Terms and Conditions for Timpl Connect

Last Updated: October 17, 2025

Introduction

Welcome to Timpl Connect. These Terms and Conditions (the “Terms”) constitute a legally binding agreement between you and Timpl Careers Group, LLC, a limited liability company organized under the laws of the State of Georgia, USA ("Timpl," “We,” “Us,” or “Our”). We do business as (DBA) Timpl Connect for the job board platform located at connect.timpl.com (the “Platform” or “Site”).

We provide this information to ensure you understand how our Platform operates and what to expect when using our Services. By accessing or using any part of our Site, you agree to be bound by these Terms. If you do not agree, you must not access or use our Site. Any references to “Timpl” or “We” or “Us” or “Our” shall mean Timpl Careers Group, LLC.

PLEASE BE AWARE THAT SECTION 11 BELOW CONTAINS AN ARBITRATION AGREEMENT THAT APPLIES TO ALL USERS LOCATED IN THE UNITED STATES. PLEASE READ SECTION 11 CAREFULLY. THE ARBITRATION AGREEMENT PROVIDES, WITH LIMITED EXCEPTIONS, THAT YOU AND TIMPL: (1) WILL ONLY BE PERMITTED TO PURSUE DISPUTES AGAINST EACH OTHER OR OTHER USERS THROUGH BINDING, FINAL ARBITRATION; (2) WAIVE ALL RIGHTS TO BRING OR PARTICIPATE IN A DISPUTE ON A CLASS, COLLECTIVE, OR REPRESENTATIVE BASIS; AND (3) WAIVE ALL RIGHTS TO PURSUE DISPUTES IN A COURT OF LAW AND TO HAVE A JURY TRIAL.

AS A JOB SEEKER, YOU MAY OPT OUT OF THE ARBITRATION AGREEMENT PURSUANT TO SECTION 11(l) BELOW.

These Terms apply to the Site and any related websites or services operated by Timpl. By accessing or using the Site, you agree to these Terms in effect at the time of access. If you do not agree, you may not use the Site.

The Terms hereby incorporate by reference any additional terms and conditions posted by Timpl and linked within these Terms, including program- or service-specific terms. Unless otherwise indicated, the Terms apply to all Users of the Site.

If you are accessing or using the Site in your capacity as an employee or other representative of an Employer, you agree to the Terms on behalf of yourself and such Employer, and you represent and warrant that you have the authority to bind such Employer to the Terms.

Your use of our Site through an agency or reseller arrangement does not exempt you from the Terms.

Timpl may reject, remove, or limit the visibility of any User Content (as defined below), and Timpl may disable any account or restrict your ability to use all or parts of the Site, for any or no reason without notice. Although Timpl may indicate reasons for such decisions, we cannot always do so. We reserve the right to make such decisions in our interest or our Users’ interest.

Timpl does not and will not serve as an agent of, or decision-maker for, any Employer or any Job Seeker, as detailed in Section A (“Terms for Job Seekers”), Section B (“Terms for Employers”), and throughout these Terms.

For more information on how Timpl processes your personal data, please visit our Privacy Policy. By accessing or using the Site, you also represent that you have read and understand the Cookie Policy and Privacy Policy.

Please note that Timpl and its affiliates are not affiliated with any publicly traded entities and operate independently.

Accessibility: If you are using assistive technology to access the Site, or you are otherwise encountering an accessibility issue, and you need help, you can email connect@timpl.com.

Modern Slavery Act: We are committed to ensuring there is no modern slavery or human trafficking in our supply chains or in any part of our business; please view our full Modern Slavery Act statement for details (available upon request).

Definitions

• Agentic AI: An algorithm which can perform tasks in accordance with a person’s instructions. Agentic AI often has a chat interface. Agentic AI can sometimes resemble human activity, but it does not have autonomy or personhood. Agentic AI should not be confused with human decision-makers or other types of “agent.”
• AI-Generated Content: Content created in whole or in part by an algorithm, including artificial intelligence and machine learning models, which may be generated in response to information you provide. AI-Generated Content may include chatbots, Agentic AI, draft cover letters or resumes, career recommendations, template job descriptions, messages, questions, highlights, or summaries and is subject to the AI-Generated Content terms in the General Terms for All Users, Section C.9.
• Applicable Data Protection Law: All laws, regulations, and other legal requirements relating to (i) privacy, data security, consumer protection, marketing, promotion, and text messaging, email, and other communications; (ii) the use, collection, retention, storage, security, disclosure, transfer, disposal, and other processing of Personal Data under the Terms.
• Employer: An individual or organization using the Site to post Job Ads, make information available regarding employment opportunities or employment openings, seek Job Seekers, or otherwise obtain information related to hiring or human resources, on their own behalf or another’s. This includes agencies purchasing for multiple parties and employment agencies, and any authorized user managing or using an Employer’s account or acting on behalf of an Employer. Recruiters using the Platform on behalf of a client Employer are treated as “Employers” for policy purposes.
• End User: An entity, such as an Employer client (or you if you build or use an Integration for your own use), that uses any Integration or Timpl API.
• Including: Use of “including” in the Terms means “including without limitation.”
• Timpl App: Any Timpl mobile application, browser extension, or plugin, regardless of where it is downloaded from.
• Timpl Apply: Any profile, resume or application information that you submit through the Site to an Employer, including Personal Data included in a resume, application or responses to screener or other questions. This includes all references on the Site to “Apply Now”, “Easily Apply”, “Simple Apply”, “Apply from your phone”, “Apply with Timpl”, “RSVP to hiring event” or any similar references.
• Integration: The working connection between your Application and Timpl API/s that allows for the exchange of information as described and permitted under the API Documentation.
• Job Ad: An advertisement or post for an employment opportunity, hiring event, or an Employer’s workplace generally posted to the Site.
• Job Seeker: An individual searching for or applying for employment openings or using or accessing services or information or posting information on the Site related to their personal employment or job search. Also referred to as “Applicant.”
• Personal Data: Any information that relates to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This definition shall adjust as necessary to include data defined as “Personal Information”, “Personally Identifiable Information”, and similar terms under Applicable Data Protection Law.
• Site: Timpl’s online and mobile services and websites, including any software, service, feature (including plug-ins and integrations), program or element (including email messages, notifications, and other messages) provided by or on behalf of Timpl on or in connection with such services or websites.
• Text Message: Any digital message exchanged between two or more parties, including SMS, MMS, WhatsApp, RCS, and other forms of IP-based messaging.
• User (or “you”): Any party that accesses or uses the Site, including Job Seekers and Employers.
• User Content: Any data, text, images, reviews, audio, video, or other materials that a User submits, posts, displays, or otherwise makes available or provides to Timpl on or through the Site. Job Ads, Resumes, reviews, ratings, and messages are all forms of User Content. User Content includes AI-Generated Content that is generated in response to User Content.
• Marketplace: A public job board for clients to post free jobs or sponsored jobs for the express purpose of attracting job seekers to apply for open jobs. Marketplace does not include a searchable database of job seekers. Clients cannot search for job seekers. Job seeker data is searchable exclusively by Timpl.

Section A: Terms for Job Seekers

If you access or use the Site as a Job Seeker, in addition to the General Terms of Service (Section C), our Job Seeker Guidelines (available upon request), and any program- or service-specific terms, you agree to be bound by these Terms for Job Seekers.

As a Job Seeker, you are permitted to use the Site and its content for your personal, non-commercial purpose of seeking employment or information related to your job search. You agree that your license to use the Site is automatically revoked upon your attempt to use the Site for any other purpose.

When you apply to a job or otherwise interact with an Employer through the Site, you agree and understand that only the Employer, and not Timpl, makes any decision in the recruitment and hiring processes, including deciding whether to advance any applicant to any next stage such as an interview and deciding whether to hire any applicant. Employers are prohibited from using or relying on the Site in place of their own independent judgment and decision-making at any step in the recruitment or hiring processes.

Timpl does not and will not serve as an agent for any User, and Timpl expressly rejects any delegation to Timpl of any decision-making authority for or from any User. You may use the Site only for informational purposes and to help you be more effective and efficient in your employment-related activities, including searching for and applying for jobs. You agree, as a condition of using the Site, that you will not use the Site, in whole or in part, as a substitute for your own independent judgment or decision-making. You are solely responsible for your account, your use of the Site and any tools offered therein, and your decisions regarding your job search, application, and other employment-related actions. Timpl is not responsible and disclaims all liability for any actions taken or not taken based in whole or in part on any information you submit or receive in connection with your use of the Site. This disclaimer extends to any public or competitor claims against Timpl arising from User interactions.

1. Job Ads, Job Matching, and Recommended Jobs

General: Timpl displays Job Ads based on compensation paid by Employers to Timpl, relevance (such as your search terms), and other information provided and activities conducted on the Site. Some Employers may compensate Timpl, but all Job Ads are considered advertising.

No Control Over Third-Party Conditions or Content: Timpl has no control over third-party Job Ads, their content, or any third-party conditions after a Job Seeker applies or leaves the Site. By leaving Timpl for a third-party site, you accept their terms. Job Ads contained on, or linked from, the Site are indexed and posted in an automated manner, though Employers can purchase sponsored, featured, or paid placements. Timpl cannot guarantee, and disclaims all liability for, any User Content submitted by any Employer or User, including the accuracy, completeness, legality, reliability, legitimacy, truthfulness, or availability of such content. Timpl also cannot guarantee, and disclaims all liability for, the identity of any Employer or User.

No Obligation: You understand and agree that Timpl has no obligation to screen any Job Ads, or to include any Job Ads, in its search results or other listings, and may exclude or remove any Job Ads from the Site or your search result without any obligation to provide reasoning for removal or exclusion.

