Privacy Policy

1. Information We Collect

When you submit a veteran intake application, we collect your name, email address, military branch, and self-reported skill information. This information is used solely to create your candidate profile and facilitate placement matching.

When corporate partners access the compliance portal, we collect account credentials (email and password, stored as a secure hash), organization name, and workforce data submitted for compliance verification.

We collect standard server logs including IP addresses, browser type, and page access timestamps for security monitoring and rate limiting purposes. These logs are retained for 30 days and are not used for marketing.

2. How We Use Your Information

Veteran candidate data is used exclusively to match candidates with corporate partners in relevant NAICS industry sectors. We do not sell, rent, or share candidate profiles with any third party outside of the direct placement process.

Corporate compliance data is used to calculate veteran utilization rates, generate compliance documentation, and maintain audit records as required by VEVRAA and Section 4212 obligations.

Email addresses are used for account authentication and, with your consent, for status updates regarding your application or compliance verification. We do not send unsolicited marketing communications.

3. Data Security

All data is transmitted over TLS-encrypted connections. Passwords are stored using industry-standard cryptographic hashing and are never stored in plaintext.

Access to candidate and compliance data is restricted to authenticated users with a legitimate business need. Session tokens are cryptographically signed and expire automatically.

We implement rate limiting, brute-force protection, and request correlation logging to detect and respond to unauthorized access attempts.

4. Data Retention

Candidate profiles are retained for the duration of the active placement process and for three years following placement or withdrawal, as required for compliance audit purposes.

Compliance verification records are retained for seven years in accordance with federal contractor recordkeeping requirements under 41 CFR Part 60.

You may request deletion of your personal data at any time by contacting us at [email protected]. Requests will be processed within 30 days, subject to legal retention obligations.

5. Your Rights

You have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us at [email protected].

You may withdraw consent for communications at any time by contacting us directly. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

If you believe your data has been processed in violation of applicable law, you have the right to lodge a complaint with the relevant supervisory authority.

6. Cookies and Tracking

We use session cookies strictly necessary for authentication. These cookies are not used for advertising or cross-site tracking.

We do not use third-party analytics services, advertising networks, or social media tracking pixels on this site.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users at least 14 days before taking effect.

The effective date of the current version is displayed at the top of this page. Continued use of our services after the effective date constitutes acceptance of the updated policy.

8. Contact

For privacy-related inquiries, data access requests, or to report a concern, contact our Privacy Officer at [email protected] or by mail at The Veterans Commission LLC, Washington, D.C. Metro Area.