Purpose

This page describes how ConveYour handles sensitive personal information and employment-related data. These data types can create heightened privacy, discrimination, security, and trust risks. ConveYour applies added care when an AI-enabled feature may receive, process, or produce information related to an individual in an employment context.

Scope

Sensitive and employment-related data may include:

• Candidate, employee, contractor, or former employee information
• Resumes, work history, education, skills, interview notes, and application materials
• Compensation, performance, disciplinary, benefit, leave, or accommodation information
• Government-issued identifiers, financial information, or authentication information
• Health, disability, biometric, demographic, immigration, family, or other sensitive personal information
• Information that may reveal or act as a proxy for a protected characteristic

The exact definition of sensitive personal information varies by jurisdiction and customer context.

Data minimization

ConveYour seeks to process only the information reasonably necessary for the requested service or AI-enabled workflow. Product and workflow design should avoid collecting or asking for sensitive information when it is not necessary.

Customers should not submit sensitive or employment-related data to an AI-enabled feature unless the feature is intended for that use and the customer has determined that the use is lawful and appropriate.

AI-specific controls

When an AI-enabled feature may process employment-related information, ConveYour considers the feature's purpose, inputs, outputs, human-review controls, and the potential impact on individuals.

ConveYour seeks to prevent AI-enabled features from making unsupported inferences about protected characteristics, health, disability, family status, personality, or employment suitability. Features should focus on task-relevant information and should not encourage users to base consequential employment actions on sensitive personal information.

Higher-risk workflows may require additional controls, such as restricted inputs, structured outputs, warnings, role-based access, required human review, audit records, or a documented risk assessment before release.

Access and confidentiality

ConveYour limits access to sensitive and employment-related data to authorized personnel with a legitimate business need. Personnel who may access such information are subject to confidentiality obligations and applicable security practices.