Filters and Tools: Timpl offers tools to help you find jobs, such as search filters by job type (full-time, part-time), which Timpl creates and may not perfectly reflect job ad content. Timpl might auto-apply search filters based on your profile or activity, but you can disable this. Timpl may reformat Job Ads for mobile viewing.

Timpl may also promote select Job Ads on specific topic pages (e.g., inclusive hiring, military-friendly). When a job ad is put on certain pages or filters, it doesn’t mean the job or employer has any special legal meaning or qualities. These pages don’t list every job, and you shouldn’t assume anything about jobs or employers that aren’t listed. Applying through these pages doesn’t guarantee better results, and these pages don’t list all jobs. Timpl also may provide a call function for phone numbers in Job Ads but cannot guarantee their accuracy.

Estimated Salary: Timpl may offer estimated salary for informational purposes only. This data, which may include AI-Generated Content or third-party submissions, is approximate and subject to change or varying accuracy. Always confirm actual salary figures and job details with the employer.

Badges and Labels: Timpl, in its sole discretion, may add labels or badges to Employer names or Job Ads, such as “Responsive Employer” or “Active Employer” or “Hired on Timpl” or “Verified.” Timpl may add labels or badges to Job Ads – such as pay types, specialties, benefits, union associations, or willingness to consider candidates with a criminal record – based on data contained within the job description for informational purposes only. Timpl does not guarantee the accuracy of any label or badge that is added to Employer names or Job Ads, including data on Job Ads.

Company Pages: Timpl may display publicly available information about employers on Company Pages. Information on Company Pages is presented for informational and promotional purposes only, is subject to change, and may be gathered from or generated by third parties. Please contact the Employer for the most accurate and up-to-date company information.

Matches: Job matches are recommendations which may be presented to both you as a Job Seeker and to Employers in various formats on the Site. The purpose of presenting matches is to allow Users to make their own decisions regarding employment opportunities. For example, Timpl may recommend Job Ads which are similar to jobs to which you recently applied, highlight certain aspects of Job Ads to you, or recommend Profiles to Employers which match Job Ads they post. To generate matches, Timpl uses data collected through our Site from both Employers and Job Seekers. This includes Job Ads, Your Profile information, information from your resume(s), your application materials (including responses to screener questions), and your activity on the Site (such as searches you run and Job Ads you click on and apply to).

Timpl may automatically send you recommended jobs via the email address you use to apply to a job or the email that is associated with your Timpl account. If you do not want to receive alerts for jobs that Timpl recommends to you, you can turn off ‘recommended jobs’ in your communications settings within your Timpl account. Receiving ‘recommended jobs’ emails does not affect whether employers can find your Profile on Timpl. To change your Profile privacy settings, go to your Profile page.

2. Your Profile and Resume

General: By creating or adding information to a profile through the Site, creating a Resume, using a resume builder feature on your profile, or uploading a file resume on the Site (collectively, “Profile,” “Your Profile” or “Job Seeker Profile”), you authorize Timpl to make it available to potential Employers and users of Timpl’s search programs. Your Profile includes any information you provide on the Site in the “Profile” section of your account, including Profile, your Resume, any uploaded file resume(s), and any other information that you choose to provide on the Site, including job preferences, desired job title, work schedule, qualifications, etc. You are responsible for keeping Your Profile accurate and up to date.

Profile Visibility (Searchable and Not Searchable): You can decide whether your Profile is seen by employers by selecting “Employers can find you” (“Searchable”) or “Employers can’t find you” (“Not Searchable”) on your Profile Settings page. When you create or upload a new version of your resume as part of an application, Timpl may automatically save that copy to your Profile. To hide Your Profile from third parties or employers, set your Profile settings to “Not Searchable” or “employers can’t find you on Timpl.” Not Searchable profiles are only visible to employers you’ve applied to or shared your resume with. Changing your privacy settings will not affect previous applications or prevent Employers you have already contacted from reaching you. Be aware that even if your profile is set to “Not Searchable,” search engines and other third parties may have copied your profile and made it available elsewhere, and Timpl has no control over such third parties. Timpl disclaims all liability for your profile and information shared with employers or made public. Phrases like “Employers can find you” and “Employers can’t find you” are synonymous with “Searchable” and “Not Searchable” respectively, and do not alter substantive rights or obligations. Timpl does not guarantee your Profile will be shown to any specific Employer or that the Profile database will always be available. Timpl reserves the right to limit or change your Profile’s visibility to Not Searchable for fraud prevention or other reasons at any time.

Contact Info: By providing your phone number in your Profile and setting it to “Searchable” or by including it in materials sent to employers, you agree that this phone number may be shared with employers or employers may be provided the ability to contact you through the Site. Timpl may mask your contact information (name, email, phone) on your profile, resume, or application with an alias (like your job title) to mitigate fraud. This decision is at Timpl’s sole discretion. Timpl may also mask Employer contact information, or Employers may choose to do so. You agree to be contacted by masked numbers/emails and may not be able to return calls without the real number.

Profile Content: You are solely responsible for the accuracy and content of your profile and resume. Do not include sensitive information you do not want to be made public, such as financial details, social security numbers, or confidential health information. If Timpl finds sensitive data, we may hide it, but we cannot guarantee it won’t be shown.

Feedback: We may provide feedback on your resume or profile, including suggestions for improvement. By creating or adding information or a resume to Your Profile, you are requesting and authorizing Timpl, or a Timpl vendor, to review or scan Your Profile and resume(s) and provide you feedback (at Timpl’s discretion). This is for informational purposes only and does not guarantee results. You are solely responsible for deciding what information to include in your Profile, job applications and which jobs to apply for.

Multiple Resumes: You may be able to save multiple resume versions to your Profile. If so, Timpl stores these at its discretion and may remove them without notice or liability; you are responsible for keeping your own copies.

3. Applying to Jobs

Review Your Application: When you apply to a Job Ad through the Site, you authorize Timpl to transmit your application and any related information to the relevant Employer via automated processing. Before submitting your application, you can and should review all information, including attached files, to ensure accuracy and completeness for your desired job application. You are solely responsible for your application’s content. Timpl may reformat applications or messages. Employers may request Timpl assemble applicant materials (applications, resumes, screener answers, and other provided information) into a single document; Timpl performs this assembly on your behalf. You acknowledge that Employers may also use tools, including artificial intelligence and machine learning models, to process, sort, and analyze applicant materials. The function of these tools may include generating summaries, translations, and other information, which Employers can use or discard as part of their decision-making process.

No Control Over Employers: Timpl does not control Employers or their application processes. Employers, and not Timpl, decide which qualifications are relevant for which job, who is qualified for a job (or not), and who moves forward (or does not) in the process. Once your information is shared, the Employer’s use of that information is governed by their policies. Any request to delete or modify your data must be made directly to the Employer. If you require alternative methods for applying, you must approach the Employer directly to request such alternative method, as Timpl is not responsible for the Employer application process. Timpl is not responsible for employer-provided content or employer messages. Timpl does not select employer questions or qualification criteria. Employers are solely responsible for compliance with all applicable laws, including anti-discrimination and data protection laws.

Employers’ ATS and Agentic AI: When you apply for a job, Timpl sends your application to the Employer or their Agentic AI. This may involve sending it to an Applicant Tracking System (“ATS”) or other service provider chosen by the Employer. You agree that Employers can enable such providers to access and manage their Timpl accounts. By applying, you consent to the Employer’s use of such providers, acknowledging that an intermediary may access your job application.

No Guarantees: Timpl does not guarantee that your application will be delivered, received, or acted upon, or that you will receive a response or an interview. Job Ads may expire before your application is submitted. Timpl relies on employers or their representatives (such as their legal agents) for accurate application destinations and cannot verify provided contact information. Incorrect electronic destinations will prevent delivery. Timpl does not guarantee error-free integrations or interfaces but may alert you to issues. We are not responsible if an ATS rejects or fails to deliver an application, or part of an application, to an Employer for any reason.

Limits: To maintain the quality of the Site, Timpl in its sole discretion may impose limits on your use of the Site. Use of any automation, scripting, or bots to automate the application process outside of Timpl’s official vendors and tooling is prohibited. You acknowledge that as part of its efforts to combat fraud and spam, Timpl may require that users verify their email address or phone number. When you apply to a job through the Site, you agree that you may be required to verify your email address or phone number.

Health and Safety: Timpl does not guarantee the identity of an Employer or any individuals working for any Employers and cautions Job Seekers when applying to jobs. Timpl cannot make any guarantee regarding health and safety measures in an Employer’s hiring or interviewing process. Timpl does not guarantee the validity of a job offer and cautions Job Seekers to verify the validity of a job offer before taking any adverse action, including regarding their current employment situations. Job Seekers are solely responsible for verifying the accuracy or legitimacy of any Employer or job offer.

Automations: By answering screener questions, you acknowledge that Employers may have instructed Timpl to send out rejection notices if your answers do not match the answers sought by the Employer, and you acknowledge that Timpl has no discretion in the transmission of these rejections. You also acknowledge that Employers may instruct Timpl to schedule interviews with Job Seekers who meet criteria (based on information the Job Seeker has provided to Timpl) that the Employers have selected. You agree that transmission or storage of these messages is not guaranteed, and that the availability or criteria the Employer provided to Timpl may not be accurate. It is ultimately your and the Employer’s responsibility to confirm whether any interviews were scheduled, or to reschedule or cancel interviews if necessary.

No Decisions: Timpl may offer Employers functionality that groups applicants based on whether they meet or may not meet Employers’ criteria, based on text in their resumes or answers to screener questions. In all cases, Employers can view any applicant at any time, and Timpl makes no decisions about any applicant. You agree that such functionality does not constitute or contribute to a decision, and is not a substitute for human discretion and review. The decision of who to interview or hire is decided solely by the Employer, who can choose to contact or hire any Job Seeker at any time.

