Emprofy.com Terms of Use 

Effective date: 01 January 2026 Last updated: 01 January 2026 Version: 1.2 Service: emprofy.com (the “Service”) Provider: PureVi Tech Solutions Inc. (“PureVi,” “we,” “us”) 

Acceptance of these Terms 

By accessing or using the Service, you agree to these Terms. If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization, and “you” includes the organization.  If you do not agree, do not use the Service. 

Related documents 

These Terms incorporate by reference (where applicable): (a) the Emprofy Privacy Policy, (b) Cookie Policy and Cookie Preferences, (c) the Data Processing Agreement (DPA) for organization customers, and (d) any Order Form or subscription terms accepted by an organization customer.  If there is a conflict between an Order Form and these Terms, the Order Form controls for the subject matter of the Order Form. If there is a conflict between the DPA and these Terms about data processing for an organization customer, the DPA controls. 

Definitions 

• Candidate/Student: An individual who creates an account to store, manage, and share records and request references. 

• Referee: An individual invited to provide a reference or feedback about a Candidate. 

• Organization Customer / Organization: An employer, recruiter, educational institution, or other entity that uses the Service under a paid plan or Order Form. 

• User Content: Documents, text, references, messages, files, data, and other materials submitted to the Service by a user or on a user’s behalf. 

• Customer Data: Personal data and related data processed by PureVi on behalf of an Organization Customer under the DPA. 

• AI Features: Any feature labeled as AI-assisted, automated summarization, analytics, or similar. 

Service description and intended use 

Emprofy is a cloud-based HR-Tech platform that, depending on enabled features, allows: – Candidates to create a secure profile, upload employment/academic records, request references, and share records with organizations subject to Candidate-granted access; and – Organizations to view Candidate-shared materials and manage workflows consistent with the Candidate’s grants and the Organization’s lawful recruiting/verification processes.  No employment decisions: Emprofy is a technology platform. We do not make hiring, admissions, credentialing, or employment decisions. Organizations are responsible for their decisions and for complying with their legal obligations. 

Eligibility 

You must be at least [16 / 18] years old (or the age of majority in your jurisdiction) to create an account, unless the Service is made available through an Organization Customer with appropriate authorizations.  You may not use the Service if you are barred from receiving services under applicable law. 

Accounts, authentication, and user responsibilities 

You agree to: – Provide accurate, current, and complete account information. – Maintain the confidentiality of your credentials and use strong passwords and any required authentication factors. – Notify us promptly of suspected unauthorized access to your account.  We may suspend or terminate accounts to protect security, privacy, and Service integrity. 

Organization accounts, subscriptions, and payments 

If you are an Organization Customer: – Access to organization features may require a paid subscription or per-use fees per our pricing page or an Order Form. – Payments may be processed by third-party payment processors. Your relationship with those processors is governed by their terms and privacy policies. – Unless an Order Form states otherwise, subscriptions renew automatically until canceled with required notice.  Taxes and payment timing will follow the Order Form or checkout terms. 

Controller/Business vs Processor/Service Provider roles 

Because Emprofy serves multiple user types, PureVi’s role depends on the processing context: 

• Controller/Business role: PureVi acts as a controller/business for Candidate accounts created directly with us, Referee submission experiences hosted by us, and website visitors, as described in our Privacy Policy. 

• Processor/Service Provider role: For Organization Customer workflows where we process personal data on behalf of an Organization Customer, PureVi acts as a processor/service provider/contractor and processes Customer Data only on documented instructions under the DPA. 

If you participate in an Organization Customer’s hiring/verification process, the Organization Customer is typically responsible for primary notices and lawful basis determination for its processing. 

Acceptable use and prohibited activities 

You may use the Service only for lawful purposes and in accordance with these Terms. You will not (and will not attempt to): 

• Access, use, disclose, or export personal information through the Service without lawful authority and an appropriate purpose. 

• Upload User Content that you do not have rights to submit, or that violates confidentiality obligations, intellectual property rights, or privacy laws. 

• Misrepresent your identity, relationship to a Candidate, or authority to submit a reference. 

• Use the Service to discriminate unlawfully, harass, stalk, intimidate, or threaten others. 

• Attempt to bypass security controls, scrape the Service, probe for vulnerabilities, or introduce malware. 

• Reverse engineer or attempt to extract source code except where permitted by law. 

Organizations must ensure that their users (admins, recruiters, hiring managers) comply with these Terms. 

