Greenhouse's job seeker data may now feed workforce analytics for employers

The change

Greenhouse updated its Privacy Policy on October 1, 2026. The previous version, dated May 28, 2026, is still online in Greenhouse's archive. Much of the new text is about MyGreenhouse, the account job seekers create to manage their job search, and it adds new kinds of data Greenhouse collects from those users and new ways it may use them.

The most important new sentence is in the part of the MyGreenhouse section that explains how Greenhouse uses job seekers' data:

"This may include combining your Personal Information with information from other MyGreenhouse users and third-party sources, sharing verification and profile information with employers as part of the hiring process, and generating workforce analytics and insights for our business customers."

Greenhouse is best known as recruiting software that companies use to post jobs and manage candidates. This Privacy Policy does not cover that. When you apply through a company's Greenhouse job board, the policy says the company is the controller of your data and you should contact the company. The policy covers Greenhouse's own business relationships, its own hiring, and MyGreenhouse.

What changed

• More data from job seekers. MyGreenhouse now lists "Location data," "Candidacy data, such as application status and interview history," and "Other data that users may choose to disclose to Greenhouse."

• Combining, verification, and analytics. The MyGreenhouse section now says its data may be combined with data from other MyGreenhouse users and third-party sources, used to share verification and profile information with employers, and used to generate "workforce analytics and insights for our business customers."

• Employers in the sharing list. The list of who Greenhouse may share information with now includes, for MyGreenhouse users, "potential employers who may be interested in someone with your work experience and skills."

• An opt-out that does not require leaving. Users who object to their profile being shown to employers can now use a "Do Not Share My Profile with Potential Employers" link. The old policy told them they "should close their account," with a separate option only for users in Europe and the UK.

• Self-service access and deletion. MyGreenhouse users can now access, modify, or delete their data "at any time in your account settings."

• Product usage data. A new section says Greenhouse uses data about how its products are used, including by recruiters, hiring managers, and MyGreenhouse users, "to analyze, maintain, and improve our products and services."

• Two new statements. Greenhouse "does not operate as a Consumer Reporting Agency (CRA) under the Fair Credit Reporting Act (FCRA)," and its sharing with advertising companies is "for our own marketing/advertising."

New data: location and interview history

In May, the MyGreenhouse section listed three kinds of data collected directly from users: application materials such as resumes and cover letters, contact details, and job preferences and search criteria. The October version keeps those three and adds three more:

• "Location data."

• "Candidacy data, such as application status and interview history"

• "Other data that users may choose to disclose to Greenhouse"

The policy gives application status and interview history as examples of candidacy data, which suggests a record of how a job search is going. The policy lists it among the data collected directly from MyGreenhouse users and does not say more about how it is gathered.

Combining data and analytics for employers

The May version already said Greenhouse may use MyGreenhouse data to "develop and train artificial intelligence (AI) models" and to "gain insights with the help of AI, automated systems and inferences." That paragraph is unchanged. What is new is the sentence after it, which spells out three specific uses:

• "combining your Personal Information with information from other MyGreenhouse users and third-party sources"

• "sharing verification and profile information with employers as part of the hiring process"

• "generating workforce analytics and insights for our business customers"

Greenhouse's business customers are the companies that use it to hire. The new sentence means data from job seekers' own accounts may now be used to produce analytics for those companies. The policy does not describe what the analytics contain or whether individual job seekers can be identified in them. The next sentence in the policy says: "Greenhouse ensures the Personal Information collected is limited relative to the identified purposes detailed above."

Sharing with employers, and a new way to say no

Sharing MyGreenhouse profiles with employers is not new. The May version already listed, as a use of MyGreenhouse data, "Provide your information to employers seeking candidates with your skills and background," a use the policy ties to the MyGreenhouse User Agreement. The October version adds the same idea to the general list of who Greenhouse shares information with: "In the case of MyGreenhouse users, with potential employers who may be interested in someone with your work experience and skills."

The way to object changed: users no longer have to close their account. The May version said: "Users of the MyGreenhouse service who object to Greenhouse providing your Personal Information to potential employers should close their account." Users in Europe, Switzerland, and the UK could instead use a "Do not sell my personal information" link or send an email. The October version gives every user a setting: users who object "may disable this setting by clicking on the "Do Not Share My Profile with Potential Employers" link in MyGreenhouse and completing the form."

The section also adds two new lines. Users can now access, modify, or delete their data "at any time in your account settings after logging in to your account," and can still ask for access or deletion through Greenhouse's data request portal. And: "Exercising your privacy rights will never affect how we treat you or the services we provide, though you may inherently lose some service functionality depending on the choices you make."

Product usage data and the rest of the update

A new section, "How Greenhouse uses product and service usage data," says Greenhouse collects and uses information about how its products and features are used, "including by individuals at our business customers (such as recruiters and hiring managers using Greenhouse Recruiting, in the Business Relationships context) and by MyGreenhouse users." The May version had no section on product usage data; its closest text was about analyzing use of Greenhouse's website.

The scope section now presents the four contexts in which Greenhouse processes data in a table that states for each whether the policy applies. It now says Greenhouse "does not operate as a Consumer Reporting Agency (CRA) under the Fair Credit Reporting Act (FCRA)." And the line on sharing with advertising companies now adds that "this is for our own marketing/advertising; we do not share your Personal Information with third parties for their own behavior advertising purposes."

What did not change

The sentence about training AI models on MyGreenhouse data was already in the May version. So was the use of MyGreenhouse data to give employers the profiles of candidates with matching skills. The policy still does not cover data from applications sent through a company's Greenhouse job board, which is handled by that company. Sections on retention, security, international transfers, and rights for users in Europe and the UK were present in May as well.

Why this matters

A job search produces some of the most sensitive data a person shares with a platform: where they want to work, where they applied, and which interviews they had. MyGreenhouse now lists that history as data it collects, and the policy now names analytics for employers among the uses of job seekers' data.

Other vendors have expanded what they do with people's data this year. LinkedIn drew a hard line between Recruiter and Sales Navigator this summer, and Zoom now says it may sell business contact data. Combining a person's data with other sources is also a growing theme in privacy policies, as when Uber said its ad partners may combine your data with other sources. For companies that hire through Greenhouse, the update is also a change in a recruiting vendor's documents, the kind of change that vendor legal changes are made of.

Potential impact

The update raises four practical questions:

• Do you want your profile shown to potential employers interested in your skills, and if not, have you used the "Do Not Share My Profile with Potential Employers" link?

• What location and candidacy data does your account hold, and does it match what you expect?

• Is there data in your account settings you would rather delete now that it may be combined with other users' data?

• If you hire through Greenhouse, do you know what "workforce analytics and insights" its policy now allows it to produce for business customers?

How Venpo detected it

Venpo monitors Greenhouse's Privacy Policy as part of continuous vendor risk monitoring. The comparison with the May 28, 2026 version showed which MyGreenhouse uses are new and which were already there, such as AI training, so this article does not present older text as new. Every quote was checked against the live policy and the archived version.

Business outcome

Teams that track Greenhouse know exactly what changed in the MyGreenhouse section: three new data categories, a new sentence naming data combining, verification sharing and workforce analytics, and an opt-out that no longer requires closing the account. For a company that hires through Greenhouse, that is the basis for answering candidates who ask how their data is used.

Key takeaway

Greenhouse's October 1 Privacy Policy adds location and interview history to the data it collects from MyGreenhouse users and names workforce analytics for employers among its uses, while letting users stop sharing their profile with employers without closing their account. Telling the new uses from the old ones, like AI training, takes a line-by-line comparison, which is why you monitor vendor terms of service and privacy policies over time.