Notifications: Timpl may notify you about Employer actions related to your communications, Job Ads, Profile, or applications on the Site, including viewing, sending, storing, receiving, pausing, closing, opening, responding to, or making decisions. These notifications, delivered via app, Text Message, email, or on the Timpl platform, are a courtesy only. Do not rely on them; for example, confirm interviews directly with the employer.

4. Demographic Data

Timpl’s Voluntary Demographic Data Survey: You may have the opportunity to provide Timpl with certain demographic information about yourself, such as your race and ethnicity, gender, age, LGBTQ+ community membership, and disability status, as well as whether you have an arrest or conviction record (“demographic data”). By choosing to provide your demographic data you agree that Timpl may use it to evaluate and improve our services, and share aggregate summaries of job seeker information with employers. If you do not want your demographic data to be used in this way, do not provide it to Timpl (or, if you have already provided your demographic data to Timpl, you can remove it). You further acknowledge and agree that another Job Seeker’s demographic data is personal information, and to the extent permitted by law you waive any right to request or view demographic data pertaining to any other Job Seeker.

Legal Obligations: Timpl may be required to comply with legal obligations or governmental requests or to establish or exercise its legal rights or defend against legal claims. This means, for example, that Timpl may receive legal process from courts or law enforcement to reveal user data, including demographic data, and that Timpl may comply with such requests.

Employers’ Voluntary Self-Identification Questions: Employers may ask applicants to voluntarily self-identify certain demographic information such as race, ethnicity, sex, disability or veteran status along with their job applications. Some Employers are required by law to ask these questions, and you may see these questions when applying to jobs on the Site. That is a separate process from Timpl’s voluntary collection of demographic data and Timpl is not responsible for these questions. If you have questions or concerns about an Employer’s application materials, please contact the Employer directly or refer to their privacy policy.

5. Timpl Recruiting Services

General: Timpl Recruiting Services provides recruitment services to its clients. When you apply to a job supported by Timpl Recruiting Services, or otherwise engage with Timpl Recruiting Services, you agree that Timpl Recruiting Services may use information you provide to Timpl Recruiting Services and data collected through the Site to present potential job matches to you and to potential Employers.

Employers Responsible for Hiring Decisions: Employers using Timpl Recruiting Services are responsible for their job requirements, hiring needs, and decisions. Engaging with Timpl Recruiting Services does not guarantee interviews, job placement, suitability for positions, or hiring, and you are responsible for your decisions and actions during recruitment, including accepting or rejecting job offers.

6. Your Job Seeker Data

Data Shared with Employers (Labels, Badges): You agree that in addition to making your profile available to Employers as described above, Timpl may inform Employers about activities you take on the Site, including through labels, badges, or other means. We may let them know your status (like if you’re online or recently active), or if you are responding to their messages or are responsive to messages generally. If you set your Profile to Searchable, Timpl may inform Employers that you have viewed, clicked, saved, liked, or started to apply for their job to indicate your potential interest. Timpl solely determines how such labels or badges are added, and which Job Seekers qualify based on Job Seeker activity on Timpl. The lack of a label or badge may indicate insufficient data. Timpl does not guarantee the accuracy of any such label or badge and reserves the right to change or remove such label or badge features at any time and in Timpl’s sole discretion.

Timpl’s and Employers’ Collection of Information: Timpl may collect certain information about you and any actions taken by you on the Site, an Employer’s site or ATS (e.g., Job Ads viewed, applications started/completed) using automated means, such as via cookies, pixels and web beacons. Under the Terms, any Employers using tracker functionality on the Site must provide notice and obtain consent as required by applicable law. However, you acknowledge and agree that Timpl has no control over such an Employer, its website, or ATS. You agree to Timpl’s use of, and receipt of information from, any such tracker functionality. Timpl’s use and receipt of information from such trackers will comply with the Terms and Timpl’s Privacy Policy.

Use of Profile Data for Matching: You agree that any data contained in or associated with Your Profile may be used to suggest jobs to you and, if your Profile is Searchable, to suggest your Profile to Employers that might be interested in a person who matches your qualifications and preferences on the Site. You also agree that Timpl may contact you based on this observed behavior or provided info on behalf of Employers or Timpl itself. When you make changes to your Timpl Profile, including updating, deleting, or changing settings, it may take a few days for the changes to be reflected.

Prior Job Applications: Employers that provide information about their job applicants/candidates from their ATS to Timpl through our Candidate Import service may also see information about your prior job applications submitted through the Employer’s ATS. Timpl does not guarantee the accuracy of such information.

For more information on how Timpl processes your personal data, please visit our Privacy Policy.

7. Virtual Communications, Including Messages, Emails, and Interviews

Virtual Interviews: Employers may offer you virtual remote communications via Timpl services. Timpl is not a telecommunications provider but facilitates communication through third-party services, which may experience technical delays or malfunctions. Timpl doesn’t guarantee the Virtual Interview experience, including transmission, audio/visual quality, data security, usage, or restrictions, and is not liable for claims arising from their use. Timpl doesn’t guarantee Employer schedules or availability for Virtual Interviews, nor the validity of provided contact information. Employers are responsible for all questions, comments, hiring decisions, and accommodations during Virtual Interviews. An “online” indication in a Job Ad doesn’t guarantee a live Virtual Interview selection, as employer availability is discretionary and subject to change. Virtual Interviews may be recorded by Employers or pre-recorded by you. You agree to respect recording notifications. If you don’t consent to recording, you must exit. By using Virtual Interviews, you agree to recording, and that Timpl and third parties can store, access, and analyze recordings. Employers can also access, store, use, analyze, and share recordings, which is outside Timpl’s control. Timpl is not liable for claims arising from Virtual Interview recordings. TO THE MAXIMUM EXTENT PERMITTED BY LAW, YOU UNDERSTAND AND AGREE THAT TIMPL OFFERS NO PROTECTION, AND IS NOT RESPONSIBLE FOR SECURING OR PROTECTING, ANY INFORMATION OR DATA YOU SHARE OR TRANSMIT DURING VIRTUAL INTERVIEWS (INCLUDING AUDIO/VISUAL CONTENT, INTERVIEW QUESTIONS/ANSWERS, OR YOUR IMAGE/LIKENESS). TIMPL ASSUMES NO LIABILITY FOR THE MISUSE OF SUCH DATA, NOR RESPONSIBILITY FOR THE AVAILABILITY OR RETENTION OF ANY INTERVIEW RECORDINGS. YOU ACCESS AND USE VIRTUAL INTERVIEWS AT YOUR OWN RISK. You indemnify Timpl for any claims from virtual communications.

Calls: Timpl may insert functionality allowing you to call third parties into messages relating to your application. This is a courtesy; standard calling rates with your phone provider will apply.

Emails: Timpl may use an alias for your email. Once an Employer has your contact info, Timpl is not responsible for its use. Messages sent to a Timpl alias are processed by Timpl and its vendors for service, display, and other purposes as per the Terms. Timpl decides how to extract and display messages on Timpl Messaging, though grouping of related messages is not guaranteed. Information provided about a message sender and other conversation participants, like display name, may vary.

My Jobs: Timpl may offer you the opportunity to link a third-party email client to the Site for Timpl to scan your emails in your third-party email account and add job application updates to the “My jobs” page within your Timpl account. If you choose to use this feature, Timpl will automatically scan your emails and extract data that it identifies as being relevant to application statuses. The updates will not be limited to applications submitted on or through the Site, and will include applications submitted outside the Site as well. You agree to your extracted data being processed, analyzed, reviewed, and stored, including via automated means, for data analysis, quality control, enforcement of the Site’s rules and other Timpl policies, content moderation, and to improve the Site or any other Timpl program or service. Timpl does not guarantee that the updates to the job applications listed on the “My jobs” page within your Timpl account will be accurate or complete. You may turn off this feature at any time via your email settings.

Push notifications: To turn off push notifications, adjust your browser settings (for browser notifications) or your mobile device settings (for mobile notifications).

8. Miscellaneous

Timpl works with groups that help people find jobs. Even though we might call them “partners,” this doesn’t mean we are a joint business with them. Timpl might share a small amount of information with these organizations about Job Seekers if Job Seekers agree to it. This could be to confirm that someone created an account or used our website. These groups can advertise their services with Timpl. However, Timpl is not responsible for what they do, and we are not liable for any problems that come from their services. We also don’t promise that their services are good quality. You agree that Timpl is not responsible for any issues that come from you working with these other groups.

Timpl reserves the right to monitor all activity on the Site to prevent fraud, spam, or other misconduct, and to take any action deemed necessary, including but not limited to account suspension or termination, without liability.

 

Section B: Terms for Employers

If you access or use the Site as an Employer, in addition to the General Terms of Service (Section C) and any program- or service-specific terms, you agree to be bound by these Terms for Employers (including the Data Processing Agreement in Section D).

You agree that your license to use the Site is automatically revoked upon your attempt to use the Site for any other purposes other than to post Job Ads, make information available regarding employment or employment openings, seek Job Seekers, or otherwise obtain information related to hiring or human resources.

Timpl does not and will not serve as an agent for any User. Timpl expressly rejects delegation to Timpl of any decision-making authority by any User. Timpl offers the Site to you strictly for your consideration and your decision-making within your own recruitment and hiring processes. Only you, and not Timpl, makes any decisions in these processes, including selecting qualifications, selecting or evaluating candidates, advancing or not advancing any candidate to any step such as an interview, and hiring or not hiring any applicant. Any automations offered to you on the Site will only implement your criteria in a rote way. You are responsible for ensuring your criteria are job-related and consistent with business necessity, and for selecting alternative criteria when appropriate. You are solely responsible for your account and your use of the Site, and your access to and use of the Site is conditioned on your agreement that you will not use the Site, in whole or in part, as a substitute for your own independent judgment or decision-making at any step. Timpl is not responsible and disclaims all liability for any actions taken or not taken based in whole or in part on any information you submit or receive in connection with your use of the Site.