Candidate sharing and access grants 

Candidates control whether and when to share records with an Organization through the Service. If a Candidate revokes access, we will stop further access through the Service for that Organization, subject to technical and legal constraints. Organizations acknowledge that they may have independent obligations regarding any copies or exports they create, consistent with applicable law and their internal policies. 

User Content and submissions 

Ownership: You retain ownership of your User Content, subject to the licenses granted below.  License to operate the Service: You grant PureVi a worldwide, non-exclusive, royalty-free license to host, store, process, transmit, display, and otherwise use User Content solely to operate, secure, support, and improve the Service, and to provide the features you request (including sharing to intended recipients under your access grants).  Referee submissions: Referees represent that their reference submissions reflect their honest opinion and are made in good faith to support Candidate-requested workflows, subject to Organization Customer processes where applicable.  Removal: You may delete or remove certain User Content via the Service where functionality is available. Deletion is subject to retention, backup, and legal hold processes described in our Privacy Policy and applicable agreements. 

AI features and transparency 

If AI Features are enabled, they may summarize or organize User Content to support your workflows. AI Features are not a substitute for human judgment.  Organizations must not rely on AI outputs as the sole basis for decisions where doing so would violate applicable law or organizational policies. PureVi may provide additional AI-related disclosures in the Privacy Policy, feature notices, or trust documentation. 

Privacy and data protection 

Our Privacy Policy explains how PureVi collects and processes personal information when we act as a controller/business, and how we generally handle personal data.  If you are an Organization Customer, the DPA governs how we process Customer Data on your behalf and defines instructions, security measures, sub-processing, assistance, and breach notification obligations.  Nothing in these Terms is intended to limit privacy rights that cannot be waived under applicable law. 

Account Authentication, One‑Time Passwords (OTP), and Security Communications

Purpose and Scope: We use authentication and verification mechanisms, including One‑Time Passwords (“OTPs”), as part of our security controls to safeguard user accounts and protect the confidentiality, integrity, and availability of the Service. OTP communications are limited to transactional and security-related purposes and are not used for marketing or promotional activities. Personal Information Collected: For account authentication and security verification, we may collect and process the following personal information:

• Mobile phone numbers provided by users
• OTP‑related authentication metadata, including timestamps, delivery status, and verification outcomes
• Security and audit log data associated with authentication attempts and account access events

This information is collected on a data‑minimization basis and is limited to what is necessary to support identity verification, access control, and fraud prevention. Purpose of Processing: We process OTP‑related information solely to support the Security and Processing Integrity objectives of the Service, including to:

• Verify user identity during login or access attempts
• Detect and respond to suspicious or anomalous authentication activity
• Prevent unauthorized account access, misuse, or compromise
• Maintain audit trails to support monitoring, incident response, and compliance obligations

OTP messages are generated and transmitted only in response to defined authentication events. Legal Basis for Processing: We process phone numbers and OTP‑related data based on one or more of the following, as applicable:

• User consent, where users voluntarily provide a phone number for authentication
• Contractual necessity, where OTP verification is required to access or maintain an account
• Legitimate interests, including protecting the Service, users, and Organization Customers from fraud, abuse, and unauthorized access

Access Controls and Use Limitations: Access to phone numbers, OTP data, and authentication logs is restricted through role‑based access controls and limited to authorized personnel with a legitimate business need related to security operations, support, or compliance. OTP‑related information is not accessed or used for purposes unrelated to security, authentication, or platform integrity. Service Providers and Sub‑Processing: We may engage approved third‑party service providers (such as telecommunications or messaging vendors) to deliver OTP messages. These providers:

• Act only on our documented instructions
• Are contractually required to implement appropriate technical and organizational security measures
• Are prohibited from using personal information for their own purposes

We do not sell or disclose phone numbers for marketing or advertising purposes. Data Retention: We retain phone numbers and OTP‑related records only for as long as necessary to:

• Provide authentication and account security functionality
• Support security monitoring, audit logging, and incident investigation
• Meet legal, regulatory, or compliance requirements

Authentication logs are retained in accordance with documented retention schedules and are deleted or anonymized when no longer required. User Choices and Impact on Service Access: Where functionality allows, users may update or remove their phone number through account settings. Disabling OTP‑based authentication may limit or prevent access to certain features or the Service where alternative verification mechanisms are not available. Security Safeguards: OTP‑related personal information is protected using administrative, technical, and organizational safeguards designed to:

• Prevent unauthorized access, disclosure, or alteration
• Support continuous monitoring and detection of security events
• Align with industry‑recognized information security standards and internal control frameworks

These safeguards form part of our broader information security program. Organization Customer Context: Where authentication or OTP verification occurs as part of an Organization Customer workflow, we process such data in accordance with the applicable Data Processing Agreement (DPA). Organization Customers may act as controllers for their workflows and are responsible for providing any additional notices required under applicable law.

