacy Policy

Effective date: July 20, 2026
Last updated: July 20, 2026
Version: 1.0.0

1. About this Privacy Policy

Bulbul is a career and recruitment platform owned and operated by Sivaiah Technologies Inc., a federally incorporated Canadian corporation.

This Privacy Policy explains how Sivaiah Technologies Inc. collects, uses, discloses, retains, and protects personal information when you use:

  • bulbul.ca;
  • employers.bulbul.ca;
  • Bulbul candidate, employer, recruitment, resume, and related services;
  • communications, emails, payment services, and support channels associated with Bulbul.

In this Privacy Policy, “Bulbul,” “we,” “us,” and “our” refer to Sivaiah Technologies Inc.

This policy applies to candidates, employers, employer representatives, website visitors, customers purchasing resume services, and people who contact us.

It does not apply to an employer’s independent collection or use of candidate information outside Bulbul, including information submitted through an external employer website.

2. Contact information

Sivaiah Technologies Inc. has designated a Privacy Officer who is responsible for overseeing Bulbul’s privacy practices.

Privacy Officer Sivaiah Technologies Inc. #2–120 Main Street Cambridge, Ontario N1R 1V7 Canada

Email: privacy@sivaiah.com

You may use this email address to:

  • request access to or correction of your personal information;
  • request account deletion;
  • withdraw an optional privacy choice;
  • make a privacy complaint;
  • report suspected misuse of personal information;
  • ask questions about this Privacy Policy.

When contacting us about account deletion, please specify that your request relates to your Bulbul account and identify whether it is a candidate or employer account.

3. Eligibility

Bulbul is intended only for individuals who have reached the age of majority in the Canadian province or territory where they reside.

During registration, users must confirm that they have reached the applicable age of majority.

If we reasonably believe that an account belongs to someone who has not reached the applicable age of majority, we may restrict or disable the account while we investigate. We may request limited information reasonably necessary to verify eligibility, protect the individual, or comply with legal obligations.

4. Personal information we collect

The information we collect depends on how you use Bulbul.

4.1 Account and authentication information

When you register, sign in, or manage an account, we may collect:

  • name and display name;
  • email address;
  • profile image;
  • account identifiers;
  • email-verification status;
  • sign-in method;
  • account type and permissions;
  • authentication, session, and security information;
  • login dates and account activity;
  • password-reset and account-verification records.

Firebase Authentication handles password credentials. Bulbul does not intentionally store plaintext passwords.

4.2 Candidate profile and resume information

Candidates may provide:

  • name and professional headline;
  • profile photograph;
  • email address and telephone number;
  • city, province, country, postal information, or other location information;
  • career objective or professional biography;
  • employment history;
  • employer names, job titles, employment dates, responsibilities, and achievements;
  • education history, institutions, credentials, and dates;
  • technical and professional skills;
  • projects and leadership experience;
  • certifications and professional accomplishments;
  • portfolio, website, social-profile, or other professional links;
  • resume documents and resume-builder content;
  • career preferences and target roles;
  • public-profile preferences;
  • search-engine indexing preferences;
  • sourcing and employer-discovery preferences.

Candidates are responsible for ensuring that the information they provide is accurate and that they have permission to provide personal information about references or other individuals.

4.3 Information you should not provide

Unless Bulbul specifically asks for it for a lawful and identified purpose, do not include unnecessary sensitive information in your resume, profile, applications, messages, or other free-text fields.

This includes:

  • Social Insurance Numbers;
  • passport or government-identification numbers;
  • banking or payment-card information;
  • medical information;
  • date of birth;
  • protected demographic information;
  • passwords or authentication credentials;
  • confidential information belonging to another person or organization;
  • personal information about references without their permission.

4.4 Job-search and application information

When you search for, save, view, or apply for jobs, we may collect:

  • search and filter selections;
  • saved jobs;
  • job-view and application activity;
  • the job and company to which you apply;
  • submission date and time;
  • cover letters;
  • screening-question answers;
  • application-related skills and responses;
  • application status and status history;
  • withdrawal information;
  • communications with the employer;
  • information connecting a sourcing invitation with an application.

