Yello Privacy Notice

Last Updated: October 10, 2024

RECSOLU, Inc., dba Yello and WayUp, Inc., dba Yello Sourcing (“Yello,” “we,” “us,” or “our”) respect your privacy. This Privacy Notice (“Notice”) describes the processing of Personal Information (defined below) that is provided, collected, or disclosed while providing our products or services to you (“Services”) and on the websites, applications, and online platforms that link to this Notice (collectively, “Site”), including when you apply for a job with us or through us. It also describes rights you may have under applicable laws. Please read this Notice carefully to understand our policies and practices regarding your Personal Information and how we will treat it. To access this Notice in an alternate format (e.g., printable) or language, please contact us using the information provided in the Contact Us section below.

We may modify this Privacy Notice at any time. All changes will be effective immediately upon posting to the Site. Material changes will be conspicuously posted on the Site or otherwise communicated to you.

This Privacy Policy is available to individuals with disabilities. To access this Privacy Policy in an alternative downloadable format, please click here.

Personal Information We Collect

We collect several categories of Personal Information from and about users of our Site and Services. Those users include individuals seeking professional employment opportunities (“Candidates”) and organizations seeking to recruit and hire talented professionals (“Customers”). “Personal Information” means information that uniquely identifies, relates to, describes, or is reasonably capable of being associated with or linked to you. The categories of Personal Information we collect may include:

How We Collect Personal Information

How We Use Personal Information

To the extent permitted by applicable law, we use Personal Information:

If you are applying for employment with us or through us, we also use Personal Information to process your job application, to verify the information you have provided in your application, conduct interviews, perform background and reference checks, to communicate with you and answer your questions, to confirm your eligibility for employment, improve our recruiting processes or those of our Customers, or facilitate connections and opportunities between our Candidates and Customers. We may also save your Personal Information for future employment opportunities with us or our Customers.

How We Disclose Personal Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose your Personal Information with your consent or in the following circumstances:

Cookies and Other Tracking Technologies

We and our service providers may use cookies and similar technologies to collect usage and browser information about how you use our Site. The technologies we use for this automatic data collection may include cookies and web beacons that permit us to verify system and server integrity and generate statistics around the popularity of certain content. We process the information collected through such technologies, which may include or be combined with Personal Information, to help operate certain features of our Site, to enhance your experience through personalization, and to help us better understand the features of our Site that you and other users are most interested in.

Site Delivery and Appearance - We may use third party providers to enable certain customer interaction opportunities, content delivery (like audio or video), or other service capabilities. Examples include, but are not limited to, the following functionality:

Website Analytics and Session Replay - We use analytics and session replay services, that use cookies and other technologies that collect your Personal Information, to assist us with analyzing our Site traffic and site usage to optimize, maintain, and secure our Site and inform subsequent business decisions (including, e.g., advertising). These include, but are not limited to, the following third-party services:

Interest-Based Advertising - We may also allow or enable third parties to collect Personal Information to provide their interest-based advertising on behalf of our products and Services, or their own. Interest-based advertising occurs when advertisements are shown to you based on information collected from your online interactions over time and across multiple websites, devices, or online services that you visit or use. Some companies may engage in cross-context behavioral advertising to predict your preferences and show you advertisements that are most likely to be of interest or relevant to you. We do not control these third parties' collection or use of your information for these purposes, or the opt-out options they may individually offer you via their terms, conditions, and privacy policies. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. Examples of the third-party service providers we engage to serve interest-based advertisements include Google Ads (including Google Dynamic Remarketing and DoubleClick), Meta Ads (including Meta Pixels and Facebook advertising services), TikTok (including the TikTok Pixel), LinkedIn marketing solutions (including LinkedIn Ads and Analytics), X Advertising, Microsoft advertising, and Adobe.

Selling or Sharing Personal Information - While we do not sell Personal Information in exchange for monetary consideration, we do share Personal Information for other benefits that could be deemed a “sale” or “sharing” under various data protection laws, because they are sometimes broadly defined to include activities such as the delivery of interest-based advertising on websites or allowing third parties to receive certain information, such as cookies, IP address, and/or browsing behavior. We similarly engage in interest-based advertising when we use data about your activities on our Site to serve you ads on websites owned or controlled by third parties. It is in this context that we have provided advertising networks, data analytics providers, social networks, and video sharing platforms with Personal Information such as your IP address, device information, Internet and other electronic network activity information, and geolocation information in the last twelve months.

