Privacy notice

This notice describes how Orglume handles data in the course of running a workforce platform. It covers the marketing website you are reading and the product at https://app.orglume.com.

The marketing website sets no analytics or advertising cookies, runs no third-party tags and holds no account data. It is static content served from a CDN.

For the people in YOUR organization — your employees, contractors, advisors and candidates — you are the controller and we are the processor. We hold their records on your behalf, under the configuration you set.

For the administrators on your team who hold a login, we are the controller of their account data.

Confusing these two is the most common mistake in this category, and it changes who has to answer a data subject request from one of your employees. It is you.

Identity and employment data: names, contact details, employment status, role, manager, team, location, working hours and contract terms.

Operating data: responsibilities owned, authority held, skills and certifications recorded, knowledge areas, system access, objectives and availability.

Documents: employment agreements, amendments, policies, acknowledgements, certificates and training records, together with facts extracted from them and who confirmed each one.

Sensitive categories, where you choose to record them: compensation, health-related absence and private manager notes. Each sits behind its own permission and is excluded from assistant answers by default.

It does not sell data, share it between customer accounts, or use one organization's records to improve another's.

It does not use your people data or your documents to train models made available outside your account. That is a contractual commitment, not a preference.

It does not make or score employment decisions. It will not rate an individual, rank your team, or produce an output intended to inform pay, promotion, discipline or dismissal.

It does not make you compliant with anything. No configuration of any software does that, and a product implying otherwise would be doing you harm.

Retention is set per category — employment records, candidate data, private notes and sensitive categories each carry their own period, because the obligations genuinely differ.

When a period expires the record is presented for deletion or extension by a named person, rather than expiring silently or persisting indefinitely. Records under a legal hold are retained regardless, and the hold is visible and attributed.

Write to [email protected] with any question about this notice.

If you are an employee of an organization that uses this product and you want to know what is held about you, ask your employer — they are the controller of that data and we cannot disclose it to you on their behalf.