When you submit an internal application, Bulbul may create an application-time copy of relevant profile and resume information. This preserves the information submitted to the employer even if you later change your live profile.

Changes to your live profile may therefore not change a previously submitted application.

4.5 Employer access and hiring records

Authorized employer team members may be able to access:

  • applications submitted to their company;
  • application-time candidate information;
  • screening answers;
  • cover letters;
  • candidate-employer messages;
  • application status and history;
  • sourcing invitations and responses;
  • internal recruitment workflow information.

Employers may create private notes about applications. These notes are intended for authorized members of the employer’s team and are not ordinarily visible to candidates.

Access and correction rights relating to employer-private information may be subject to applicable legal exceptions and may need to be directed to the employer where the employer independently controls the information.

4.6 Candidate-employer messages

If candidates and employers communicate through Bulbul, we may collect:

  • message content;
  • sender and recipient information;
  • conversation and application identifiers;
  • timestamps;
  • read and unread status;
  • notification and delivery information.

Do not include unnecessary sensitive, confidential, or unrelated personal information in messages.

4.7 Employer and team-member information

For employer accounts, we may collect:

  • name and email address;
  • telephone number;
  • job title;
  • employer account identifiers;
  • company association;
  • team role and permissions;
  • account and invitation status;
  • team invitations;
  • notification preferences;
  • actions taken in relation to jobs, applications, candidates, or company accounts;
  • authentication, session, security, and audit information.

4.8 Company and job-posting information

Employers may provide:

  • company name;
  • website and business description;
  • industry and company size;
  • headquarters and location details;
  • social-media or professional links;
  • job descriptions;
  • compensation information;
  • work schedule and location;
  • remote-work eligibility;
  • required qualifications and skills;
  • application instructions;
  • external application links;
  • job expiry and publication information;
  • information about the employer’s use of AI in hiring.

Approved company and job information may be publicly visible and may be indexed by search engines.

4.9 Company verification documents

Bulbul may ask an employer to submit documents to verify that the company is legitimate.

Accepted documents may include:

  • federal or provincial business-registration records;
  • articles of incorporation;
  • corporate charters;
  • approved business-number registration documents;
  • certificates or articles of amalgamation;
  • approved foreign equivalents.

Verification files may include the original filename, document type, upload date, review status, and reviewer information.

Employers should redact unrelated personal information where permitted and should not upload personal identity documents, banking records, tax returns, payroll records, or shareholder information unless Bulbul expressly requests the information for a lawful and necessary purpose.

Verification documents are accessible only to authorized personnel who require access for verification, fraud prevention, security, support, or legal purposes.

4.10 Professional resume-service information

When you purchase a professional resume service, we may collect:

  • your candidate and customer identifiers;
  • email address;
  • the resume information submitted for the service;
  • a fixed copy or “snapshot” of the resume used to fulfil the order;
  • the service ordered;
  • order and fulfilment status;
  • communications with resume writers or support personnel;
  • delivery records;
  • refund, cancellation, dispute, or chargeback communications;
  • payment and transaction identifiers.

Professional resumes may be prepared using a combination of AI-assisted tools and contracted human resume professionals.

Completed resumes are delivered by email attachment. Copies may remain in the email systems of Bulbul, its email-delivery providers, and the recipient according to their respective retention practices.

4.11 Payment information

Bulbul uses Stripe to process payments.

When you pay through Stripe’s hosted checkout, Stripe may collect:

  • payment-card information;
  • billing information;
  • device and network information;
  • fraud-prevention information;
  • tax-related information;
  • refund, dispute, and chargeback information.

Bulbul does not intentionally collect or store complete payment-card numbers.

We may receive and retain limited transaction information, including:

  • customer and order identifiers;
  • email address;
  • checkout and payment identifiers;
  • product and price identifiers;
  • currency;
  • subtotal, tax, and total amounts;
  • payment status;
  • transaction dates;
  • fulfilment, payment-email, and webhook records.

Stripe processes information under its own privacy terms and may act independently for certain payment, fraud-prevention, legal, and compliance purposes.