Product-Based Cookies and Other Tracking Technologies - We may also deploy variations of the cookies and related tracking technologies discussed in this Cookies and Other Tracking Technologies section within our products and Services, including any mobile applications and widgets. For your convenience, a table of those product-based cookies is included below for reference.



Cookie Name Cookie Type Default Category Default Description
_session_id SESSION Strictly Necessary Cookies This cookie creates an interim session ID used as an in-session user ID.
_uuid SESSION Strictly Necessary Cookies This cookie is used by our logging system to ensure seamless experience.
AWSALB SESSION Strictly Necessary Cookies This cookie is essential for ensuring consistent user experiences in applications with multiple backend servers, helping AWS manage traffic distribution effectively.
AWSALBCORS SESSION Strictly Necessary Cookies This cookie is used to manage session stickiness for cross-origin requests in AWS environments that utilize an Application Load Balancer (ALB). It works alongside the AWSALB cookie to ensure proper session routing, especially when CORS is involved, enhancing user experience in distributed applications with multiple origins.
last_seen_on_server SESSION Strictly Necessary Cookies This cookie is set by our application to validate Session timeout that is set to a default of 30 minutes. It is a base64 encoded epoch time value.
OptanonAlertBoxClosed PERSISTENT Strictly Necessary Cookies This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information.
OptanonConsent PERSISTENT Strictly Necessary Cookies This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor.
org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE SESSION Strictly Necessary Cookies This cookie is used in Spring web applications for managing internationalization (i18n) by storing the user's preferred locale (language and region settings) in a cookie. This cookie allows the application to remember the user's locale preferences across different sessions or page requests.
TGC SESSION Strictly Necessary Cookies This cookie is a critical part of the authentication process, enabling users to maintain authentication across multiple services within the same session without repeatedly entering credentials.
_ga PERSISTENT Analytics Cookies This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners.
_gat PERSISTENT Analytics Cookies This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes.
_gid PERSISTENT Analytics Cookies This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited.


Cookie Choices - To manage your preferences with respect to these technologies, you can:

How Long We Keep Your Personal Information

We retain your information for as long as needed: (i) to conduct business with you; (ii) fulfill the purposes outlined in this policy; and (iii) to comply with our legal obligations, resolve disputes, and enforce any agreements.

Criteria we will use to determine how long to retain your Personal Information include the nature and length of our business relationship with you; our legal rights, obligations, and retention requirements; and if we have an ongoing business purpose for retaining your Personal Information, such as communicating with you about ongoing or prospective Services you requested.

Links to Third-Party Websites

We are not responsible for the practices employed by any websites or services linked to or from our Site, including the information or content contained within them. We encourage you to investigate and ask questions before disclosing Personal Information to third parties, since any Personal Information disclosed will be handled in accordance with the applicable third party’s privacy policy.

In some cases, we offer links to social media platforms (like Facebook, Instagram, X (formerly known as Twitter), LinkedIn, Reddit, Quora, and YouTube) that enable you to easily connect with us or share information on social media. Any content you post via these social media pages is subject to the Terms of Use and Privacy Policies for those platforms.

We may also integrate with other websites to provide enhanced services, technological capabilities, or resources for you. These plug-in services and capabilities are governed by the terms, conditions, and policies of the underlying companies. Some of the integrations we currently offer include the ability to view our business and/or provider profiles on Google and Facebook, including the customer reviews publicly posted there. This hyperlinked content (including any embedded customer reviews) is governed according to the privacy policies for each platform, and the links to these external websites and services provided for your convenience. We may also give you the option to login to Yello platforms via third-party services like Facebook or Google. If you choose to leverage this option to link your accounts, we will receive information associated with your account (such as your name and profile information) from that third-party service. This information varies and is controlled by that service or as authorized by you via your privacy settings at that service. We recommend reviewing the service’s privacy policy beforehand and managing your privacy settings on an ongoing basis.