For purposes of this section, all references to “you” or “your” shall mean you, the individual or organization accessing the Site in your capacity as an Employer.

1. Employer Accounts

Your Responsibilities as an Employer: As an Employer, you are solely responsible for your account, your use of the Site and any tools offered therein, your decisions regarding job descriptions, job requirements, any and all content of your Job Ad(s) and screener questions, whom you interview or hire, and compliance with applicable laws, including relevant federal, state, and local laws regarding the foregoing and any other aspect of employment. Timpl is not responsible and disclaims all liability for any actions taken or not taken based in whole or in part on any information you receive in connection with your use of the Site.

Identity Verification: When you create an Employer account, you may be required to verify your identity, potentially through a third-party service. You agree that third-party verification services are separate from Timpl and are responsible for their collection, use, storage, processing or loss of data you provide to them, and any related legal obligations. Timpl does not collect any biometric information or biometric identifiers, or receive any biometric information or biometric identifiers from the third-party verification services.

Data: When you create an account on behalf of an Employer, the account belongs to the Employer, and you acknowledge that any and all information that you provide Timpl through the account, such as the actions you take and when you take them, will be visible to the Employer. As part of this account, you may have an individual profile (“Employer Profile”). Your Employer Profile consists of information you provide on the Site in the “Account Settings” and “Employer Settings” section of the account. Employers may request that Timpl disable an account at any time by contacting connect@timpl.com. Please note that Timpl may be required to preserve business records pertaining to that account to comply with its obligations under law or to establish or exercise its legal rights.

Linked Accounts: A “Linked Account” is created when an Employer account owner (an “Admin”) invites other users to the same account, granting them varying access levels or “Roles.” Admins and designated users can access account data, including candidate Personal Data, and purchase Timpl services. By adding a user to a Role, you confirm your authorization to share this data and access. Users with certain Roles in a Linked Account may access all account information, including communications, actions, resume contacts, and billing. They can also purchase Timpl services, for which you are responsible for payment. If you link your Employer account, all activity, like actions and timestamps, may be visible to linked users, depending on their Role. Admins may retain some Linked Account user data, such as email addresses. However, Linked Account users cannot view your job seeker activity or Profile. You can unlink your account in settings; Admins can also unlink users at any time and may be notified of excessive device logins. You agree to indemnify and hold harmless Timpl from any allegations, claims, actions, suits, demands, damages, liabilities, obligations, losses, settlements, judgments, costs and expenses (including attorneys’ fees and costs) that result from the sharing of this data, access to your account, and any purchases made under your account.

Prohibited Uses and Account Security: As an Employer, your account is for business use and not for personal use. You are responsible for all activity on your account, including any Job Ads posted, services purchased, and the management of user access and roles for any Linked Accounts. Timpl is not responsible for and disclaims all liability if your account credentials are used improperly or falsely by a third party. Timpl may notify Job Seekers if your Employer account is compromised, but doesn’t guarantee notice delivery or accuracy and bears no responsibility or liability for such communications.

If you attempt to send an email from a name or email address that is not true, accurate, current or complete, we reserve the right to drop such email. Attempting to send such an email is a violation of our terms.

Email Updates: By registering for a Timpl account, you agree to receive mandatory email updates regarding account activity to your Timpl account.

Claiming Jobs: If you post a Job Ad that is also indexed on the Site from another source (e.g., your career site), you may be required to sponsor the Job Ad you post directly. Performance data for any unclaimed Job Ad you have posted may be available to any party that subsequently claims it. It is your responsibility to claim and manage your Job Ads.

Agency Partners: If you are a Timpl agency partner, you may be eligible to participate in a Timpl partnership program. Agency partners in this program may attain ranks based on their Timpl usage and engagement, measured by revenue. Timpl’s determination of an agency’s rank is made at Timpl’s full discretion and may be revoked at any time.

2. Your Job Ads and Job Requirements

Responsibility for Content and Accommodations: You are solely responsible for all content you post, including Job Ads, screener questions, and Company Pages. You must ensure your content is accurate, non-discriminatory, and complies with all applicable laws, including wage and hour, anti-discrimination, and data privacy laws. You are also responsible for offering alternative methods of screening and for providing reasonable accommodations for individuals with disabilities, if required by laws such as the Americans with Disabilities Act. While Timpl is guided by WCAG 2.1, Level AA in our efforts to design and develop accessible offerings, as outlined in the accessibility statement, each disability is unique and Timpl does not warrant that the method of delivery of your application materials or screening questions is compliant with the Americans with Disabilities Act (“ADA”) or any equivalent or similar law. Where required by law, you must clearly indicate that reasonable accommodations are available, provide contact information for job seekers requesting ADA-related accommodations when prompted on Timpl, engage with and respond to any requests for accommodation, and provide information about how to request an accommodation to Job Seekers. If you close or change any Job Ads that you post, you agree to promptly update such Job Ads on the Site or otherwise notify Timpl.

Ad Visibility: Timpl may reject or remove any Job Ad or limit its visibility for any reason, such as if your Job Ad violates our policies or does not indicate a salary above minimum wage or does not comply with applicable law, at our sole discretion. We are not obligated to provide a reason for removal, and you remain responsible for compliance with applicable laws.

Ad Labels: All Job Ads are considered advertising. Timpl may add labels like “Sponsored” or “Ad” to any paid content. From time to time Timpl may add labels (such as “Urgent”, “Urgently Hiring”, “Ad”, “Paid”, “Promoted”, or “Sponsored”) when publishing an Ad. Timpl reserves the right to add, change, or remove labels at any time. When you enable labels like “Urgent” or “Urgently Hiring” for your Ad, the frequency of showing such a label on your Ad is determined by Timpl in its sole discretion. Timpl may display an estimate of the compensation associated with any Job Ad. If you do not want an estimate to be shown, you must provide Timpl with the actual compensation. Please see our Ads Program Terms below for more information and terms applicable to Job Ads.

Timpl Suggestions: Timpl provides suggestions (such as competitive salary), information (such as estimated number of applications), and other recommendations as a courtesy, without warranty. Timpl also provides job post templates for informational use; by using them, you adopt and are responsible for the content. All such content is provided without warranty and isn’t a guarantee of future performance. You use this information at your own discretion and are solely responsible for your use of the Site, job descriptions, legal compliance, and hiring decisions. Timpl is not responsible and disclaims all liability for actions taken or not taken based in whole or in part on its suggestions, information, and recommendations.

Extended Campaign Tools: Timpl’s Extended Campaign Tools help coordinate Job Ads for multi-location businesses like franchises or large companies with many locations. Use of these tools means sharing your account data (locations, Job Ad performance, contact, spend) with your franchisor or corporate HQ. The franchisor or corporate HQ may also provide Timpl with contact info for their franchisees/local offices and Job Ad content. By using these tools, you consent to this data sharing, confirm all provided information is accurate, and warrant you have the right to share it. You can request Timpl grant additional users access to your Extended Campaign Tools account; Timpl will contact these users based on the information you provide and is not responsible for user verification.

3. Company Pages and Employer Branding

General: When you post a Job Ad, Timpl may automatically create a Company Page for you, displaying public company information. You authorize Timpl to claim this page on your behalf (known as “Claimed Profile” or similar), allowing you to edit it. User Content, including Job Ads (both directly posted by you and indexed by Timpl from other sources), may appear on your Company Page. You are solely responsible for content you add or edit on your Company Page, including photos, videos, and linked third-party websites. We moderate User Content using the same standard of review for all employers and do not provide preferential treatment for our customers. You understand and agree that our application of User Content moderation policies, and our decision of whether or not to remove a piece of User Content, is within our sole discretion and cannot form the basis of a violation of the Terms.

Employer Branding Hub: Timpl may offer premium subscription services such as Company Pages Premium, which may include features. Access to features accessible only by subscription is limited to one Company Page per subscription. Timpl is a provider of these programs and services, and all invoice and payment processing for such programs and services shall be undertaken by Timpl and subject to Timpl’s Privacy Policy.

Subscription Cancellation: You may cancel your participation in premium services at any time by notifying Timpl. Such cancellation is generally effective at the beginning of the next calendar month; except as otherwise indicated on your order form. For any annual subscription that automatically renews, if you have prepaid for an annual subscription then cancellation is effective immediately and Timpl will provide a prorated refund of the unused subscription term, which may include any discounts as applicable. Except as otherwise indicated on your order form, annual subscriptions will not automatically renew. If you purchase an annual subscription that automatically renews, you acknowledge and agree that your subscription will automatically renew and Timpl will charge you on a recurring basis until you cancel your subscription and such cancellation goes into effect, which may not be until the next billing cycle. Except to the extent a different cancellation method is specifically indicated on your order form, to cancel your annual subscription auto renewal without incurring any charges, email your sales representative no later than 30 days prior to your renewal date.

Featured Employer: Timpl may offer some Employers “Featured Employer” status at its sole discretion, based on the number of ads and spend on eligible Sponsored Job campaigns. This program may be changed or removed at any time without notice.

Branded Boost: Timpl may offer some Employers the opportunity to purchase a Branded Boost subscription, subject to the payment terms specified in an order form. Branded Boost is a branding feature which displays the Employer’s company logo on job cards that appear on Timpl’s Homepage and search results page. The job card is a structured summary or snapshot of a Job Ad.