4.12 Support, privacy, safety, and abuse reports

If you contact us, we may collect:

  • your name and contact details;
  • the content of your request;
  • supporting documents or attachments;
  • identity-verification information;
  • investigation and resolution records;
  • complaint and correspondence history;
  • information about a reported user, employer, company, job, message, or activity.

We ask that you provide only the information reasonably necessary for us to investigate and respond.

4.13 Technical and security information

When you use Bulbul, we may automatically collect:

  • IP address;
  • device and browser information;
  • operating system;
  • pages and features accessed;
  • date and time information;
  • request and session information;
  • security and authentication events;
  • diagnostic and error information;
  • rate-limit and abuse-prevention information;
  • email-delivery, bounce, and complaint information;
  • consent and privacy-preference records.

5. How we collect information

We collect personal information:

  • directly from candidates, employers, customers, and visitors;
  • through account registration and profile forms;
  • through resumes, applications, messages, and job postings;
  • from an employer that invites a team member;
  • from candidates and employers interacting with one another;
  • automatically through essential security and session technologies;
  • through optional analytics after consent;
  • through payment and email-delivery providers;
  • through automated analysis and inferences generated from information you provide;
  • from authorized personnel carrying out verification, support, review, and security functions.

Bulbul does not currently purchase candidate databases, marketing lists, or profiles from data brokers, third-party recruiters, or scraped public websites.

6. How we use personal information

We may use personal information to:

  • create and administer candidate and employer accounts;
  • authenticate users and maintain secure sessions;
  • create, display, and update candidate profiles and resumes;
  • provide resume-building and professional resume services;
  • provide ATS and resume-analysis features;
  • enable job searches, saved jobs, applications, and withdrawals;
  • preserve an accurate application-time record;
  • enable candidate-employer communications;
  • enable employer recruitment workflows;
  • manage employer teams, roles, invitations, and permissions;
  • verify employers and companies;
  • detect fraudulent companies and job postings;
  • create, review, publish, expire, and remove job postings;
  • provide candidate sourcing and employer-discovery features where enabled;
  • provide AI-assisted and automated features;
  • process payments and deliver purchased services;
  • provide customer support;
  • send account, security, application, message, order, and service emails;
  • send optional alerts or promotional communications where authorized;
  • measure and improve website performance after analytics consent;
  • prevent fraud, abuse, unauthorized access, and violations of our Terms;
  • investigate complaints, safety reports, and security incidents;
  • maintain records required for legal, tax, accounting, security, and compliance purposes;
  • establish, exercise, or defend legal claims;
  • comply with lawful requests and applicable laws.

We will obtain new consent where required before using personal information for a materially different purpose.

7. Public candidate profiles

Candidate public profiles are off by default.

A candidate may choose to create a public profile with a unique public identifier. A public profile may be accessible to anyone who has the profile link.

Information made public may be:

  • viewed by people outside Bulbul;
  • copied, saved, photographed, printed, or shared;
  • indexed or cached by search engines where indexing is enabled;
  • archived by third parties.

Turning off a public profile stops Bulbul from intentionally presenting the profile publicly, but it may not immediately remove information already copied or cached by third parties.

8. Search-engine indexing

Making a profile public and allowing search-engine indexing are separate choices.

A public candidate profile will not be intentionally submitted for general search-engine indexing unless the candidate separately enables that option.

Candidates may withdraw search-engine indexing permission through their settings. Bulbul can update its own instructions to search engines, but cannot guarantee when a search engine will remove previously indexed or cached information.

9. Employer sourcing and candidate discovery

Employer sourcing is an optional feature and is off by default.

Candidates may enable sourcing using the following separate checkbox:

☐ Allow verified employers recruiting for Canadian opportunities to discover a limited version of my professional profile.

When sourcing is enabled, verified employers may be able to see a limited professional profile containing information such as:

  • initials;
  • professional headline or objective;
  • skills;
  • job titles;
  • employment experience;
  • employment durations;
  • education and credentials;
  • projects;
  • leadership experience;
  • target roles and career interests;
  • limited matching or role-intent information.

