This Privacy Policy describes how On Two Ventures LLC ("Lynx," "we," "us," or "our") collects, uses, shares, and protects information when you use the Lynx recruiting communication platform. By using Lynx, you acknowledge that you have read and understood this Privacy Policy.
1. About Lynx & This Policy
On Two Ventures LLC operates Lynx, a software-as-a-service platform that serves as a collaboration hub between recruiting firms and their clients for the purpose of evaluating and hiring candidates. Our registered address is 418 Broadway, STE N, Albany, NY 12207.
This Privacy Policy applies to:
- Recruiting firm users ("Customers") who create accounts and manage the platform
- Client users (employers and hiring managers) who access the platform at a Customer's invitation
- Candidates whose information is uploaded to the platform by Customers
- Website visitors who visit our marketing or informational pages
Lynx operates as a data processor — we process personal data on behalf of our Customers (recruiting firms), who act as data controllers with respect to Candidate Data. Customers are responsible for ensuring they have appropriate legal bases for collecting and sharing candidate information through our platform.
2. Information We Collect
2.1 Account & User Information
When a recruiting firm registers for Lynx, we collect:
- Name and job title
- Business email address
- Company name and address
- Phone number (if provided)
- Login credentials (passwords stored in encrypted form)
- Billing information (processed via our payment processor; we do not store full payment card numbers)
2.2 Candidate Data (Provided by Customers)
Recruiting firm Customers upload candidate information to the platform. This may include:
- Full name and contact information (email, phone, address)
- Resumes, CVs, and work history
- Compensation expectations and history
- Professional skills, qualifications, and education
- Recruiter notes, evaluations, and feedback
- Interview notes and assessments
- LinkedIn profiles or other professional profile links
- Communication history between recruiters and candidates (where applicable)
Important: Lynx collects Candidate Data solely because Customers upload it to the platform. We do not independently source, collect, or verify candidate information. Customers are responsible for ensuring they have appropriate authority and consent to upload and share Candidate Data.
2.3 Usage & Technical Data
When you use the Lynx platform, we automatically collect:
- IP address and approximate geographic location (country/state level)
- Browser type and version
- Operating system
- Pages visited and features used within the platform
- Log data including access times, session duration, and error logs
- Device identifiers
We collect this information to operate, maintain, secure, and improve the platform.
2.4 Cookies & Authentication Technologies
We use the following types of cookies and similar technologies:
- Strictly Necessary Cookies: Required for the platform to function, including maintaining secure login sessions and authenticating users. These cannot be disabled.
- Functional Cookies: Remember your preferences and settings within the platform.
- Analytics Cookies: Help us understand how the platform is used so we can improve it (only with consent where required by applicable law).
We do not use cookies for advertising or tracking across third-party websites. You can control non-essential cookies through your browser settings.
3. How We Use Information
We use information collected through the platform for the following purposes:
3.1 Providing the Services
- Hosting and operating the Lynx platform
- Enabling recruiting firms to manage and present Candidate Data to their clients
- Facilitating client access to candidate information and feedback tools
- Sending transactional notifications (e.g., account updates, invitations, system alerts)
3.2 Security & Fraud Prevention
- Detecting, investigating, and preventing unauthorized access and misuse
- Verifying user identity
- Monitoring for security threats
3.3 Platform Improvement
- Analyzing usage patterns to improve features and usability
- Troubleshooting bugs and performance issues
- Developing new features
3.4 Communications
- Responding to customer support inquiries
- Sending product updates and announcements (with appropriate opt-out options)
- Providing billing and account-related notices
3.5 Legal Compliance
- Complying with applicable laws, regulations, and legal processes
- Enforcing our Terms of Service
- Responding to lawful requests from government authorities
We do not use Candidate Data for any purpose other than providing the Services to the Customer who uploaded it, unless required by law.
4. How We Share Information
We do not sell, rent, or broker personal information. We share information only in the following limited circumstances:
4.1 Between Recruiting Firms and Their Clients
The core function of Lynx is enabling recruiting firms to share Candidate Data with their clients. When a Customer grants a Client access to the platform, that Client will be able to view the Candidate Data the Customer has chosen to share. This is the fundamental purpose of the platform and is authorized by the Customer.
4.2 Service Providers & Subprocessors
We engage trusted third-party service providers to help us operate the platform, including:
- Cloud hosting and infrastructure providers
- Authentication and identity verification services
- Payment processors (for billing)
- Customer support tools
- Analytics services
These providers are contractually required to process data only on our behalf, in accordance with our instructions, and subject to appropriate data protection obligations. They are not permitted to use personal data for their own purposes.
4.3 Legal Requirements
We may disclose information if required by law, court order, governmental authority, or to protect the rights, property, or safety of On Two Ventures LLC, our customers, or the public. Where legally permitted, we will notify affected Customers before disclosure.
4.4 Business Transfers
In the event of a merger, acquisition, sale of all or substantially all assets, or other corporate reorganization, personal data may be transferred as part of that transaction. We will notify Customers of such a transfer and any resulting changes to this Privacy Policy.
4.5 With Consent
We may share information in other ways with your prior written consent.
5. Data Retention
We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, subject to the following:
- Account Data:Retained for the duration of the Customer's subscription and for a reasonable period thereafter for legal and business purposes.