4. Candidate Management Features

General: When you use Timpl’s candidate management tools (e.g., using the interface where you can view and manage your candidate data (your “Employer Dashboard”)), you agree Timpl may make available functions allowing you to take actions regarding the Job Seeker, such as tools for setting up interviews, viewing resumes, and rejecting candidates. If you use Timpl’s candidate management tools, Timpl may compile a candidate’s application materials into a single document or webpage and may add functions into corresponding emails. Timpl may also enable a chatbot for Job Seekers to apply to your Job Ad by answering questions, with their answers presented as a job application. Additionally, Timpl may activate its relay function for your Job Ads and send applications to your provided email address. Timpl may use your data from interactions with materials (Job Ads, resumes, applications, interviews, messages) on the Site or ATS for data analysis, quality control, or to improve programs and services, including search results. Timpl may store such information regardless of whether a job vacancy has been filled.

Automations: You may instruct Timpl to send automated messages, including rejections or interview invitations. You may be given the option to instruct Timpl to send out rejection notices if a Job Seeker has not answered the questions in the manner set forth in the online instruction, or if you set their status to “rejected”. If you choose such an option, such candidates will receive rejection notices and will be set to rejected in your candidate dashboard. Similarly, you may be given the option to use candidate management tools that automate interview scheduling. If you choose such an option, Job Seekers will be scheduled for interviews and invited to interviews on your behalf via email based on whether information the Job Seeker has provided to Timpl (e.g., answers to screener questions, resume) matches criteria you have set. You acknowledge that Timpl acts only as a mechanical transmitter for these communications and has no discretion in their content or delivery. You are solely responsible for your hiring decisions. You are also responsible for confirming whether any interviews were scheduled, or for rescheduling or canceling interviews if necessary. By using these and other candidate management tools, you acknowledge and agree that Timpl is not procuring employees for Employers or procuring opportunities to work for Job Seekers, and that Timpl does not act as your employment agency or agent by offering these candidate management tools.

Your Content and Screening Process: Whether you are using the Site directly or any ATS, you are responsible for the contents of your emails, application form, screener questions or their format, criteria you set for inviting candidates to interview, Company Pages that you create, update, or manage, any messages that you send or otherwise, and your application and screening process. You are responsible for ensuring that your selection criteria are job-related and consistent with business necessity, for selecting alternative criteria when appropriate, that you do not pose “disability-related inquiries” or medical inquiries in violation of the law, and that you do not screen out people with disabilities or members of any protected category under the law. You agree that Timpl is not responsible for your User Content or hiring practices and disclaims all liability for such content or practices, including as to whether such content or practices are legal.

Record Retention: You are responsible for your own compliance with any applicable record-retention requirements. Timpl is not responsible for maintaining or storing employment records, application materials, or data on your behalf. Timpl may allow you to delete candidate and application data from your dashboard. Deleting this information may be irreversible, and you will lose access to it on Timpl.

Matches: Timpl may present Job Seeker Resumes which match Job Ads you have posted, or present Job Ads to matching Job Seekers. To generate matches, Timpl uses data collected through our Site from both Employers and Job Seekers. This includes Job Ads, Resume, application materials (including responses to screener questions), and user activity on the Site (such as searches run and Job Ads clicked on and applied to). You are free to disregard such matches and are ultimately responsible for your sourcing and screening decisions.

Candidate Summaries and Display: Timpl offers Candidate Summaries, using information from both the Job Seeker and your Job Description. These summaries are not employment recommendations. Employers must review the full application and not base employment decisions solely on summaries. Timpl may verify Job Seeker skills or certifications, but does not guarantee accuracy of these verifications. Employers are responsible for verifying information on the Site. Timpl may offer functionality that groups candidates based on whether they meet or may meet Employers’ criteria, based on text in their resumes or answers to screener questions. In all cases, Employers can view any applicant at any time, and Timpl makes no decisions about any applicant. You agree that such functionality does not constitute or contribute to a decision, and is not a substitute for human discretion and review. You agree not to use any Timpl-provided functionality, summary, score, or other content as the sole factor, as a factor weighted more than other factors, or to modify or overrule conclusions derived from other factors, in your decision-making, recruitment, or hiring processes.

Your Collection of Demographic Data: Timpl may offer functionality permitting you to request demographic information, including disability status, from applicants to your Job Ad. If you use such functionality, you represent that you are a federal contractor or subcontractor who is required to seek disability status information from job applicants for the purpose of complying with the Department of Labor’s Office of Federal Contract Compliance Programs (“OFCCP”) requirements. You acknowledge that this functionality is presented without warranty, and compliance with any OFCCP or other governmental record-keeping requirements remains your sole responsibility.

If you include voluntary self-identification questions for Job Seekers along with your application materials, you are solely responsible for compliance with applicable laws related to such questions, including the content and format of the questions and your use of the Job Seekers’ responses.

Timpl’s Collection of Demographic Data: Timpl may give Job Seekers the opportunity to provide certain demographic information to Timpl, such as race and ethnicity, gender, age, LGBTQ+ community membership, and disability status, as well as whether they have an arrest or conviction record (“demographic data”). This Timpl demographic data survey is separate from any voluntary self-identification questions provided by Employers. You agree that Timpl may collect demographic data from Job Seekers applying to your Job Ad using Timpl’s demographic survey, and that Timpl may use information from that survey to evaluate and improve our services. You further agree that you as an Employer have no ability, right, or entitlement to view or access demographic data collected via the Timpl demographic data survey pertaining to any Job Seeker or related to any employer by any means including civil discovery, subpoena, or any other legal process without their permission. Timpl disclaims any warranty regarding the demographic composition of Job Seekers applying to any particular job.

Notifications; No Guarantees: Timpl doesn’t guarantee email or application delivery, or error-free data transmission/storage. You’re responsible for checking your Employer Dashboard for applications and info. Timpl may provide application notifications, but they are a courtesy; do not rely on them. In the event a message being sent is intended for a closed account, these messages will not be deliverable. If you do not feel comfortable sending a message through Timpl’s relay functions, please contact the Job Seeker via another method. Timpl sends applications to the contact information you provide, but Timpl cannot verify this information. If you provide incorrect contact information, you are responsible for correcting it, responding appropriately, or taking any necessary steps to protect Job Seekers’ privacy. Timpl disclaims liability for notifications.

Verification: You acknowledge that as part of its efforts to combat fraud and spam, Timpl may require that users verify their email address, including Job Seekers applying to your job. However, email verification is not guaranteed. You are responsible for your use of any software that rejects applications from unverified email addresses.

Personal Data Transfers: Should you post any Job Ads for Job Seekers in any country where the cross-border transfer of Personal Data is regulated, you agree to comply with all applicable laws regarding such transfers, including obtaining necessary consents and providing adequate safeguards. Timpl disclaims all liability for any non-compliance by you in this regard.

5. Prohibited Activities for Employers

In addition to other prohibitions in these Terms, you shall not: (a) post discriminatory, misleading, or illegal job listings; (b) post fake jobs, impersonate others, or engage in fraudulent schemes; (c) attempt to scrape, harvest, or extract data from the Site without permission; (d) use automated scripts, bots, or tools to post jobs, submit applications, or monitor content; (e) use the Site to compete with Timpl or develop similar services; (f) reverse engineer, decompile, or disassemble any part of the Site; (g) infringe on Timpl's intellectual property; or (h) engage in any activity that harms Timpl's reputation or operations.

Timpl reserves the right to report any suspicious or illegal activity to authorities and to cooperate fully with any investigation.

Section C: General Terms for All Users

You must be at least 18 or the age of majority in your U.S. jurisdiction to opt-in to the marketplace. Suspended users may not reuse Services without written permission from Timpl Connect.

 

1. User Conduct Rules

You must use the Platform responsibly and in compliance with all applicable laws. Prohibited activities include, but are not limited to:

• Posting discriminatory, misleading, or illegal job listings (e.g., those violating equal employment opportunity laws).
• Posting fake jobs, impersonating others, or engaging in fraudulent schemes.
• Attempting to scrape, harvest, or otherwise extract data from the Platform without express permission.
• Using automated scripts, bots, or other tools to post jobs, submit applications, or monitor content.
• Uploading viruses, malware, or other harmful code.
• Interfering with the Platform's operation or security.
• Harassing, threatening, or abusing other Users.
• Violating intellectual property rights.
• Engaging in commercial activities not authorized by Timpl.

We reserve the right to:

• Remove any content that violates these Terms.
• Suspend or ban accounts for repeated or severe violations.
• Report suspicious or illegal activity to relevant authorities.

Users who violate these rules may be subject to legal action, in addition to Platform sanctions.

2. Account & Data Policies
• Job Seekers: Must opt into the Marketplace to create an account, upload a resume, or apply for jobs, as detailed in Section 5. To create an account, job Seeker must provide accurate name, verified email or phone number r and resume.
• Clients: Must provide accurate corporate name, address, website and user contact information. For sponsored jobs, clients will provide credit card billing and contact information.
• Passwords: All users must use strong passwords, secure accounts, and notify Timpl Connect of unauthorized access (email: connect@Timpl.com). Timpl Connect may suspend or terminate accounts for violations. See “Prohibited Activities”. without liability.

 

3. IP Ownership

Employer owns their own job content.

Timpl owns all platform infrastructure, design, features, and code.

User-submitted content grants Timpl a worldwide, non-exclusive, royalty-free, perpetual license to use for the purpose of operating and promoting the platform.

You agree not to infringe Timpl's IP, and Timpl may pursue legal remedies for violations.

4. Limitation of Liability

Timpl provides the Platform on an "as-is" and "as-available" basis. To the fullest extent permitted by law, Timpl is not responsible for:

• The accuracy, legitimacy, or quality of job postings or User-submitted content.
• Any outcomes related to hiring, job offers, rejections, or employment decisions.
• Interactions between Users, whether on the Platform or offline.
• Any indirect, incidental, consequential, or punitive damages arising from use of the Platform.