The sourcing profile is designed not to include:

  • full name;
  • direct email address;
  • telephone number;
  • photograph;
  • street address;
  • social or portfolio links;
  • full ATS report;
  • ATS score;
  • payment information;
  • intentionally collected protected demographic characteristics.

The sourcing profile is pseudonymous, not anonymous. A person’s work history, education, skills, or projects may still make that person recognizable.

Employers accessing sourcing information may be located in or outside Canada, but must be recruiting for genuine Canadian opportunities.

Verification reduces certain platform risks but does not guarantee an employer’s identity, conduct, legitimacy, financial condition, or employment opportunity.

Candidates may disable sourcing at any time. After sourcing is disabled:

  • the active sourcing profile will no longer appear in future employer searches;
  • the active sourcing projection and identity connection will be removed from the sourcing feature;
  • existing invitations, reports, blocks, security records, and audit records may remain where reasonably necessary;
  • information previously viewed or independently recorded by an employer may remain with that employer.

Sourcing email notifications are a separate preference. A candidate may disable invitation emails while continuing to receive invitations inside the Bulbul account.

Bulbul records company-wide sourcing usage to enforce abuse controls. The current search allowance is 50 uncached searches per UTC week, resetting Monday at 00:00 UTC. Profile opens, invitations, AI explanations, and job-quality checks continue to use separate daily counters. Repeated cached searches do not consume another search allowance.

10. Job applications and employers

When you apply to a job, you direct Bulbul to disclose the relevant application information to the employer and its authorized team members.

An employer may become independently responsible for personal information when it:

  • reviews or records an application;
  • contacts a candidate;
  • manually copies or prints information;
  • transfers information to its own systems;
  • uses information for its own recruitment purposes;
  • retains information after the hiring process;
  • makes employment decisions.

Bulbul does not presently provide a bulk candidate export or resume-download function. However, information displayed on a screen can still be copied, printed, photographed, or manually transferred.

Employers are required to use candidate information only for legitimate recruitment purposes and in accordance with applicable privacy, employment, accessibility, and human-rights laws.

A request concerning information independently retained by an employer may need to be submitted directly to that employer.

11. External applications and third-party websites

Some job postings direct candidates to an employer’s external website.

When you follow an external application link:

  • you leave Bulbul;
  • the employer or its applicant-tracking provider may collect information directly;
  • the external organization’s privacy policy and terms apply;
  • Bulbul does not control the external organization’s collection, use, security, or retention practices.

Bulbul may record that an external application link was selected for security, functionality, analytics, or service-operation purposes.

12. AI-assisted and automated processing

Bulbul uses automated and AI-assisted tools to provide and operate certain features.

These features may include:

  • resume analysis;
  • ATS-related scoring and recommendations;
  • professional resume preparation;
  • keyword and skills analysis;
  • career-role and job matching;
  • sourcing explanations;
  • job-description quality analysis;
  • job-posting review;
  • operational and security checks.

Depending on the feature, AI-assisted processing may use:

  • structured employment history;
  • job titles and descriptions;
  • professional achievements;
  • education and credentials;
  • skills;
  • objectives;
  • projects;
  • leadership information;
  • target roles;
  • candidate-supplied job descriptions;
  • public company and job-posting information.

The current AI workflows are designed not to send the following information for AI analysis unless a future feature specifically requires it and appropriate notice or consent is provided:

  • candidate email addresses or telephone numbers;
  • complete raw resume files;
  • job applications;
  • cover letters and screening responses;
  • candidate-employer messages;
  • employer-private application notes;
  • company verification documents;
  • payment-card information.

Substantial structured resume content may nevertheless be processed when a candidate requests resume or ATS analysis.

Bulbul’s current AI workflow is not designed to use personal information to train or fine-tune AI models or for advertising.

AI outputs may be incomplete, inaccurate, outdated, or biased. Candidates should review AI-generated content before using it and may correct the source profile or resume information from which an output was generated.

Automated job-posting review

Some job postings may be approved automatically when they pass Bulbul’s platform and quality checks.

Postings that are flagged by the automated review process may be reviewed by authorized personnel. Bulbul may suspend, reject, or remove postings that violate platform rules or present legal, safety, quality, or fraud concerns.

