Coferral Privacy Policy

Last updated: September 4, 2026

1. Introduction and Scope

Coferral, Inc. ("Coferral," "Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use Coferral.com, the Coferral talent marketplace and related features, the Coferral Helper browser extension, and other services that link to this Privacy Policy (collectively, the "Services").

This Privacy Policy applies to information we collect through the Services; when you create or use a Coferral account; when you communicate with us by email, text message, customer-support channel, or similar means; when you use the Coferral Helper browser extension; and when information is provided to us by other Coferral users or service providers in connection with the Services.

This Privacy Policy is a notice of our data practices. It does not replace or modify the Coferral Terms of Service. If you use the Coferral Helper browser extension, the extension-specific provisions in Section 8 supplement the rest of this Privacy Policy. If an extension-specific provision conflicts with a more general provision of this Privacy Policy with respect to information collected through the Extension, the extension-specific provision controls.

The Services are currently intended for users in the United States. This Privacy Policy is written for our U.S.-based Services and should not be read as a representation that Coferral is offering the Services in jurisdictions where additional privacy laws or localization requirements may apply.

2. Information We Collect

Depending on how you use Coferral, we may collect the following categories of information.

A. Account and Contact Information

Name, email address, telephone number, postal address, username or account identifier, and other contact information you provide.

Authentication and account-security information used to create, secure, or maintain your Coferral account.

Information about the type of Coferral account you create, such as an Individual User, Recruiter, or Hiring Company account.

B. Profile and Professional Information

Employment history, job history, skills, career interests, job preferences, compensation or wage preferences, preferred employers, and other professional information you choose to add to your profile.

Profile photos, videos, documents, written content, and other materials you submit to the Services.

Information about your professional network or professional connections that you upload, import, or otherwise add to Coferral, including information collected through the Coferral Helper browser extension as described in Section 8.

C. Recommendations, Referrals, and Recruiting Activity

Recommendations and non-recommendations you make regarding eligible professional connections, including skills associated with recommendations.

Referrals you initiate, receive, approve, deny, or track through Coferral.

Information relating to jobs, candidates, hiring-company interactions, recruiter interactions, profile unlocks, referral quality, and other activity performed through the Services.

Aggregated counts, rankings, or other data derived from recommendations, referrals, and recruiting activity.

D. Payment and Transaction Information

Information relating to subscription fees, job-listing fees, profile unlocks, referral payments, recommendation payments, and other transactions made through the Services.

Payment and payout information processed by Stripe or another payment processor. Depending on the transaction, the payment processor may collect bank-account, card, tax, identity-verification, or similar financial information directly from you. Coferral may receive transaction status, account identifiers, payment amounts, and related records, but does not necessarily receive the full financial credentials collected by the payment processor.

E. Communications and Support Information

Messages and other communications you send to Coferral, including support requests, feedback, complaints, and correspondence.

Information you provide when asking us to troubleshoot an account, investigate an issue, or take an administrative action at your request.

F. Device, Usage, and Technical Information

Internet Protocol (IP) address, browser type, device type, operating system, referring pages, dates and times of access, and similar technical information.

Authentication, security, session, and fraud-prevention information.

Information collected through cookies and similar technologies that are used for account authentication, security, preferences, functionality, and service analytics.

Diagnostic information about errors, performance, and use of the Services.

G. Information About Professional Connections and Other Non-Users

Coferral may receive limited information about people who do not have Coferral accounts when a User uploads, imports, recommends, or refers a professional connection. Depending on the feature used, this information may include a person's name, profile URL, profile image, professional relationship to the User, recommendation information, or referral-related information. Section 8 describes the narrower set of information collected by the Coferral Helper browser extension.

3. How We Collect Information

We collect information from the following sources:

Directly from you, including when you register, create or update a profile, submit content, make a recommendation or referral, communicate with us, or use paid features.

Automatically from your browser or device when you use the Website or Services, including through cookies, session technologies, logs, and security or diagnostic tools.

From other Coferral users, such as when another User recommends you, refers you, interacts with your profile, or provides information about you in connection with a Coferral feature.

From payment processors and other service providers that help us operate the Services.

From third-party platforms when you initiate a feature that is designed to interact with that platform, including the Coferral Helper browser extension as described in Section 8.

4. How We Use Information

We may use information we collect for the following purposes:

Provide, operate, maintain, and improve the Services.

Create, authenticate, secure, and administer accounts and profiles.

Populate and maintain a User's professional network within Coferral.

Enable recommendations, referrals, profile unlocks, candidate discovery, recruiting interactions, and other user-facing marketplace functionality.

