Data Processing Agreement (DPA)

1. Purpose

This Data Processing Agreement ("DPA") forms part of the contractual relationship between ConnectingPilot LLC ("ConnectingPilot," "Processor," "we," "our," or "us") and any individual or organization using ConnectingPilot services ("Client," "Controller," or "you").

This Agreement explains how ConnectingPilot processes personal information while delivering career services, resume optimization, application support, dashboard services, career coaching, and related offerings.

This DPA supplements the Privacy Policy, Terms & Conditions, User Agreement, and Career Services Agreement.

2. Definitions

For purposes of this Agreement:

• Personal Data means any information relating to an identified or identifiable individual.
• Processing means any operation performed on personal data, including collection, storage, organization, modification, retrieval, transmission, disclosure, or deletion.
• Data Subject means the individual whose personal data is processed.
• Controller means the individual or organization determining the purpose of data processing.
• Processor means ConnectingPilot LLC acting on behalf of the Client.

3. Categories of Personal Data Processed

ConnectingPilot may process personal information including:

Identity Information

• Full Name
• Email Address
• Phone Number
• Address
• LinkedIn Profile URL

Professional Information

• Resume/CV
• Employment History
• Educational History
• Certifications
• Licenses
• Publications
• Research Experience
• Professional Skills

Career Information

• Preferred Locations
• Salary Expectations
• Job Preferences
• Career Goals
• Interview Records
• Application Records

Work Authorization Information

• OPT Status
• STEM OPT Status
• H-1B Sponsorship Requirements
• Work Authorization Status
• Visa Sponsorship Preferences

Technical Information

• IP Address
• Browser Information
• Device Information
• Login Records
• Dashboard Activity Logs

4. Purpose of Processing

ConnectingPilot processes personal data solely for legitimate business purposes associated with career support services.

Processing activities may include:

• Resume optimization and ATS analysis.
• Resume tailoring and LinkedIn optimization.
• Job research and application submissions.
• Career coaching and dashboard management.
• Client support and service delivery.
• Security monitoring and legal compliance.

Personal data will not be processed for purposes unrelated to service delivery without appropriate consent.

5. Processing Instructions

ConnectingPilot will process personal information only:

• As authorized by the Client
• As required to provide services
• As required by law
• As necessary to protect platform security

ConnectingPilot will not knowingly use personal information for unrelated commercial purposes.

6. Client Authorization

By using ConnectingPilot services, the Client authorizes ConnectingPilot to process information necessary to:

• Review resumes and modify resumes to create tailored versions.
• Submit job applications and maintain application records.
• Track application activity and manage dashboard services.
• Provide career coaching.

This authorization remains active until termination of services or withdrawal of authorization.

7. Data Security Measures

ConnectingPilot implements commercially reasonable security measures designed to protect personal information.

Security controls may include:

• Encrypted communications
• Secure cloud infrastructure
• Password protection
• Role-based access controls
• Authentication systems
• Access monitoring
• Security logging
• Data backup procedures

While reasonable efforts are taken, no system can guarantee absolute security.

8. Access to Personal Data

Access to personal information is limited to personnel who require access to perform their responsibilities.

Authorized personnel may include:

• Career Pilots and Career Coordinators.
• Customer Support, Administrative, and Technical Support Personnel.

All personnel are expected to maintain confidentiality obligations.

9. Subprocessors

ConnectingPilot may engage third-party service providers ("Subprocessors") to assist with service delivery.

Examples may include:

• Cloud hosting providers
• Payment processors
• Email service providers
• Authentication providers
• Analytics providers
• Customer support platforms

ConnectingPilot will use commercially reasonable efforts to select reputable providers with appropriate security measures.

10. International Data Transfers

ConnectingPilot primarily operates within the United States.

Users located outside the United States acknowledge that their information may be transferred to and processed within the United States. By using ConnectingPilot services, international users consent to such transfers.

11. Data Retention

ConnectingPilot retains personal information only for as long as necessary to:

• Deliver services and maintain records.
• Resolve disputes and protect legal rights.
• Comply with legal obligations.

Client information may generally be retained for up to 1 year following account closure unless earlier deletion is legally permitted.

12. Data Subject Rights

Where applicable, users may request:

• Access: A copy of personal information maintained by ConnectingPilot.
• Correction: Correction of inaccurate information.
• Deletion: Deletion of personal information where legally permissible.
• Restriction: Restriction of certain processing activities.
• Portability: A copy of personal information in a portable format where applicable.
• Withdrawal of Consent: Withdrawal of consent for processing activities that rely upon consent.

Requests may be submitted to [email protected].

13. Data Breach Notification

In the event of a confirmed security incident involving personal information, ConnectingPilot will take commercially reasonable steps to:

• Investigate the incident and mitigate potential harm.
• Restore affected systems.
• Notify affected parties when legally required.

Notification timelines may vary based upon applicable laws and the nature of the incident.

14. Confidentiality

ConnectingPilot agrees to maintain confidentiality regarding Client information and personal data.

Information shall only be disclosed:

• With Client authorization
• For service delivery
• To authorized subprocessors
• When legally required
• To protect legal rights and security

15. Data Deletion Upon Termination

Upon termination of services, ConnectingPilot may:

• Retain information required by law
• Retain records necessary for dispute resolution
• Retain billing and accounting records
• Delete information no longer required

Deletion requests may be subject to legal and operational retention requirements.

16. Limitation of Liability

To the maximum extent permitted by law, ConnectingPilot's liability arising from data processing activities shall not exceed the total amount paid by the client during the preceding thirty (30) days.

ConnectingPilot shall not be liable for:

• Indirect damages
• Consequential damages
• Lost profits
• Lost employment opportunities
• Third-party actions beyond its control

17. Changes to this Agreement

ConnectingPilot reserves the right to modify this DPA at any time.

Updated versions will be published on the Company's website. Continued use of services following publication constitutes acceptance of the revised Agreement.

18. Governing Law

This Agreement shall be governed by the laws of the State of Wyoming, United States.

Any disputes arising from this Agreement shall be subject to the exclusive jurisdiction of the courts of Wyoming.

19. Contact Information

ConnectingPilot LLC

Website: ConnectingPilot.com

Email: [email protected]

20. Acknowledgement

By using ConnectingPilot services, creating an account, submitting personal information, or purchasing a subscription, the Client acknowledges that they have read, understood, and agreed to this Data Processing Agreement.