An employer may contact us to ask questions about or challenge a material job-review outcome.

No automated hiring decision by Bulbul

Bulbul’s sourcing score and other matching outputs measure configured information overlap. They do not establish:

  • suitability;
  • credibility;
  • legal eligibility;
  • honesty;
  • character;
  • likely job performance;
  • whether an applicant should be interviewed or hired.

Employers must not use a Bulbul score, ranking, ATS result, match explanation, or AI recommendation as the sole basis for screening, rejecting, advancing, interviewing, or hiring a candidate.

Employers remain responsible for meaningful human review and for their own employment decisions.

Quebec law provides additional notice and explanation rights where personal information is used to make a decision based exclusively on automated processing.

13. Cookies and similar technologies

Bulbul uses cookies and related technologies for authentication, security, preferences, analytics, and website operation.

You do not need to accept optional analytics cookies to create an account or use essential Bulbul functions.

13.1 Essential cookies

Essential technologies support:

  • candidate and employer authentication;
  • secure sessions;
  • account security;
  • fraud and abuse prevention;
  • load balancing and service operation;
  • privacy and cookie preferences.

Candidate and employer login-session cookies may remain active for approximately five days unless you sign out earlier or the session is revoked or expires.

A privacy-preference cookie may remain for approximately one year so that Bulbul can remember whether optional analytics was allowed or rejected.

Essential technologies cannot be disabled through Bulbul’s optional analytics control because the service may not function properly without them.

13.2 Optional analytics

Bulbul may use Google Analytics and Microsoft Clarity only after you choose to allow optional analytics.

Google Analytics may collect information about:

  • pages visited;
  • feature usage;
  • device and browser information;
  • approximate location;
  • session and interaction activity;
  • website performance.

Microsoft Clarity may collect information about how pages are displayed and how visitors interact with them, such as clicks, scrolling, mouse movements, page navigation, and technical performance. Microsoft states that Clarity uses cookies and pseudonymous identifiers to associate page and interaction activity.

Bulbul will configure analytics to avoid intentionally collecting sensitive resume, application, payment, password, message, or verification-document content.

Optional analytics is:

  • disabled until you affirmatively select Allow;
  • not initialized when you select Reject;
  • separate from essential authentication and security technologies.

You can reopen the cookie settings and change your preference. Withdrawal stops future optional analytics collection through Bulbul, but may not immediately erase information previously collected and retained by an analytics provider.

14. Email communications

Bulbul may send necessary transactional or service-related messages, including:

  • account verification;
  • password reset;
  • security alerts;
  • employer team invitations;
  • application updates;
  • candidate-employer message notifications;
  • company and job-review decisions;
  • sourcing invitations;
  • payment and order confirmations;
  • resume delivery;
  • support and privacy communications.

Some messages are optional, including:

  • job alerts;
  • sourcing invitation emails;
  • employer new-application alerts;
  • weekly summaries;
  • product announcements;
  • promotional resume-service communications.

Optional communications will include an unsubscribe mechanism or preference control where required.

Unsubscribing from promotional or optional messages will not prevent Bulbul from sending messages reasonably necessary to operate an account, provide a purchased service, address security, or comply with law.

Canadian anti-spam guidance requires commercial electronic-message unsubscribe requests to be actioned within 10 business days, at no cost to the recipient.

15. When we disclose personal information

We may disclose personal information as described below.

15.1 Employers and employer team members

We disclose application information to the employer to which a candidate applies.

Where sourcing is enabled, we disclose the limited sourcing profile to verified employers recruiting for Canadian opportunities.

15.2 Service providers

We use service providers to support:

  • cloud hosting and storage;
  • account authentication;
  • security and abuse prevention;
  • email delivery;
  • payment processing;
  • analytics and website measurement;
  • AI-assisted processing;
  • search-engine indexing;
  • infrastructure operation;
  • professional resume preparation;
  • legal, accounting, and professional advice.

Service providers receive only the information reasonably necessary to perform their functions, subject to their roles, contracts, legal obligations, and independent responsibilities.