Process subscription fees, job-listing fees, unlock fees, referral payments, recommendation payments, and other transactions.

Communicate with you about your account, the Services, support requests, security, billing, product changes, and other service-related matters.

Provide customer support, troubleshoot issues, correct errors, and respond to requests.

Detect, prevent, investigate, and respond to fraud, abuse, unauthorized activity, security incidents, or violations of our Terms of Service.

Maintain service reliability, diagnose technical problems, measure performance, and develop or improve product functionality.

Comply with applicable law, legal process, tax and accounting obligations, and valid governmental requests.

Protect the rights, property, safety, security, and integrity of Coferral, our Users, and others.

Carry out another purpose that we describe when the information is collected or that you direct or consent to.

We do not use information collected through the Coferral Helper browser extension for purposes unrelated to the Extension's disclosed functionality. Additional limitations applicable to Extension Data are described in Section 8.

5. How We Disclose Information

We may disclose personal information as described below. We do not disclose information collected through the Coferral Helper browser extension except as permitted under Section 8.

A. Other Coferral Users and Marketplace Participants

Recruiters. When a Recruiter uses Coferral's profile-unlock functionality, Coferral may disclose the Individual User's full profile and contact information in accordance with the Services, the User's account settings, and the Terms of Service.

Hiring Companies. When a User or Recruiter submits or completes a referral, Coferral may disclose information necessary to present, process, or track that referral and the associated candidate or referrer.

Individual Users. Coferral may display or disclose information needed to allow Users to receive, review, approve, deny, or track referrals and to use other collaborative features of the Services.

Recommendation information. Coferral may display aggregated recommendation counts and skills associated with an Individual User while keeping the identity of the person who made a particular Recommendation or Non-Recommendation confidential from other Users, except where otherwise expressly disclosed.

B. Service Providers

Coferral uses service providers that process information on our behalf to operate the Services. Our primary cloud infrastructure and hosting provider is OVHcloud. Information stored or processed in Coferral’s production systems, including Extension Data transmitted to Coferral, may therefore be stored or processed on OVHcloud infrastructure solely to provide hosting, computing, storage, security, backup, support, and related infrastructure services to Coferral. OVHcloud acts as a processor or service provider for this hosted data under its contractual data-processing terms.

Payment and payout services may be provided by Stripe or another payment processor. Their handling of information they collect directly from you is also governed by their own privacy notices. We may also use other processors or service providers for functions reasonably necessary to operate, secure, support, or maintain the Services. Such providers are permitted to process personal information only for the services they provide to Coferral or as otherwise permitted by applicable law and their agreements with us.

C. Affiliates and Corporate Transactions

We may disclose information to Coferral affiliates for purposes consistent with this Privacy Policy.

If Coferral is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law and, for Extension Data, the additional restrictions in Section 8.

D. Legal, Security, and Enforcement Purposes

To comply with applicable law, subpoena, court order, legal process, or valid governmental request.

To investigate, prevent, or address fraud, abuse, security incidents, unauthorized activity, or suspected violations of the Terms of Service.

To protect the rights, property, safety, security, or integrity of Coferral, the Services, Users, or others.

E. At Your Direction or With Your Consent

We may disclose information when you direct us to do so, when disclosure is necessary to complete a feature you requested, or when we obtain your consent.

6. Account Administration and Human Access

Coferral uses administrative tools that may allow authorized personnel to access, view, manage, or modify information associated with a User's Account. Administrative access may occur without Coferral having access to the User's password.

Authorized personnel may use these tools where reasonably necessary to provide customer support, fulfill a User request, troubleshoot or correct technical issues, operate and secure the Services, investigate fraud or abuse, enforce the Terms of Service, protect Coferral or Users, or comply with applicable law.

We limit administrative access to personnel who have a legitimate business need for access and use access controls designed to limit access to the information and functionality appropriate to the person's role.

Extension Data is subject to stricter human-access restrictions. The general administrative-access provisions above do not authorize Coferral personnel to routinely read Extension Data. Human access to Extension Data is limited as described in Section 8.

7. Cookies and Similar Technologies

Coferral uses cookies and similar technologies to keep Users signed in, protect accounts, maintain session state, remember preferences, support requested functionality, measure service performance, diagnose issues, and help prevent fraud or abuse.

You can control cookies through your browser settings. Blocking certain cookies may prevent account authentication or other parts of the Services from functioning correctly.

The Coferral Helper browser extension's use of session cookies is narrower and is described separately in Section 8. Coferral does not use Extension Data for personalized, retargeted, or interest-based advertising.

