Privacy Policy

1. Who we are and what this Policy covers

Xenspire Group Inc. d/b/a OneSource Professional Search ("OneSource") provides recruiting and candidate-management services, the HiringOS platform, business customer accounts and individual candidate accounts. This Privacy Policy describes personal information collected from website visitors, customer users, candidates, business contacts and other individuals. Our mailing address is 11 Apex Dr #300, Marlborough, MA 01752, United States. Candidate-specific practices also appear in the Candidate Privacy Notice.

This Policy is intended for individuals across the United States; additional rights apply where required by law. Whether a particular statute applies depends on the law’s definitions, thresholds, exemptions and individual circumstances.

Coverage by website and application

Public website (onesourcepros.com): We may process visitor inquiries, business contact details, service interest, support requests, and essential technical and security information. The Sign In and Submit a Job Request links transfer visitors to HiringOS; a website inquiry by itself does not create a customer account.

HiringOS (hos.onesourcepros.com): We process authorized employer account and organizational information, job requests, approved Hiring Kits and Search Orders, recruitment communications, business billing records and documented candidate submissions. Customers see only information made available to their authorized users in connection with their legitimate hiring activities.

Talent Connect (talentconnect.onesourcepros.com): We process individual profile details, resumes and professional histories that individuals choose to provide, job and location preferences, applications, consent choices, communications, curated-opportunity activity, and referral and mentorship participation if enabled. Referrals can involve information about referred individuals; the source and use of that information are subject to applicable notice and consent requirements.

Talent Vault (within HiringOS and via client-specific direct links): We may use recruiting and professional records to prepare generalized, nonidentifying professional previews for employer discovery. Previews are not intended to disclose names, email addresses, phone numbers, full resumes or identifiable candidate records. Detailed candidate information is separately submitted only following the candidate’s authorization for the specific employer. We apply controls intended to reduce linkage and re-identification risk. A direct-link viewer may be able to view a curated preview without registering; if a viewer submits an interest request, we process the contact information and request details they provide to notify the relevant OneSource Partner and follow up. We do not require an account simply to view a preview.

2. Categories and sources of information

We may collect: (a) identity and contact information, including name, work email, phone, employer and job title; (b) account identifiers, access and authentication records; (c) company and job-order information, hiring requirements, approved Hiring Kits, orders, approvals and recruiting correspondence; (d) payment and billing metadata, such as invoice status, payment identifiers and business billing information, with card processing handled by Stripe; (e) candidate and recruitment information described in the Candidate Privacy Notice; and (f) technical and security information such as device/browser attributes, IP addresses and access logs needed to operate and protect the service.

Information comes directly from users and customers; job board applications; LinkedIn; professional networking and recruitment data providers; OneSource’s applicant tracking or recruiting systems; recruiting interactions; and operational vendors. Candidate-submitted resumes provided to employers are obtained directly from candidates as described in the Candidate Privacy Notice.

3. Purposes for use

We use information to establish and administer accounts; provide recruiting and search services; create Hiring Kits and Search Orders; review and communicate about candidates; manage service quality; process payments and invoices; prevent misuse and protect systems; maintain business records; respond to requests; comply with law; and improve services using appropriately controlled operational insights. We do not currently activate optional website analytics or advertising/retargeting trackers as part of the initial launch.

Talent Connect programs and data choices

Participation in referrals and mentorship is optional. If available, we may process referral source, referral status, professional relationship, mentorship goals, availability, communication records and related preferences to administer those features. A separate program notice will explain any incentive, reward, third-party disclosure or new data category before that activity is launched.

We do not treat profile creation or acceptance of general account terms as blanket authorization to send an identifiable candidate profile to every customer. We record a candidate’s authorization before each employer-specific identifiable submission. A candidate may choose not to participate in a program or a proposed submission without automatically losing access to other available account features.

We currently use essential operational cookies only across the launch sites and applications; optional analytics and advertising/retargeting trackers are disabled. If this changes, the relevant disclosures and, where required, consent or opt-out mechanisms will be updated before activation.

4. Essential cookies and tracking

At the November 4, 2026 launch, the website uses only cookies and similar technologies necessary for account authentication, session continuity, security, checkout and essential platform operations. Optional website analytics, advertising pixels and retargeting trackers are disabled. If we introduce optional analytics or advertising technologies later, we will revise this notice and provide any legally required controls before activation.