We do not need to publish our proprietary system architecture, model names, private domains, internal routing methods, server names, or security configurations to explain these processing activities.

15.3 Resume writers and authorized personnel

Authorized employees, contractors, and professional resume writers may access information where reasonably necessary to:

  • provide the requested service;
  • prepare or review a resume;
  • assist a customer;
  • review a company or job;
  • investigate abuse;
  • maintain security;
  • comply with law.

Access is limited according to role, purpose, and operational need.

15.4 Legal and safety disclosures

We may disclose personal information where reasonably necessary to:

  • comply with a court order, warrant, subpoena, or lawful request;
  • respond to regulators or law-enforcement authorities;
  • investigate suspected fraud or unlawful activity;
  • protect a person’s safety;
  • prevent or investigate security incidents;
  • enforce our Terms of Use;
  • establish, exercise, or defend legal claims.

15.5 Corporate transactions

Personal information may be reviewed or transferred as part of a proposed or completed:

  • financing;
  • merger;
  • acquisition;
  • restructuring;
  • sale of assets;
  • insolvency proceeding;
  • other corporate transaction.

We will use contractual or other safeguards appropriate to the circumstances and provide notice or seek consent where required by law.

16. Processing outside your province or Canada

Bulbul’s main data environment includes processing in Canada. Certain processing, service delivery, analytics, communications, authentication, payment, employer access, or AI-assisted functions may occur in the United States or other jurisdictions.

Employers accessing candidate information may also be located outside Canada while recruiting for Canadian opportunities.

When personal information is processed outside your province or outside Canada:

  • it may be subject to the laws of the jurisdiction where it is processed;
  • courts, governments, law-enforcement authorities, or national-security authorities may have lawful access under those laws;
  • privacy rights and regulatory procedures may differ from those in Canada.

Bulbul remains accountable under applicable Canadian privacy law for information transferred to service providers acting on its behalf. Federal privacy guidance recognizes that organizations remain accountable for personal information transferred to third parties for processing, including cross-border processing.

Where Quebec law applies, Sivaiah Technologies Inc. will complete the legally required privacy assessment before communicating or entrusting personal information outside Quebec.

17. Retention

We retain personal information only for as long as reasonably necessary to:

  • provide the services for which it was collected;
  • maintain an active account;
  • complete a recruitment or application process;
  • deliver a purchased service;
  • respond to privacy or support requests;
  • maintain security and prevent fraud;
  • resolve disputes;
  • enforce agreements;
  • comply with tax, accounting, employment, corporate, regulatory, and other legal requirements.

The appropriate retention period depends on:

  • the nature and sensitivity of the information;
  • the purpose for which it was collected;
  • whether the account or service remains active;
  • whether the information was used to make a decision;
  • legal limitation periods;
  • tax or accounting obligations;
  • fraud, safety, and security requirements;
  • whether litigation, an investigation, or a legal hold exists.

Examples include:

  • profile and resume information may remain while the account is active;
  • an application-time snapshot may remain after a candidate changes or withdraws an application;
  • employers may independently retain candidate information;
  • transaction and tax records may remain for legally required periods;
  • security, audit, complaint, and abuse records may remain where necessary;
  • deleted information may temporarily remain in restricted backups until the relevant backup is overwritten or expires;
  • public information may remain in third-party caches or copies outside Bulbul’s control.

Personal information that is no longer required should be securely deleted, destroyed, or anonymized, subject to legal and operational exceptions. PIPEDA does not impose one universal retention period; organizations are expected to adopt minimum and maximum periods connected to their identified purposes and legal requirements.

18. Account deletion

Bulbul does not currently offer automatic self-service account deletion.

You may request deletion by emailing:

privacy@sivaiah.com

Please state:

  • that the request concerns a Bulbul account;
  • whether it is a candidate or employer account;
  • the email address associated with the account.

We may take reasonable steps to verify your identity before processing the request.

We aim to respond within 30 days, subject to:

  • identity verification;
  • the complexity of the request;
  • lawful extensions;
  • legal retention requirements;
  • fraud, security, litigation, and regulatory obligations;
  • information independently controlled by an employer or service provider.