Our total liability for any claim shall not exceed the amount paid by the User for Services in the preceding 12 months.

Timpl disclaims all warranties, express or implied, including merchantability and fitness for a particular purpose.

5. Indemnification

You agree to indemnify, defend, and hold harmless Timpl, its officers, directors, employees, and agents from any claims, damages, losses, liabilities, and expenses (including attorneys' fees) arising from: (a) your use of the Platform; (b) your violation of these Terms; (c) your User Content; or (d) your violation of any law or third-party rights.

6. Termination Clause

Timpl may terminate or suspend a User's access to the Platform at any time, with or without notice, for violations of these Terms or for any other reason deemed necessary to protect the integrity of the Site.

Users may request termination of their account at any time by contacting connect@timpl.com. Upon termination, all licenses and rights granted under these Terms will cease, but obligations (e.g., payment for Services) will survive.

7. Changes to Terms

We may update these Terms from time to time. Continued use of the Platform after changes constitutes acceptance of the updated Terms. We will notify Users of material changes via email or on the Site.

8. Severability

If any provision of these Terms is held invalid or unenforceable, the remaining provisions shall remain in full effect.

9. AI-Generated Content

Any AI-Generated Content provided by Timpl is for informational purposes only and is not guaranteed to be accurate or error-free. You use it at your own risk and are responsible for verifying its content.

10. Anti-Competitor Provisions

You agree not to use the Platform to develop, benchmark, or create competing products or services. Prohibited activities include data mining, scraping, or any form of competitive intelligence gathering. Timpl reserves the right to seek injunctive relief for violations.

Section D: Additional Terms and Policies

D.1 Timpl API Terms

If you access or use any Timpl Application Programming Interface (API), including accessing and using the Site or any of the Timpl Apps or any Applicant Tracking System (ATS) through an API, you agree to be bound by the Timpl API Terms below as well.

Timpl grants you a limited, non-exclusive, non-transferable, non-sublicensable license to access and use the Timpl API solely for your internal use to develop, test, and support your Integration, and to distribute or allow End Users to access your Integration, provided you comply with all API Documentation and these Terms. You may not use the Timpl API for any other purpose without Timpl’s prior written consent. You may not share your API key with any third party, and you are responsible for all use that occurs under your API key, including any charges or liabilities incurred due to unauthorized use or access. You agree not to use the Timpl API in any way that is unlawful or harms Timpl, its service providers, End Users, or any other person. Timpl may tell you about any such harm, even if confidential, if Timpl believes it is reasonably necessary to enforce or protect its rights. Timpl may modify or discontinue the Timpl API at any time. You acknowledge that Timpl may monitor your use of the Timpl API and may use data related to your or End Users’ use in an aggregate or anonymized manner, including to compile statistical and performance information. You agree to Timpl’s use of this data as described in our Privacy Policy.

D.2 Timpl Ads Program Terms

These terms apply to Job Ads on the Site (including Job Ads you post through Timpl and Job Ads Timpl displays with content from you). You agree that by posting a Job Ad on Timpl, including through Employer Assist, you authorize Timpl to promote the Job Ad (for example, by highlighting the fact that a Job Seeker can apply easily, that the Job Ad is new, or by showing the Job Ad in search results on the Site and on other content you have provided to Timpl).

You shall pay for Job Ads in the currency specified by Timpl, at the rate specified on the Site or an IO. You are responsible for maintaining the security of your billing information and acknowledge that you are fully responsible for all charges related to your account, including any unauthorized charges. For Job Ads with a specified duration, you shall be charged the amount listed on the Site or an IO, regardless of whether you pause the Job Ad or it fails to attract Job Seekers. For Job Ads with no specified duration (e.g., “budgeted Job Ads”), you shall be charged for all clicks up to the specified budget cap. You acknowledge that Timpl does not guarantee that a budgeted Job Ad will receive a certain number of impressions, views, or applications, or any at all. Timpl may move any unpaid balance you have as an Employer to any other Timpl account (e.g., sponsored Job Ad balance to pay-per-application balance). Timpl may offer advertising programs in addition to, or as a replacement for, the current Job Ads program. You agree that by using such advertising programs, your use is governed by the applicable terms for such programs (which may be different from these Terms).

D.3 Limitation of Liability

To the full extent permissible by law, Timpl will not be liable for any damages of any kind arising from the use of the Site or from any information, content, materials, products (including software) or services included on or otherwise made available to you through the Site, including, but not limited to direct, indirect, incidental, punitive, and consequential damages, unless otherwise specified in writing. Certain state laws do not allow limitations on implied warranties or the exclusion or limitation of certain damages. If these laws apply to you, some or all of the above disclaimers, exclusions, or limitations may not apply to you, and you might have additional rights.

D.4 Indemnification

You agree to defend, indemnify and hold harmless Timpl and its affiliates, and their respective officers, directors, employees, agents, contractors and suppliers, from and against any and all claims, liabilities, damages, losses, costs and expenses, including attorney’s fees, arising out of or in any way connected with: (i) your access to or use of the Site; (ii) your violation of these Terms; (iii) your violation of any third party right, including without limitation any intellectual property right, publicity, confidentiality, property or privacy right; or (iv) any claim that one of your User Submissions caused damage to a third party, including without limitation claims that your User Submissions are false, misleading or inaccurate.

D.5 Data Processing Agreement

This Data Processing Agreement (“DPA”) is incorporated into the Terms and applies where Timpl processes Personal Data on behalf of the User as a Processor.

 

 

Controller to Processor Data Processing Addendum

This Data Processing Addendum (“Addendum”) between You and the Timpl entity acting as Processor under Applicable Data Protection Law, is incorporated into our Terms of Service, and solely applies to limited situations where Timpl acts as a Processor of Client Personal Data on your behalf (as Controller).

 

1. Scope and Applicability

 

1.1 This Addendum applies where and to the extent that Timpl processes Client Personal Data on behalf of the Client as a Processor (or Service Provider) under Applicable Data Protection Law in the course of providing the Services pursuant to the Agreement.

 

1.2 The nature, purpose and subject matter (including duration) of the processing, the types of Client Personal Data and categories of data subjects, are described in Appendix A to this Addendum.

 

1.3 The Client is the Controller of Client Personal Data and Timpl shall process Client Personal Data only as a Processor acting on behalf of the Client and in accordance with the Client’s documented instructions.

 

1.4 The Parties agree to comply with the following provisions with respect to any Client Personal Data processed under the Agreement.

 

1.5 This Addendum forms part of the Agreement. Except as modified below, the terms of the Agreement shall remain in full force and effect. Terms used but not defined in this Addendum shall have the same meaning as set forth in the Agreement.

 

2. Processing of Client Personal Data

 

2.1 Timpl shall only process Client Personal Data for the purposes of the Agreement and in accordance with Client’s documented instructions (including with regard to transfers of Client Personal Data to a third country if applicable). The Agreement and this Addendum constitute Client’s complete instructions to Timpl regarding the processing of Client Personal Data at the time of signature of this Addendum. Any additional or alternate instructions must be agreed upon separately by the parties in accordance with the change procedure in the Agreement.

 

2.2 If Timpl is required by applicable law to process Client Personal Data other than as instructed by Client, Timpl shall inform Client before such processing occurs, unless the law prohibits such information on important grounds of public interest. Timpl shall immediately inform Client if, in Timpl’s opinion, an instruction infringes Applicable Data Protection Law, in which case Timpl is entitled to refuse to carry out the relevant processing.

 

2.3 Timpl shall ensure that access to Client Personal Data is strictly limited to those individuals who need to know or access the Client Personal Data for the purposes of the Agreement, and to comply with Applicable Data Protection Law in the context of that individual’s duties.

 

2.4 Timpl shall ensure that all such individuals are informed of the confidential nature of the Client Personal Data, have received appropriate training on their responsibilities and are subject to confidentiality undertakings or professional or statutory obligations of confidentiality.

 

3. Confidentiality

 

Timpl shall treat Client Personal Data as strictly confidential and shall not disclose it to any third party except as permitted under this Addendum or the Agreement, or as required by law.

 

4. Security

 

4.1 Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing of the Client Personal Data, as well as the likelihood and severity of risk to individuals, that Timpl’s implementation of and compliance with the security measures set out in Appendix B (“Technical and Organizational Security Measures”) are sufficient to provide a level of security appropriate to the risk in respect of the processing of the Client Personal Data; and

 

4.1.2 the Technical and Organizational Security Measures implemented pursuant to this clause 4 and Appendix B are subject to technical progress and development and that Timpl regularly reviews and may update or modify them from time to time in order to ensure that the processing of Client Personal Data is performed in accordance with this Addendum and Applicable Data Protection Law.

 

4.2 Personal Data Breach

 

If Timpl becomes aware of an actual or suspected Personal Data Breach of Client Personal Data, Timpl will notify You without undue delay. Timpl will provide You with such information, assistance, cooperation , and taking into account the nature of the services provided and the information available to Timpl, take reasonable commercial steps to: (i) investigate and mitigate the Personal Data Breach and (ii) assist with respect to Your breach notification obligations under any Applicable Data Protection Law. The Parties agree to coordinate in good faith on developing the content of any related public statements and any required notices to the affected data subjects and/or the appropriate regulator in connection with a Personal Data Breach, provided that nothing in this clause shall prevent either party from complying with its obligations under Applicable Data Protection Law.

 

5. Audits and Inspection

 

Upon written request, Timpl shall make available to You, no more than once annually and strictly at your own cost, information reasonably necessary to demonstrate Timpl’s compliance with its obligations under this Addendum and Applicable Data Protection Law. You shall be solely responsible for determining whether the Services and Timpl’s Security Measures as set forth in Appendix B will meet your needs, including with respect to any Data Protection Laws.