8. Coferral Helper Browser Extension

This section describes how the Coferral Helper browser extension (the "Extension") collects, uses, transmits, stores, and handles information. It supplements the rest of this Privacy Policy. Where this section conflicts with another provision of this Privacy Policy concerning information collected through the Extension, this section controls.

A. What the Extension Does

The Extension is an optional browser tool that allows a Coferral User to import the User's own LinkedIn connections into the User's Coferral account so the User can populate a professional network in Coferral and use Coferral features related to recommendations and referrals. The Extension operates only after you install it, sign in to your Coferral account, and affirmatively start an import.

B. Information the Extension Reads About Your Connections

When you start an import, the Extension reads the following information displayed for your LinkedIn connections on the LinkedIn connections page:

Display name.

LinkedIn profile URL.

Profile photo displayed for the connection.

C. Information the Extension Uses About You

To confirm that you are signed in and to associate an import with the correct Coferral account, the Extension uses limited information about you:

LinkedIn. The Extension makes a request to a LinkedIn endpoint using your existing authenticated LinkedIn session to obtain limited basic account information, such as your first name, last name, and LinkedIn profile identifier. Those basic account fields are used locally in your browser to confirm the account and session context for the import and are not transmitted to Coferral as part of the import. The Extension reads LinkedIn session-cookie information locally only to confirm that you are signed in and to authorize that request to LinkedIn. It does not transmit your LinkedIn session cookies to Coferral, does not store them, and never accesses or collects your LinkedIn password.

Coferral. The Extension checks that a Coferral session is present and reads a security token from the Coferral import page. Your browser may automatically attach your Coferral session cookie to requests sent to coferral.com as part of normal account authentication. The Extension does not read or store the raw value of your Coferral session cookie.

D. Information Transmitted to Coferral

When an import finishes, the Extension uploads information to coferral.com for each imported connection. The upload may include an identifier generated for the connection, display name, LinkedIn profile URL, profile-photo image data, and the security token needed to validate the upload. Coferral does not receive your LinkedIn password or LinkedIn session cookies.

E. Information the Extension Does Not Collect

The Extension is not designed to collect, read, transmit to Coferral, or store:

Your LinkedIn password or Coferral password.

A connection's profile headline, job title, employer, or location through the import process described above.

LinkedIn messages, InMail, or other private communications.

Your general browsing history or your activity on websites other than the pages necessary to perform the import.

Content from LinkedIn pages other than the connections-list functionality required for the import, except for limited on-page information used to determine import progress or completion and the basic information about your own account described above.

Content from unrelated websites or data sources.

Information about LinkedIn members who are not displayed to you through the connections list used for the import.

F. When and Where the Extension Runs

The Extension operates in your browser on pages you are already authenticated to and viewing. Data collection begins only when you explicitly start an import. The Extension does not access LinkedIn on your behalf while your browser is closed and is not designed to continue collecting data after an import has ended.

The Extension's page-reading scripts are designed to run only on the LinkedIn connections page in the tab used for the import. A background component may contact LinkedIn's image-delivery domain to retrieve profile images and coferral.com to complete the import, but it is not designed to read unrelated page content.

G. How Coferral Uses Extension Data

Coferral uses information received through the Extension only as necessary to:

Populate and maintain the professional network associated with your Coferral account.

Provide user-facing Coferral functionality related to your imported network, including recommendations and initiating or tracking referrals.

Maintain, secure, troubleshoot, and improve the reliability or performance of those user-facing Extension features.

Prevent fraud, abuse, or security incidents, or comply with applicable law.

Coferral does not use Extension Data for personalized, retargeted, or interest-based advertising, credit assessment, lending, data-broker activities, or unrelated marketing purposes.

H. Chrome Web Store Limited Use

Coferral Helper's use of information received through the Extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Consistent with those requirements:

Extension Data is used only to provide or improve the Extension's disclosed single purpose and related operational purposes.

Extension Data is not sold to third parties.

Extension Data is not transferred to advertising platforms, data brokers, information resellers, or lenders, and is not used to determine creditworthiness.

Extension Data is not used or transferred for personalized advertising.

Coferral does not allow humans to read Extension Data except where you provide explicit consent for access to specific data, where access is necessary for security purposes, where access is required by applicable law, or where the data has been aggregated and anonymized and is used for permitted internal operations.

Extension Data may be processed by service providers, including OVHcloud, only where that processing is necessary to provide, maintain, secure, or improve the Extension’s disclosed single purpose and is subject to contractual restrictions. If you affirmatively initiate a Referral using an imported professional connection, limited Extension Data may also be used or disclosed only to the extent reasonably necessary to complete and track that user-facing Referral functionality.