International Use and Cross-Border Data Transfers

If you are visiting our Site from outside of the United States, please note that our Site is hosted in the United States. Where permitted by applicable law, we may transfer the personal data we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this Policy.

For individuals in the European Union, European Economic Area, Switzerland, and United Kingdom: Yello will only transfer Personal Data to third parties located outside of this region when it has ensured appropriate safeguards for such Personal Information through use of the standard contractual clauses or other lawful and approved methods. To request a copy of applicable cross-border data transfer agreements, please reach out using the information in the Contact Us section.

How We Protect Personal Information

We have implemented commercially reasonable measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure. Unfortunately, the transmission of information via the internet is not completely secure. despite these efforts to store Personal Information in a secure environment, we cannot guarantee the security of Personal Information during its transmission or its storage on our systems. For example, Customers and Candidates are solely responsible for the security of their account credentials (e.g., passwords) and exercising caution when posting or sharing information in public areas of the Site or elsewhere.

Exercising Your Privacy Rights

Depending on where you live, you may have the following rights with respect to your Personal Information under applicable data protection laws:

To exercise any of the privacy rights afforded to you under applicable data protection laws, e-mail us at privacy@yello.co or privacy@wayup.com (for Yello Sourcing or WayUp-related inquiries) or submit a request through our web form here. You may also exercise your opt out rights by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC). We honor Opt-Out Preference Signals, including GPC. If you choose to use an Opt-Out Preference Signal, you will need to turn it on for each supported browser or browser extension you use.

You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Notice. However, should you withdraw your consent or object to processing of your Personal Information, or if you choose not to provide certain Personal Information, we may be unable to provide some, or all, of our Services to you.

Only you, or an authorized agent that you authorize to act on your behalf, may make a request related to your Personal Information. We must verify your identity before fulfilling your requests, and if we cannot verify your identity, we may request additional information from you. If you are an authorized agent making a request on behalf of another person, we will also need to verify your identity, which may require proof of your written authorization or evidence of a power of attorney. We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.

We do not charge a fee to process or respond to your requests unless they are excessive or repetitive. If we determine that a request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We may deny certain requests, or only fulfill some in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.

Note: Simply deleting our application from your mobile device will not initiate any of the above rights or terminate your account or Services. Your Services registration and account can only be terminated by following the procedures described in the corresponding Terms and Conditions. To execute your privacy rights, please follow the procedures described above.

Children’s Privacy

We do not knowingly collect or solicit any Personal Information from children, as defined under applicable law, without verified written parental consent, and we have no actual knowledge of selling such Personal Information of minors under 16 years of age. If we learn that we have collected Personal Information from a child, we will promptly take steps to delete that information. If you believe we might have any information from or about a child, please contact us at privacy@yello.co or privacy@wayup.com (for Yello Sourcing or WayUp-related inquiries).

Individuals in the European Union, European Economic Area, Switzerland, and the United Kingdom

This section provides additional information regarding Yello’s processing of personal data of people located in the European Union (EU), European Economic Area (EEA), Switzerland, and the United Kingdom (UK) in accordance with the EU Data Protection Regulation, UK Data Protection Regulation, and the Swiss Federal Data Protection Act.

Legal Bases for Processing

Our legal basis for processing Personal Information depends on the Personal Information involved and the context in which we process it. Where Yello acts as a controller, we process your Personal Information: with your consent; where necessary to perform a contract; to comply with our legal obligations; and where doing so is in our legitimate interests (including the purposes described in this Notice) and such interests are not outweighed by your rights and freedoms.

Special Category Data

Yello only collects Special Category Data where we have a lawful basis for doing so that is permitted under Article 9 of the GDPR, specifically within the employment context. If you apply for a job with us or through us, we may collect data that reveals your racial or ethnic origin, trade union membership, sexual orientation, or health to fulfill our obligations, exercise our rights, and otherwise administer our employment relationship with you (including initial recruitment and hiring, where applicable). For example, we may collect health information to make reasonable disability accommodations; immigration information to verify your right to work in a particular jurisdiction; and data points like your race, ethnicity, and sexual orientation to monitor equal opportunities. Please refrain from sending us any Special Category Data outside this employment context.