Security and audit logs 

We implement technical and organizational measures designed to protect the Service and personal information processed through it. We maintain logs to secure the platform, detect misuse, and support incident response and compliance.  You acknowledge that security is a shared responsibility. Organization Customers are responsible for securing their user accounts, endpoint devices, and access management. 

Third-party services and links 

The Service may integrate with or link to third-party services (e.g., payment processors, SSO providers, analytics providers). We are not responsible for third-party services and do not control their terms or privacy practices. 

Confidentiality for Organization Customers 

If you are an Organization Customer, you must treat Candidate-shared information, references, and any personal information accessed through the Service as confidential and implement appropriate safeguards against unauthorized access, use, or disclosure. 

Suspension and termination 

We may suspend or terminate your access to the Service if we reasonably believe: – you have violated these Terms, – your use creates a security or privacy risk, – your use could expose PureVi or others to liability, or – we are required to do so by law.  You may stop using the Service at any time. Organization Customers may terminate per their Order Form and applicable DPA. 

Disclaimers 

To the maximum extent permitted by law, the Service is provided “as is” and “as available.” We do not warrant that the Service will be uninterrupted, error-free, or that any references, documents, or User Content are accurate or complete.  Some jurisdictions do not allow the exclusion of certain warranties, so some disclaimers may not apply to you. 

Limitation of liability 

To the maximum extent permitted by law: – PureVi will not be liable for indirect, incidental, special, consequential, or punitive damages. – PureVi’s total aggregate liability arising out of or related to the Service will not exceed the amounts paid by the Organization Customer to PureVi in the [12] months preceding the event giving rise to the claim, or [USD/CAD $0] for free individual accounts, whichever is applicable.  Nothing in these Terms excludes liability that cannot be excluded under applicable law. 

Indemnification 

Organization Customers will indemnify and hold harmless PureVi from claims arising from the Organization’s use of the Service in violation of these Terms, applicable law, or the rights of others, including claims arising from the Organization’s hiring/verification decisions and its handling of personal data. 

Governing law and dispute resolution 

Governing law: These Terms are governed by the laws of Ontario, Canada, excluding conflict-of-laws rules, except where mandatory local law requires otherwise. Nothing in this section limits rights you may have under mandatory consumer protection laws.  Dispute resolution (Arbitration with CarveOuts): Except where prohibited by applicable law, any dispute, controversy, or claim arising out of or relating to these Terms or the Services will be resolved through final and binding arbitration. The arbitration will be conducted in accordance with the Arbitration Rules of the ADR Institute of Canada (ADRIC), or any successor rules in effect at the time the arbitration is initiated. A single arbitrator will be appointed in accordance with those rules.  Seat & Language 

• Seat (place) of arbitration: Toronto, Ontario, Canada 

• Governing rules: ADR Institute of Canada Arbitration Rules 

• Language of arbitration: English 

• Confidentiality: All arbitration proceedings and related materials will remain strictly confidential to the maximum extent permitted by law. 

Class Action Waiver (Where Enforceable) 

To the fullest extent permitted by applicable law, disputes will be resolved only on an individual basis. You and PureVi agree that neither may bring or participate in any class, collective, consolidated, representative, or mass action, whether in arbitration or court. If any portion of this waiver is determined to be unenforceable for a particular claim, that claim must proceed in court, while the remaining claims proceed in arbitration. 

CarveOuts for Injunctive Relief and Intellectual Property 

This arbitration agreement does not prevent either party from seeking relief in a court of competent jurisdiction for: 

1. Temporary, preliminary, or permanent injunctive relief, including urgent relief to prevent unauthorized access to or misuse of the Services; 

1. Protection, enforcement, or defense of intellectual property rights, including trademarks, copyrights, patents, and trade secrets; 

1. Claims eligible for small claims court, where permitted by applicable law. 

Nothing in this section limits rights you may have under mandatory consumer protection laws. 

Changes to these Terms 

We may update these Terms from time to time. If we make material changes, we will provide reasonable notice (e.g., by posting on emprofy.com or notifying account holders). Continued use after the effective date of an update means you accept the revised Terms. 

Contact 

Privacy inquiries: privacy@emprofy.com Legal notices: legal@emprofy.com Postal address: 1900 City Park Dr, Suite 300, Ottawa, Ontario, Canada