Deleting an account may not delete:

  • information independently retained by an employer;
  • application information required for a legal or hiring record;
  • payment, tax, refund, or dispute records;
  • security, fraud, audit, and breach records;
  • information subject to a legal hold;
  • copies in active third-party caches;
  • temporary copies in restricted backups.

We will explain material exceptions when responding to a verified deletion request.

19. Your privacy choices and rights

Subject to applicable law and lawful exceptions, you may ask us to:

  • confirm whether we hold personal information about you;
  • provide access to your personal information;
  • explain how the information has been used or disclosed;
  • correct inaccurate or incomplete information;
  • withdraw optional consent;
  • disable a public profile;
  • withdraw search-engine indexing permission;
  • disable employer sourcing;
  • change analytics preferences;
  • change optional email preferences;
  • request deletion of an account;
  • challenge a privacy practice;
  • challenge materially inaccurate inferred or AI-generated information;
  • receive eligible computerized information in a structured, commonly used format where required by law.

Quebec law provides a portability right for eligible computerized personal information collected from the individual, subject to statutory limitations.

Withdrawing consent does not affect processing that already occurred lawfully and may prevent us from continuing to provide a feature that depends on the information.

We may refuse or limit a request where permitted or required by law, including where responding would:

  • disclose another person’s personal information;
  • reveal legally privileged information;
  • reveal confidential commercial information;
  • interfere with an investigation;
  • create a serious safety risk;
  • conflict with a legal retention obligation.

If we cannot fulfil a request, we will explain the reason unless prohibited by law.

20. Security safeguards

Bulbul uses administrative, technical, and organizational safeguards designed to protect personal information according to its sensitivity.

These safeguards may include:

  • role- and permission-based access controls;
  • employer access restricted by company membership;
  • secure authentication and session controls;
  • restricted server-side access to private files;
  • encryption supported by service providers during transmission and storage;
  • monitoring and logging of selected sensitive administrative activities;
  • access restrictions for employees and contractors;
  • fraud, abuse, and rate-limit controls;
  • security and incident-response procedures.

No website, email system, storage system, or method of transmission is completely secure. We cannot guarantee absolute security.

Where required by law, we will notify affected individuals and privacy regulators of qualifying security breaches. Under PIPEDA, organizations must report and notify breaches creating a real risk of significant harm and keep records of all security-safeguard breaches.

21. Accuracy

Candidates and employers are responsible for keeping their account, profile, company, job, and contact information accurate.

AI-generated or inferred information may be incorrect. Users may correct the underlying profile or resume information and may contact us regarding a material inaccurate inference that cannot be corrected through account settings.

Application-time snapshots intentionally preserve the information originally submitted and may not automatically change when the candidate updates a live profile.

22. Information about other people

Do not provide personal information about another person unless:

  • the information is necessary for a legitimate purpose;
  • you are authorized to provide it;
  • you have obtained consent where required;
  • the disclosure does not violate confidentiality, employment, privacy, or other legal obligations.

This includes information about references, coworkers, employees, employer representatives, and former employers.

23. Privacy complaints

You may submit a privacy complaint to:

Privacy Officer Sivaiah Technologies Inc. privacy@sivaiah.com

Please include enough information for us to understand and investigate the complaint, but do not provide unnecessary sensitive information.

We will review the concern, may request additional information, and will communicate the outcome where appropriate.

You may also have the right to contact the Office of the Privacy Commissioner of Canada or an applicable provincial privacy regulator after raising the matter with us. PIPEDA provides individuals with a complaint process concerning an organization’s handling of personal information.

24. Changes to this Privacy Policy

We may update this Privacy Policy to reflect:

  • changes to Bulbul’s services;
  • new privacy requirements;
  • changes to our information practices;
  • new service providers or features;
  • security or operational developments.

We will update the “Last updated” date when changes are made.

For material changes, we may provide additional notice through the website, account, email, or another appropriate method. We will request new consent where required before using personal information for a materially different purpose.

Continued use of Bulbul will not by itself replace fresh consent where applicable law requires a new choice.