matchwire Privacy Policy
株式会社Proto (the “Company”) establishes this Privacy Policy (this “Policy”) as follows regarding the handling of users’ personal information on matchwire (the “Service”) provided by the Company.
- Enacted:
- September 1, 2026
- Revised:
- October 4, 2026
Article 1 (Scope of application)
1. This Policy applies to the handling of personal information on the Service and on the Company’s website.
2. For self-hosted editions of matchwire, the entity responsible for handling personal information is the organization that deployed it.
Article 2 (Business operator information)
The name of the business operator handling personal information and the name of its representative are stated on the operator information page of the Company’s website. Upon request to the contact stated on that page, the operator’s address is provided without delay.
Article 3 (Information we collect)
1. The Company collects the following information.
- 1. From Candidates: account information (email address, authentication credentials, etc.), profile information (name, work history, education, skills, preferred conditions, etc.), submitted documents, and the content of applications and messages
- 2. From Corporate Users: name, email address, affiliated organization and role, job information, and records relating to selection
- 3. Automatically through use of the Service: cookies, access logs, and records of use of the Service
2. Where integration with an external service is used, the Company collects only the information necessary for that integration.
3. The Company does not collect special care-required personal information or any other information whose collection is not permitted by law or by guidelines under the Employment Security Act.
Article 4 (Purposes of use)
1. The Company uses the personal information it collects for the following purposes.
- 1. To provide and operate the Service
- 2. To match candidates with jobs and provide candidate information to Corporate Users, within the scope of the person’s settings and consent
- 3. To process registered information with AI in order to organize the content of imported documents and the conditions the person has written in free text, interpret search terms, compute the text similarity used in calculating display order, and prepare summaries (including ones that compare a job’s content with registered information) and draft text that the person or a Corporate User reads to make their own decision
- 4. To verify identity and prevent fraudulent use
- 5. To bill and settle usage fees
- 6. To respond to inquiries and make necessary communications
- 7. To respond as required by law
- 8. To create statistical information in a form that cannot identify individuals
- 9. To understand usage by arrival route and create statistics, as set out in Article 9, in order to improve the Service, the Company’s website, and the Company’s announcements
2. If the Company changes a purpose of use, it will publish the changed purpose.
Article 5 (Provision to third parties)
1. The Company does not provide personal data to third parties except in the following cases.
- 1. Where the person has consented
- 2. Where based on law
2. Disclosure of a Candidate’s information to Corporate Users is made based on the person’s consent. The person controls the scope of disclosure, and consent can be withdrawn at any time.
3. Disclosures across organizations are recorded, and the person can review those records.
Article 6 (Entrustment)
1. The Company may entrust all or part of the handling of personal data to external providers such as cloud services, AI model providers, and payment processors, to the extent necessary to achieve the purposes of use. The Company contractually obliges these providers to maintain appropriate security controls and supervises them in a necessary and appropriate manner.
2. For providers of AI models, the Company has confirmed that data sent to them is not used to train the AI models.
Article 7 (Provision to third parties in foreign countries)
The providers entrusted with the handling of personal data include businesses located in foreign countries (primarily the United States), and personal data is stored mainly on servers in the United States. The Company protects personal data through contractual and technical measures, with an understanding of the systems for the protection of personal information in the United States.
Article 8 (Security control measures)
For the security of personal data, the Company maintains rules for its handling, manages access privileges, encrypts communications, and takes other organizational, human, physical, and technical measures. The Company will respond without delay to requests from the person concerned regarding the details of the measures taken.
Article 9 (Cookies, etc. and measurement of arrival routes)
1. The Service uses cookies to the extent necessary to provide the Service, such as maintaining login state.
2. For the purpose in Article 4, paragraph 1, item 9, the Company measures which page of the Company’s website, which of the Company’s announcements, or which broad category of referrer (search, AI, social media, etc.) a user came from to reach the Service’s registration entrance, and the facts that the user started using the Service and that mutual interest was reached after registration. The full referrer URL, search terms, names, and email addresses are not used for this measurement.
3. For the measurement in the preceding paragraph, the Service uses, at the registration entrance, a cookie that records only the type of arrival route and expires after a short time. This cookie contains no information that identifies an individual or a device.
4. Only the Company refers to the results of the measurement in paragraph 2. The Company does not use them for ad delivery, the display order of search results or matching, billing of usage fees, or disclosure to Corporate Users, and does not provide them to third parties except as required by law. Information for the measurement is not sent to external analytics services.
5. Users can opt out of the measurement in paragraph 2 at any time from the Service’s settings. When a user opts out, the measurement records linked to that user are deleted at that point.
6. When a browser sends a GPC (Global Privacy Control) signal, the Service does not set the cookie in paragraph 3 at the registration entrance, and an account registered in that state starts out opted out of the measurement.
7. Measurement records linked to a user are deleted after a certain period, and are deleted immediately when the user’s account or data is deleted. Statistics are retained only in a form that cannot identify individuals.
8. Users who registered with the Service before the measurement began are not subject to the measurement in paragraph 2.
Article 10 (Requests for disclosure, etc.)
1. Requests for the disclosure, correction, suspension of use, and the like of retained personal data are accepted at the contact point in Article 12. After verifying the identity of the person, the Company will respond without delay in accordance with law.
2. Candidates can export their profile, manage consents regarding disclosure, and delete their account and data at any time from the Service’s screens. Deletion is executed immediately.
3. Even after deletion, records necessary for responding to legal requirements and preventing fraud may be retained in a form that cannot be linked to the person.
Article 11 (Persons under 18)
The Service is intended for persons 18 years of age or older. If the Company finds that it has collected the personal information of a person under 18, it will delete it promptly.
Article 12 (Contact point)
Requests, complaints, and consultations regarding the handling of personal information are accepted at the following contact point.
Email: contact@matchwire.ai
Article 13 (Revisions)
The Company may revise this Policy. When revising it, the Company will announce the content and effective date on the Service or on the Company’s website. For changes that require the person’s consent under law, the Company will obtain consent.