5. Providers, employer customers and other disclosures

Personal information may be disclosed as needed to: employer customers and their authorized hiring teams in connection with recruiting (candidate submissions are authorized as described in the Candidate Privacy Notice); website hosting and delivery providers, including Vercel; website content management providers, including Sanity; platform cloud infrastructure providers, including Google Cloud Platform; payment processor Stripe; applicant tracking, communication, recruiting information and workflow service providers; AI technology vendors operating under the approved internal workflow; advisors; and public authorities where required by law. Website infrastructure and content management providers may process technical request information such as IP addresses and device/browser information in connection with delivering and securing the site. Vendors receive information as needed for the relevant service, subject to appropriate contractual and operational controls.

We do not sell candidate resumes as a standalone product. We do not use advertising or retargeting pixels at launch. Information shared with employer customers for recruiting purposes is subject to candidate authorization before submission of a candidate-provided resume. Some privacy statutes define “sale” and “sharing” broadly; individuals can contact us to exercise any applicable statutory opt-out rights.

Talent previews and identification risks

Recruiters may normalize and summarize job-related professional attributes to produce Talent Vault previews. These summaries are intended to be nonidentifying, but even without a name, rare combinations of attributes can sometimes make a person recognizable. We therefore restrict visible fields, access, search granularity, export and use, and we evaluate whether information could reasonably be linked to an individual.

Talent Vault previews may be based on professional information from candidates, job boards, public professional sources and permitted data providers. Previews are separate from the candidate-provided resume and screened profile that we submit to an employer after specific authorization.

6. AI-assisted recruiting

We use ChatGPT Enterprise and other AI agents within our network to support internal summarization, candidate-to-role comparisons and recruiting recommendations. Recruiters review outputs and humans manage candidate progression; employer customers make final employment decisions. AI outputs may be incomplete or inaccurate and should be verified. We do not describe this as fully automated candidate rejection or final employment decision-making.

7. Storage, security and retention

Our platform uses Google Cloud Platform hosting and approved business systems. We maintain documented information-security and access-control procedures and use organizational and technical safeguards appropriate to the data and services. No internet system can be guaranteed completely secure. Candidate data is retained for future recruiting opportunities until deletion is requested or records are no longer reasonably necessary, subject to periodic review and legitimate legal, dispute, security and backup retention needs. Other records are retained as reasonably needed for account administration, billing, service delivery, legal compliance and record integrity.

8. Your privacy choices and requests

Individuals may contact privacy@onesourcepros.com to request access, correction, deletion, or limits on certain processing. We will verify identity and authority as appropriate, explain any legally permitted exceptions, and respond under applicable law. Residents of some states may have additional rights to obtain copies, appeal decisions, or opt out of specified processing. We will not discriminate against individuals for exercising legally protected privacy rights. Customers may have separate obligations for personal information they control, and some requests may need to be directed to the relevant employer.

9. State-specific rights

Depending on the law applicable to OneSource and the individual, residents may have rights to access, correct or delete data, receive copies, opt out of certain processing or profiling, limit certain sensitive-data uses and appeal a denied privacy request. California residents may have additional rights under the CCPA if it applies to the relevant processing; OneSource provides the required statutory rights without discrimination for exercising them. No optional targeted-advertising trackers are active at launch. Requests and appeals can be sent to privacy@onesourcepros.com. We will verify identity as appropriate and respond within the applicable legal timeframe, explaining any lawful exception.

10. Legal bases, children and international handling

Our service is directed toward businesses and professional recruiting, not children. We do not knowingly offer the public-facing service to children under 13. We may process information for individuals seeking jobs only as allowed by applicable law. Personal information may be processed by vendors or authorized personnel in locations outside the individual’s state and potentially outside the United States, subject to required protections.

10A. Notice at collection and recruiting categories

At or before collection through a OneSource form, we disclose the categories involved in that activity: identifiers and contact details; account and network activity; professional, education and employment information; recruiting correspondence and assessments; payment and transaction details for business customers; and AI-assisted inferences or recommendations where generated. We collect them for account administration, recruiting, employer introductions with authorization, security, invoicing and legal compliance. We do not request sensitive government-identification or medical information in ordinary recruiting workflows. Candidates may consult the Candidate Privacy Notice before submitting application materials.

11. Changes and contact

This Policy is effective November 4, 2026. We will publish updates with a revised date and provide direct notices when required. Privacy contact: privacy@onesourcepros.com; postal address: 11 Apex Dr #300, Marlborough, MA 01752, United States.