 

6. Data Subject and Supervisory Authority Requests

 

To the extent required under Applicable Data Protection Law and taking into account the nature of the services provided, Timpl shall:

 

6.1 provide such assistance to You as is reasonably requested with respect to Your obligations to comply with requests from Your data subjects to exercise their rights under Applicable Data Protection Law. Timpl shall notify You without delay upon receipt of any request by a data subject to exercise his or her rights under Applicable Data Protection Law in respect of any Client Personal Data. Timpl will not independently respond to such requests from Your data subjects except where otherwise required by Applicable Data Protection Law. You undertake to inform Timpl (as the processor / service provider) of any data subject (or consumer) request received  and shall provide Timpl with the necessary information to allow Timpl  to comply with the request when required to do so; and

 

6.2 notify You of all enquiries or communications from a competent supervisory authority that Timpl receives which relate to Client Personal Data processed in connection with providing the services and under this Addendum and the Agreement unless prohibited from doing so at law or by a regulator. You shall be responsible for all communications or correspondence with the competent supervisory authority in relation to Your role as Controller of Client Personal Data under Applicable Data Protection Law and, to the extent permitted by law.

 

7. Privacy Impact Assessments and Prior Consultation

 

To the extent required under Applicable Data Protection Law and taking into account the nature of the services provided and the information available to Timpl, and to the extent You do not otherwise have access to the relevant information, Timpl shall provide reasonable assistance to You as reasonably requested with respect to Your obligations to conduct privacy / data protection impact assessments with respect to the processing of Client Personal Data.

 

8. Subprocessors

 

You generally authorize the engagement of Subprocessors by Timpl and a list of  existing Subprocessors (to the extent that Subprocessors shall be used) may be made available on request. Timpl shall enter into a written agreement with each Subprocessor(s) that imposes on the Subprocessor the same data protection obligations that are imposed on Timpl pursuant to this Addendum. You shall promptly, and in any event within 10 business days, notify Timpl in writing of any reasonable objection to such changes / appointment. You acknowledge that Timpl’s Subprocessors are essential to provide the services and that if You object to Timpl’s use of a Subprocessor, then notwithstanding anything to the contrary in the Agreement, Timpl will not be obligated to provide the services to You for which Timpl uses that Subprocessor and any adjustments required by You shall be at your cost. Any disagreements between the Parties shall be resolved via the contract dispute resolution procedure.

 

9. Transfers

 

9.1 Transfers of EEA/Swiss Data

 

To the extent that GDPR and complementary data protection laws in EU member countries (“EU Data Protection Law”) applies to the processing of Client Personal Data, Timpl agrees that it will not transfer Client Personal Data out of the EEA and/or Switzerland to a country that has not been identified by the European Commission or a Supervisory Authority under EU Data Protection Law as a country that provides an adequate level of data protection except where Timpl has ensured appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission unless otherwise required by applicable law. Timpl and You hereby enter into the Standard Contractual Clauses (as further set out in the Schedule to this Agreement) in respect of such transfers.

 

9.2 Transfers of UK Data

 

Subject to subsection 9.4 below, the Parties shall rely on the UK Standard Contractual Clauses as amended from time to time by the Information’s Commissioner Office (the “UK SCCs”), to protect Client Personal Data being transferred from the United Kingdom (UK) to a country outside the UK not recognized as providing an adequate level of protection for personal data. You, acting as data exporter, shall execute, or shall procure that Your relevant entities execute, such UK SCCs with the relevant Timpl entity or a third-party entity, acting as a data importer.

 

9.3 Transfers of non-EEA/Swiss Data

 

In the event that Client Personal Data is to be transferred outside the country of origin in connection with the provision of Services under the Agreement and this country is not located within the EEA, Switzerland or the United Kingdom, the Parties will work together expeditiously and in good faith to establish the appropriate transfer mechanism to be implemented, as required by applicable Data Protection Law.

 

9.4 Transfers of non-EEA/Swiss/UK Data

 

Timpl self-certifies to and complies with the EU-U.S. Data Privacy Framework program (EU-U.S. DPF  (which is detailed here: https://www.dataprivacyframework.gov/), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF), as administered by the US Department of Commerce, and Timpl shall during the term of the Agreement maintain its self-certification to and compliance with the Frameworks (or successor frameworks) with respect to the Processing of Client Personal Data that is transferred from the EEA, UK or Switzerland to the United States, and provide Customer Personal Information with at least the same level of protection as required under the EU-U.S. DPF, including without limitation the Onward Transfer Principle. Timpl further agrees to process Client Personal Data as Processor only (i) for the limited and specified purposes consented to by the data subjects and set out in this Agreement (ii) in accordance with this Agreement, and the EU-U.S DPF Principles and (iii) taking into account the nature of the processing, assists the controller in responding to individuals exercising their rights under the DPF Principles.

 

9.5 Transfer Mechanism

 

In the event that the transfer mechanisms agreed by the Parties herein are amended, replaced, or cease to be authorized as a means to provide “adequate protection” with respect to transfers of Client Personal Data, the Parties will work together expeditiously and in good faith to establish another valid transfer mechanism and/or implement supplementary measures as needed to establish appropriate safeguards for such data. Any impacts on the terms of the Agreement and the provision of the services caused by such new requirements will be addressed by the Parties in accordance with Section 16 (Changes in Laws) below.

 

10. California Consumer Privacy Act

 

10.1 The following shall apply to the extent that the CCPA is applicable. Timpl shall: (i) not sell or share any Client Personal Data (as defined by CCPA); (ii) not retain, use or disclose any such Client Personal Data for any purpose other than business purpose(s) specified in accordance with the Agreement, unless permitted by law; (iii) not retain, use or disclose such Client Personal Data outside the direct business relationship between Timpl and Client, as set forth in the Agreement, unless otherwise permitted by law; (iv) provide the same level of privacy protection required of Client by the applicable obligations under CCPA for Client Personal Data ; (v) notify the Client if it can no longer meet its obligations under the CCPA  and will work with the Client to take reasonable and appropriate steps to stop and remediate unauthorized use of Client Personal Data.

 

10.2 Client agrees that execution of the Agreement by Timpl shall be deemed to constitute any certification that is required under applicable Data Protection Laws to the restrictions on sale, retention, use, or disclosure of Client Personal Data.

 

11. Use of Business Contact Information

 

Each Party consents to the other Party using its Business Contact Information for contract management, payment processing, service offering, and business development purposes, including business development with partners, and such other purposes as set out in the using Party’s global data privacy policy (copies of which shall be made available upon request). For such purposes, and notwithstanding anything else set forth in the Agreement or this Addendum with respect to Client Personal Data in general, each Party shall be considered an independent Controller with respect to the other Party’s Business Contact Information and shall be entitled to transfer such information to any country where such Party’s global organization operates.

 

12. Disclaimer of Liability

 

Timpl will not be liable for any claim brought by a data subject arising from or related to Timpl or its Affiliates action or omission to the extent that Timpl was acting in accordance with Your instructions.

 

13. Governing Terms

 

13.1 This Addendum represents the entire agreement between the Parties in relation to its subject-matter and all previous representations, agreements and statements are hereby excluded.

 

13.2 For avoidance of doubt and without prejudice to the rights of any data subjects thereunder, this Addendum and any Standard Contractual Clauses (or other data transfer agreements) that the Parties or their affiliates may enter into in connection with the services provided pursuant to the Agreement will be considered part of the Agreement and the liability terms set forth in the Agreement will apply to all claims arising thereunder.

 

13.3 In the event of any conflict or ambiguity between terms of this Addendum and terms of the Agreement, the terms of the Addendum shall prevail. In the event of any conflict or ambiguity between terms of this Addendum and terms of the Standard Contractual Clauses, the terms of the Standard Contractual Clauses shall prevail. All other terms and conditions within the Agreement remain unchanged and in full force and effect.

 

14. Severability

 

Each and every provision of this Addendum is severable and distinct from the others and if at any time any provision of this is or becomes illegal, invalid or unenforceable in any respect under the law of any jurisdiction, that will not affect or impair the legality, validity or enforceability in that jurisdiction of any other provision of this Addendum.

 

15. Notices and Variation

 

All notices, consents, demands, and other communications required or permitted to be given by either Party under this Addendum shall be in writing. No amendment to this Addendum will be effective unless in writing and signed by both Parties.

 

16. Changes in Laws

 

In the event of (i) any newly enacted Applicable Data Protection Law, (ii) any change to an existing Applicable Data Protection Law (including generally-accepted interpretations thereof), (iii) any interpretation of a new or existing Applicable Data Protection Law by You, or (iv) any material new or emerging cybersecurity threat, which individually or collectively requires a change in the manner by which Timpl is delivering the services to You, the Parties shall agree in writing upon how Timpl’s delivery of the services will be impacted and shall make equitable adjustments to the terms of the Agreement and the Services in accordance with any change procedures as may be agreed to by the Parties.

 

17. Governing Law and Jurisdiction

 

17.1 The jurisdiction of this Addendum shall be the jurisdiction of the Agreement. In the event there is no jurisdiction clause in the Agreement, any dispute or claim in connection with this Addendum shall be governed by and construed in accordance with:

 

17.1.1 in the case of the contracting Timpl entity being in the US, the laws of the state of Georgia,

 

17.1.2 in the case of the contracting Timpl entity being outside the US, the laws of Georgia, and each of the Parties hereby consent to the exclusive personal jurisdiction (including non-contractual disputes or claims) of the federal or state courts located in Gwinnett County, Georgia, U.S.A, if the Data Processor is located in the United States of America, or Duluth, Georgia, if the Data Processor is located elsewhere.