I. Permissions Requested by the Extension

The Extension may request the following browser permissions because they are necessary to perform the import functionality described above:

Host access to linkedin.com - to open and read the LinkedIn connections page used for the import and to support the limited authenticated LinkedIn request described above.

Host access to LinkedIn image-delivery domains, including licdn.com - to retrieve profile images displayed for imported connections.

Host access to coferral.com - to read the Coferral security token needed for the import and upload the imported data to the User's Coferral account.

Storage - to retain import progress, extracted connection data, a limited debug or diagnostic flag, and other local state needed to complete or resume an import.

Scripting - to run the import and progress functionality on the LinkedIn connections tab after you start an import.

Alarms - to maintain the import process while it is actively running.

Cookies - to check authentication or session state as described above.

J. Storage, Transmission, and Retention of Extension Data

Extension Data transmitted to Coferral is sent over HTTPS using modern encryption in transit. Extension Data stored in Coferral's production systems is encrypted at rest using strong encryption. Local Extension storage is used for import and progress state and is designed to be cleared when the Extension is uninstalled.

Coferral generally retains imported professional-connection data while your Coferral account or imported network remains active. If you delete an individual imported connection, delete your imported network, or close your Coferral account, Coferral will delete or de-identify the associated Extension Data from active systems within 30 days, subject to limited retention where reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or backup and disaster-recovery processes.

K. Your Extension Controls

You can:

Delete individual imported connections or your imported network through available Coferral account controls.

Stop an in-progress import, which stops further collection for that import.

Uninstall the Extension through your browser.

Request deletion of Extension Data associated with you by contacting support@coferral.com.

9. Profile Unlocks and Unlock Payments

Coferral’s core marketplace includes a compensated Profile Unlock feature. A Recruiter may pay Coferral to Unlock an Individual User’s profile and receive the additional profile and contact information designated for Unlock. When an eligible Individual Profile is Unlocked, the Individual User may also receive an Unlock Payment under the applicable Coferral payment and eligibility rules.

By creating and maintaining an active Individual Profile, an Individual User affirmatively requests and authorizes participation in this marketplace feature as described in the Terms of Service. Except where applicable law requires a separate choice, Coferral does not currently offer a separate profile-level opt-out from Recruiter Unlocks because Unlock eligibility is a core part of the Individual User service. A User who does not wish to participate may close the User’s Coferral Account and cease using the Individual User Services.

Coferral treats a Profile Unlock as part of the user-requested Coferral marketplace service. Profile Unlocks are separate from the Coferral Helper Extension, and Coferral does not sell Extension Data. Some U.S. privacy laws define terms such as “sale,” “sharing,” or “financial incentive” differently. If a law that applies to Coferral and a particular User requires a separate notice, authorization, opt-out, withdrawal mechanism, or other choice for the Profile Unlock or Unlock Payment feature, Coferral will provide the legally required mechanism to that covered User. Acceptance of the Terms of Service does not waive a privacy right that cannot lawfully be waived.

Because an eligible Individual User may receive compensation when a profile is Unlocked, the Unlock Payment may be treated as a financial incentive or similar program under certain privacy laws if those laws apply to Coferral. Where legally required, Coferral will provide any additional notice or consent process required for participation in that program.

10. Aggregated, De-Identified, and Recommendation Data

Coferral may aggregate or de-identify information so that it does not reasonably identify an individual. We may use and disclose aggregated or de-identified information for lawful business purposes, including service analytics, product improvement, reporting, fraud prevention, and internal operations, subject to applicable law.

Recommendation and Non-Recommendation data may be used to generate aggregate recommendation counts and skills associated with an Individual User while keeping the identity of the recommending User confidential from other Users. If an Individual User deactivates or closes an account, Coferral may retain recommendation information in aggregated or de-identified form where permitted by law and consistent with the Terms of Service.

Extension Data remains subject to the Chrome Web Store Limited Use restrictions even when it has been aggregated, anonymized, de-identified, or derived from raw Extension Data.

11. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, complete transactions, support users, enforce our agreements, protect the Services, comply with legal, tax, accounting, and recordkeeping obligations, and resolve disputes.

Retention periods vary depending on the type of information and the reason we process it. For example, transaction records may be retained for legal and accounting purposes after an account closes, and security logs may be retained for a limited period to investigate abuse or security incidents.

The specific retention commitment for imported Extension Data is described in Section 8.J.

12. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information from accidental loss and from unauthorized access, use, alteration, or disclosure. These measures include access controls, authentication safeguards, encryption of Extension Data in transit and at rest, logging, security monitoring, and other measures appropriate to the nature of the information and the Services.