Designated Representatives

We have appointed a Data Protection Officer and representatives in the EU and UK. Their contact information is included below.

California Residents

This section provides additional information regarding Yello’s practices pursuant to the California Consumer Privacy Act of 2018 and its implementing regulations, as amended by the California Privacy Rights Act (“CCPA”), where “Personal Information” has the definition set forth in the CCPA.

Please see the below chart for detailed information about the categories of Personal Information we have collected from California residents during the twelve months preceding the date on which this Notice was last updated and the categories of third parties to whom we sell or share Personal Information. For each category of Personal Information set forth in the chart below, the categories of third parties to whom we disclose it for a business or commercial purpose are set forth in the How We Disclose Personal Information section above.



Personal Information Category set forth in Cal. Civ. Code § 1798.140 Categories of Third Parties to Whom We Sell or Share Personal Information
Personal identifiers, including real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, or other similar identifiers. Third-party marketers, and other third parties that set cookies and other online tracking technologies on our Site.

Yello Sourcing Customers to facilitate Customer-Candidate interactions and the recruitment and hiring Services described earlier in this Notice.
California Customer Records Personal Information (Cal. Civ. Code § 1798.80(e)), including name, signature, physical characteristics or description, address, telephone number, education, employment, employment history, etc. Yello Sourcing Customers to facilitate Customer-Candidate interactions and the recruitment and hiring Services described earlier in this Notice.
Characteristics of protected classifications under California or federal law. This may include age, veteran status, accommodations information, gender identity and expression, sexual orientation, and religion. Yello Sourcing Customers to facilitate Customer-Candidate interactions and the recruitment and hiring Services described earlier in this Notice.
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. Third-party marketers, analytics providers and other third parties that set cookies and other online tracking technologies on our Site.
Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information about individual interactions with an Internet website, application, or advertisement. Third-party marketers, analytics providers and other third parties that set cookies and other online tracking technologies on our Site.
Geolocation data, such as your IP address. Third-party marketers, analytics providers and other third parties that set cookies and other online tracking technologies on our Site.
Sensory data including audio, electronic, visual, thermal, olfactory, or similar information. We do not sell or share this category of Personal Information.
Professional or employment-related information. Third-party marketers, analytics providers and other third parties that set cookies and other online tracking technologies on our Site.

Yello Sourcing Customers to facilitate Customer-Candidate interactions and the recruitment and hiring Services described earlier in this Notice.
Non-public education information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g; 34 C.F.R. Part 99) Yello Sourcing Customers to facilitate Customer-Candidate interactions and the recruitment and hiring Services described earlier in this Notice.
Sensitive Personal Information as set forth in Cal. Civ. Code § 1798.140, including social security number, driver’s license number, state identification card, or passport number; citizenship or immigration Information; racial or ethnic origin; union membership; account access credentials (like usernames or account numbers combined with password or other security/access code to access an account); mail, email, or text messages where the content is not directed to us (e.g., but sent through our Site) Yello Sourcing Customers to facilitate Customer-Candidate interactions and the recruitment and hiring Services described earlier in this Notice.


California Shine the Light - Under California Civil Code Section 1798.83, individual customers who reside in California and who have an existing business relationship with us may request information about our disclosure of certain categories of Personal Information to third parties for the third parties’ direct marketing purposes, if any. To make such a request, please contact us at privacy@yello.co or privacy@wayup.com (for Yello Sourcing or WayUp-related inquiries). Please be aware that not all information sharing is covered by these California privacy rights requirements and only information on covered sharing will be included in our response. This request may be made no more than once per calendar year.

Changes to this Notice

Please note that we may modify or update this Notice from time to time, so please review it periodically. If we make material changes to how we treat Personal Information, we will notify you according to applicable law. Unless otherwise indicated, any changes to this Notice will apply immediately upon posting to our Site. You are responsible for periodically visiting our Site and this Notice to check for any changes.

Contact Us

If you have any questions about our practices or this Notice, please contact us at privacy@yello.co or privacy@wayup.com.