 

 

APPENDIX A

 

Data Importer Name: Timpl Careers Group, LLC

Address: 4227 Pleasant Hill Rd, Building 15, Duluth, GA 30096

Contact: Timpl Careers Group, LLC

ATTN: Data Protection Officer

4227 Pleasant Hill Rd, Building 15, Duluth, GA 30096

Relevant Activities: Timpl is engaged in the business of providing a web-based platform and related services for job seekers to upload resumes and search for jobs, and for businesses to post jobs, link jobs and locate candidates (the “Timpl Services”).

Role: Processor

 

 

Description of Transfer

 

Categories Data Subjects

The personal data transferred concern the following categories of data subjects: Individuals about whom Personal Data is provided to Timpl via the Services by (or at the direction of) Client, which may include without limitation Client’s or its Affiliates’ employees, contractors, and end users.

 

Purposes of the transfer(s)

The transfer is made for the following purposes: Timpl will only process Client Personal Data as Processor for the following purposes and only when necessary and proportionate to comply with the Client’s instructions: Providing and updating the Services as licensed, configured, and used by Client and its users, including through Client’s use of Timpl settings, administrator controls or other Service functionality; Securing and real-time monitoring the Services; Resolving issues, bugs, and errors; Providing Client requested support, including applying knowledge gained from individual Client support requests to benefit all Timpl Clients but only to the extent such knowledge is anonymized as set out in the Agreement and this Appendix A detailing the subject matter, nature, purpose, and duration of Personal Data Processing in the Controller to Processor capacity; Any other documented instruction provided by Client and acknowledged by Timpl as constituting instructions for purposes of this Addendum.

 

Categories of Personal Data

Depending on the Services you use, the personal data transferred may primarily concern the following categories of data

Timpl Account Information: Data associated with the end user’s Timpl account, password, company name, and Client’s preferences. This will include: Timpl unique user ID, social media login (optional), email address, and display name.

Client Authentication Data: This may include username and password unless Single Sign On (SSO) is used.

Interview Content: This may include video, audio, transcripts, interview notes, and interview questions.

Chat Messages: Content sent between users on an Timpl hosted video platform (e.g. Timpl Interview)

Calendar Information: This may include meeting schedules and event information made available through Client controlled integrations (e.g. Outlook, Google Calendar).

Candidate Materials: Data that Job Seekers disclose to employers in the hiring process. This data may include applications, which generally contain job seeker resumes, screening data (such as answers to screener questions), cover letters, and any other data a job seeker agrees to share with Employers when they express interest in employment opportunities, for example, by applying or registering for events.

Employer Materials: This may include contact details to receive applications and messages, recruiter profiles, disposition information and employers’ notes about candidates, and candidate preferences.

Interview Metadata: This may include information about your interview product usage, such as frequency, quality, time zone, attendance, and duration of events, as well as network activity and sample text you save to dash.

Device and Network information: Information about your desktop and mobile device, which may include network data, operating system, user agent, MAC / IP address, and service logs.

User Feedback and Satisfaction Data: This may include ratings and plain text feedback on how we can improve our services.

Frequency of the transfer (e.g. whether the data transfer is a one-off or continuous basis)

 

Special categories of personal data (if appropriate)

Special categories are not required to use the Services. Such special categories of data include, but may not be limited to, Personal Data with information revealing racial or ethnic origin, political opinions, religious or philosophical belief, genetic or biometric data, data concerning your health or sexual orientation. To the extent such sensitive data is submitted, it is determined and controlled by Client in its sole discretion.

 

 

Appendix B

 

TECHNICAL AND ORGANISATIONAL SECURITY MEASURES

In accordance with the Agreement, the Data Processor will adopt and maintain appropriate (including organizational and technical) security measures in dealing with Personal Data in order to protect against unauthorized or accidental access, loss, alteration, disclosure or destruction of such data, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.

In determining the technical and organizational security measures required under the Agreement, the Data Processor will take account of the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.

The Data Processor will maintain the following specific security measures, as applicable:

 

ORGANIZATION OF INFORMATION SECURITY – Management direction and support for information security

Policies for information security are documented and published.

Chief Security Officer is appointed with responsibility for coordinating and monitoring security rules and procedures.

Security roles and responsibilities are defined and allocated.

Maintained information on third-party contact information to be used to report a security incident, such as Law Enforcement, relevant government departments, vendors, and Information Sharing and Analysis Center (ISAC) partners.

 

HUMAN RESOURCE SECURITY – Employee responsibilities for information security

 

Background checks are conducted on candidates for employment in accordance with relevant laws, regulations and ethics based on job title and location.

Terms and conditions of employment for every employee require acknowledging Company Guidelines which include Acceptable Use Policy, Employee Privacy Notice and Code of Conduct.

Information security and privacy awareness, education, and training is conducted on hire and annually thereafter.

Formal disciplinary process is documented, communicated, and acknowledged by new hires and employees annually.

 

ASSET MANAGEMENT – Identification and management of organizational assets

Assets associated with data processing have been identified and an inventory is maintained.

Rules for acceptable use have been documented, communicated, and acknowledged by new hires and employees annually.

Sensitive data has been classified in terms of legal requirements to allow for access to be restricted.

 

LOGICAL SECURITY – Access control to information processing systems

Access to information and information processing facilities is limited and controlled to only that data minimally necessary to perform the users’ job duties.

A formal user registration and de-registration process is in place enforcing unique identification of users.

Allocation and use of privileged access rights are restricted and controlled.

Users are required to follow secure practices in the use of authentication information including password configurations providing for a minimum length of 10 characters. Password history of 12. Complexity requiring 3 out of the following 4 character types: Capital Letters, Lowercase Letters, Numbers, Special Characters.

Automatic time-outs of accounts if left idle, with identification and password required to reopen.

Automatic deactivation of user IDs when several incorrect passwords are entered.

Multi-factor authentication (i.e., requiring at least two factors to authenticate a user) for remote access over virtual private network (VPN) to any network, system, application, or other asset containing classified information.

 

PHYSICAL SECURITY – Access and environmental control of information processing areas

Security perimeters are defined and used to protect areas that contain restricted or confidential information and information processing facilities.

Secure areas are protected by entry controls to ensure only authorized personnel are allowed access.

Access to information processing facilities is logged and monitored by security.

Physical protections against natural disasters, malicious attacks, and accidents are applied.

 

OPERATIONS SECURITY – Secure operations of information processing facilities

Changes to information processing facilities are controlled.

Centrally managed anti-malware software to monitor and defend information processing facilities.

Logging enabled on information processing facilities to include detailed information such as event source, date, user, timestamp, source addresses, destination addresses with synchronized time sources.

Periodic internal and external penetration testing of information processing systems is performed to identify vulnerabilities. Identified vulnerabilities are addressed as part of the vulnerability management program.

A process to timely identify and remediate system, device, and application vulnerabilities through patches, updates, bug fixes, or other modifications to maintain the security of Personal Data.

 

NETWORK SECURITY – Security of information transmission

Use of industry standard firewall and encryption technologies to protect the gateways and pipelines through which the data travels (e.g. TLS/SSL).

Encryption of certain highly confidential data (e.g., personally identifiable information such as National ID numbers, credit or debit card numbers) at rest and when in transit across open networks in accordance with industry best practices.

 

APPLICATION SOFTWARE SECURITY – Information Security is designed and implemented within systems development

Separation of development, testing and operational environments.

Secure coding practices appropriate to the programming language and development environment are in use.

Error checking is performed and documented for all input, including for size, data type, and acceptable ranges or formats.

Verification of versions of software acquired from third parties are supported or appropriately hardened based on developer security recommendations.

Software development personnel receive OWASP training in writing secure code.

Static and dynamic analysis tools are used to verify that secure coding practices are being adhered to for internally developed software.

 

THIRD PARTY RELATIONSHIPS – Security of information and information processing facilities accessible by third parties

Information security requirements for mitigating risks associated with third party access to information and information processing facilities are agreed to in writing.

Third parties and third party services are assessed by security to identify security and data protection risks that must be addressed through either organizational or technical measures during contracting or implementation.

 

INCIDENT MANAGEMENT – Management of information security incidents

Responsibilities and procedures for incident management are documented to define the roles of personnel as well as the phases of incident handling.

Users are trained to report observed or suspected information security weaknesses and events to security immediately.

Response to security incidents are conducted in accordance with documented procedures and retrospectives are conducted.

Incident response exercises and scenarios are conducted periodically to maintain awareness and comfort in responding to real-world threats. Exercises test communication channels, decision-making, and incident responder’s technical capabilities using tools and data available to them.

 

AVAILABILITY – Redundancy of information processing facilities and backup of information

Information, software, and system information are backed up regularly and are tested periodically.

Backups are encrypted and replicated across geographic locations to provide for redundancy.

 

COMPLIANCE – Compliance with legal and contractual requirements and information security reviews

Relevant legal and contractual requirements are documented and kept up to date of information processing facilities.

Independent reviews of information security and its implementation are conducted on a periodic basis.

Technical compliance reviews of information systems are conducted on a periodic basis to identify compliance with organizational policies and standards.

 

Timpl Affiliate Acceptable Use Policy

Dated: October 17, 2025

This Acceptable Use Policy applies to all Users of the Site. Prohibited uses include any illegal, harmful, or competitive activities. Violations may result in termination and legal action.

 

Privacy and Cookie Policy

We’ve moved this section to our Privacy Center. Please visit our Privacy Center to view Timpl’s Privacy Policy. Cookies Settings Currently only available in the US.

Section E: Additional Provisions

• Acceptance of Terms: By using the Platform, you represent that you are at least 18 years old and have the authority to agree to these Terms.
• Entire Agreement: These Terms, along with our Privacy Policy, constitute the entire agreement between you and Timpl regarding the Platform.
• Governing Law: These Terms are governed by the laws of the State of Georgia, without regard to conflict of law principles.

For questions about these Terms, contact us at connect@timpl.com.