You are responsible for protecting your Coferral credentials and for notifying us if you believe your account has been accessed without authorization.

No method of transmission over the internet or method of electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.

13. Your Privacy Rights and Choices

You may have privacy rights depending on where you live and whether the applicable law covers Coferral or the particular information at issue. We also provide certain account controls to Users regardless of whether a specific privacy law applies.

A. Account Controls

Access and update profile information through your Coferral account.

Change available account or profile settings.

Delete imported professional connections or your imported network where the relevant controls are available.

Close your Coferral account.

Unsubscribe from non-essential marketing emails using the unsubscribe instructions in the message.

B. U.S. State Privacy Rights

Depending on applicable state law, you may have the right to:

Confirm whether Coferral processes personal information about you and access that information.

Correct inaccuracies in your personal information.

Delete personal information provided by or obtained about you, subject to legal exceptions.

Obtain a portable copy of certain personal information.

Obtain information about the categories of third parties to which personal information has been disclosed.

Opt out of certain sales of personal information, targeted advertising, or certain profiling that produces legal or similarly significant effects, where applicable.

Limit certain uses or disclosures of sensitive personal information where applicable.

Appeal a decision we make regarding a privacy-rights request where applicable.

Exercise your privacy rights without unlawful discrimination.

To submit a privacy request, contact us at support@coferral.com and identify the request as a privacy request. We may need to verify your identity before completing certain requests. Where permitted by law, an authorized agent may submit a request on your behalf, subject to appropriate verification.

If we deny a request and applicable law gives you an appeal right, you may appeal by replying to our decision or emailing support@coferral.com with the subject line 'Privacy Appeal.' If Delaware law applies and an appeal is denied, Delaware residents may submit a complaint to the Delaware Department of Justice at privacy@delaware.gov.

Where applicable law requires us to honor a legally recognized universal opt-out signal, such as Global Privacy Control, we will process that signal for the browser-based activity to which the signal applies.

C. Requests From People Who Do Not Have Coferral Accounts

If you do not have a Coferral account but believe information about you has been imported, recommended, referred, or otherwise provided to Coferral by another User, you may contact support@coferral.com. We may ask for information necessary to locate the relevant record and verify your identity. Depending on applicable law and the context, we may provide access, correction, deletion, or other appropriate relief.

D. Effect of Deletion or Opt-Out Requests

Some information is necessary to provide particular Coferral features. If you request deletion of information that is necessary to provide a requested feature, that feature may become unavailable. We may also retain information where permitted or required by law, including for security, fraud prevention, legal claims, financial records, or compliance obligations. Nothing in this Section limits a non-waivable opt-out or other privacy right provided by applicable law, and Coferral will not require account closure as a substitute for a legally required opt-out mechanism where the law prohibits doing so.

14. Children and Teen Users

The Services are not intended for children under 16, and Coferral does not knowingly permit children under 16 to create accounts. Users who are under 18 or under the age of majority in their jurisdiction must use the Services only as permitted by the Terms of Service, including any applicable parental or guardian supervision requirements.

Where applicable law requires affirmative consent before personal information of a known minor may be sold, used for targeted advertising, included in a covered financial incentive, or otherwise processed in a covered manner, Coferral will obtain the consent required by that law before engaging in that processing. Where separate affirmative consent is legally required, acceptance of general Terms of Service or continued use of the Services will not be treated as a substitute for that consent.

If you believe a child under 16 has provided personal information to Coferral, contact support@coferral.com so that we can investigate and take appropriate action.

15. Third-Party Services and Links

The Services may link to or interact with third-party websites, platforms, payment processors, or services. This Privacy Policy does not govern the independent privacy practices of those third parties. You should review their privacy notices before providing information to them.

The Coferral Helper Extension may technically interact with a Third-Party Platform when you initiate an import. That interaction does not mean Coferral is affiliated with, endorsed by, or sponsored by the operator of the Third-Party Platform unless we expressly state otherwise.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, data practices, legal requirements, or operational needs. When we make material changes, we will provide notice as required by applicable law, which may include posting a prominent notice through the Services or sending an electronic communication.

The date at the top of this Privacy Policy shows when it was last updated. If a change materially affects the data practices of the Coferral Helper Extension, we will provide the disclosures and obtain the consent required by applicable browser-extension platform rules before applying the new practice.

17. Contact Us

If you have questions, concerns, privacy requests, or complaints regarding this Privacy Policy or Coferral's data practices, contact us at:

Coferral, Inc.

108 Lakeland Avenue

Dover, DE 19901

Email: support@coferral.com