- Candidate Data: Retained as long as the Customer maintains an active subscription or until the Customer requests deletion. Upon subscription termination, Candidate Data is made available for Customer export for thirty (30) days, after which it is deleted from active systems.
- Usage & Technical Data: Retained for up to twelve (12) months for security and analytics purposes.
- Backup Copies: May be retained in encrypted backup systems for up to ninety (90) days following deletion from active systems.
- Legal Holds: Data may be retained longer if required by applicable law or active legal proceedings.
Customers may request deletion of their Candidate Data at any time through the platform or by contacting us at hello@thelynx.work.
6. Data Security
We implement reasonable and appropriate technical and organizational safeguards to protect personal data from unauthorized access, use, alteration, disclosure, or destruction. Our security measures include:
- Encryption of data in transit using TLS/HTTPS
- Encryption of sensitive data at rest
- Access controls and role-based permissions
- Secure, industry-standard cloud infrastructure
- Regular security monitoring and logging
- Limited access to personal data by personnel on a need-to-know basis
However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that creates a risk to individuals, we will notify affected Customers as required by applicable law.
7. Your Rights & Choices
7.1 Account Users (Customers and Client Users)
If you are a registered user of the Lynx platform, you may:
- Access and review the information in your account
- Update or correct your account information
- Request deletion of your account by contacting hello@thelynx.work
- Opt out of non-essential marketing communications
7.2 Candidates
If you are a job candidate whose information has been uploaded to Lynx by a recruiting firm, your primary point of contact for data rights requests is the recruiting firm that uploaded your data (the data controller). However, you may also contact us at hello@thelynx.work and we will assist in facilitating your request with the appropriate Customer.
Depending on your location, you may have the right to:
- Know what personal information exists about you on the platform
- Access a copy of your personal information
- Request correction of inaccurate information
- Request deletion of your personal information
- Object to or restrict certain processing
8. California Privacy Rights (CCPA / CPRA)
This section applies to California residents and supplements the rest of this Privacy Policy.
8.1 Categories of Personal Information Collected
In the preceding twelve (12) months, we have collected the following categories of personal information:
- Identifiers (name, email address, IP address)
- Professional or employment-related information (job history, skills, qualifications — as uploaded by Customers)
- Internet or electronic network activity (platform usage logs, browser data)
- Inferences drawn from the above for platform improvement purposes
8.2 Your California Rights
California residents have the right to:
- Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, business purposes for collection, and categories of third parties with whom we share information.
- Delete: Request deletion of personal information we have collected about you, subject to certain legal exceptions.
- Correct: Request correction of inaccurate personal information.
- Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is necessary.
- Non-Discrimination: We will not discriminate against you for exercising your California privacy rights.
8.3 How to Submit a California Rights Request
To submit a request, contact us at:
Email: hello@thelynx.work
Mail: On Two Ventures LLC, 418 Broadway, STE N, Albany, NY 12207, Attn: Privacy Request
We will respond to verifiable requests within forty-five (45) days as required by law. We may extend this period by an additional forty-five (45) days with notice. We may need to verify your identity before fulfilling your request.
8.4 Authorized Agents
California residents may designate an authorized agent to submit privacy rights requests on their behalf. We may require verification of the agent's authorization.
9. Note on GDPR & International Users
Lynx is currently operated and marketed primarily within the United States. Our platform is not currently directed at residents of the European Economic Area (EEA), United Kingdom, or Switzerland.
However, if Candidate Data relating to individuals in the EEA, UK, or other jurisdictions with comprehensive privacy laws is uploaded to the platform by a Customer (such as a US-based firm with international candidates), we will process that data in accordance with our obligations as a data processor.
For Customers who upload EEA or UK personal data, On Two Ventures LLC will:
- Process Candidate Data only on Customer's documented instructions
- Implement appropriate technical and organizational security measures
- Assist Customers in responding to data subject rights requests
- Notify Customers of any personal data breach without undue delay
- Delete or return all personal data upon instruction at the end of the service
If you anticipate processing EEA or UK personal data through Lynx, please contact us at hello@thelynx.work to discuss entering into a Data Processing Agreement (DPA) and appropriate Standard Contractual Clauses (SCCs). As Lynx expands its international operations, this policy will be updated accordingly.
10. Children's Privacy
The Lynx platform is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe that a child under 18 has provided personal information through our platform, please contact us at hello@thelynx.work and we will take steps to delete that information.
11. Third-Party Links & Integrations
The Lynx platform may contain links to third-party websites or integrate with third-party services (such as LinkedIn or job boards). This Privacy Policy does not apply to those third-party sites or services. We encourage you to review the privacy policies of any third-party services you access through Lynx. We are not responsible for the privacy practices of third parties.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify registered Customers via email or in-platform notification at least fourteen (14) days before changes take effect
- Post the updated policy on our website
Your continued use of the platform after any changes constitutes your acceptance of the revised Privacy Policy. If you disagree with any changes, you should discontinue use of the platform.
13. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:
On Two Ventures LLC
418 Broadway, STE N
Albany, NY 12207
hello@thelynx.work
We aim to respond to all privacy inquiries within fourteen (14) business days.