1. Introduction

This Privacy Policy (the “Policy”) covers the processing of personal information by Obsidian BG Holdings LP and its group companies (including but not limited to “Lightcast, LLC,” “Lightcast Solutions Canada, Inc.” “Lightcast SRL Europe” and other companies) doing business under the Lightcast name (“we,” “us,” or “Lightcast”). Lightcast and all its group companies will have access to personal information covered by this Policy. This Policy applies whether you provided personal information directly to us or we obtained it from a third party. Lightcast provides expertise in job skills, talent insight, and labor market dynamics. Our services are compliant-by-design and meet requirements of the CCPA, GDPR, and other applicable laws.

2. Scope

This Policy applies to personal information we process in connection with our websites, products, and services, and to professional profile data we license to customers as part of our labor-market intelligence offerings.

3. What information we collect

Information you give us

Marketing Information: If you contact us about our services, download content from our websites, subscribe to alerts, or request a demo, we may collect your full name, contact information, and the organization with whom you are associated.
Job Application Information: When you apply for a job at Lightcast, we may collect your full name, contact information, employment history, educational history, financial information (such as salary, benefits, and tax information), and any other information you choose to share with us.
User Information: When you interact with our products and services, we may collect your full name, contact information, IP address, password, and the organization with whom you are associated. We do not intentionally collect sensitive personal information.
Service and API Data: When you use our services, we collect information and data that you upload, submit, or otherwise provide through our APIs or service platforms.

Information collected automatically online

Website Analytics: We collect information about your interactions with our website, including device and browser type, IP address, referring and exit pages, pages viewed, resources downloaded, and forms filled. We use cookies, web beacons, and similar technologies to analyze trends, administer the site, track movements around the site, and gather demographic information. Users can control cookies at the browser level or visit the Network Advertising Initiative Opt-Out to opt out of automated online marketing campaigns. We automatically honor Global Privacy Control (GPC) and other recognized Universal Opt-Out Mechanisms as valid opt-out requests.

Information from other sources

We may receive current and historic business contact information from third parties, publicly available sources, or customers. Categories may include full name, demographic information, business contact information, email addresses, phone numbers, current and historical employment and education information, and links to professional social media profiles (“Business Contact Information”). We do not intentionally collect sensitive personal information and do not use sensitive inferences for advertising.

We use this information to: (a) build and maintain our labor‑market intelligence database; (b) help customers analyze labor‑market trends, identify prospects, and enrich CRM records; (c) conduct research and create aggregated labor‑market reports; and (d) send marketing communications about our services.

We may share business contact information with customers as part of our services. We do not sell or share such information for cross‑context behavioral advertising. To opt out of marketing or exercise privacy rights under applicable laws, visit our web form here: https://privacyportal.onetrust.com/webform/0f61f895-d08d-410f-b96d-ecfd34fd42e3/8d4dfe0d-998d-4c1d-ab6d-4357670fa8e9

4. Legal grounds for processing personal data

Consent: Marketing Information, Job Application Information, and certain Website Analytics may be processed based on consent. You may withdraw consent at any time.
Contract: We process User Information as necessary to perform our contracts and deliver services.
Legitimate Interests: We process Business Contact Information and professional profile data where it is in our or our clients’ legitimate interests and these are not overridden by your rights (e.g., maintaining a searchable database of professional contacts and deriving statistical insights).
Legal Obligations: We process personal information to comply with applicable laws and regulations (e.g., preventing, investigating, and detecting crime or fraud).

5. How we use your information

Website Analytics

to administer our sites and deliver a personalized experience (e.g., maintain secure sessions without repeated sign‑ins);
to ensure proper functioning and improve efficiency;
to collect information regarding visits (including IP addresses) and accessed resources;
to analyze behavior and optimize site design and content.

Marketing Information

to market our products and services to individuals affiliated with existing or prospective client entities, including to provide promotional materials or offers;
to send marketing-related communications to individuals who have requested them, or to key roles at current or prospective clients who may be interested in Lightcast’s services;
to market via email, postal mail, social media platforms, telephone, and text or direct messages.

Job Application Information

to identify and interview candidates for employment;
to extend offers of employment and retain records in employee files.

User Information

to administer log‑ins (where applicable) to Lightcast products and services and deliver services under the agreed terms;
to respond to questions and provide support, including providing organizations with information about Lightcast services;
to send updates with news, offers, and product/service updates.

Product Improvement

to store and analyze data to evaluate, develop, and improve our products, services, and overall offerings;
to understand how users interact with our systems in order to enhance functionality, troubleshoot issues, and optimize the user experience;
to develop new features, algorithms, or services based on aggregated or analyzed usage trends.

Business Contact Information

Lightcast processes data so that it may be licensed on a subscription basis to organizations for their sales, marketing, analytical, research, or recruiting purposes, or to other organizations who may license it to their customers for the same purposes (“Partners”). Specifically, we process this data:

to build our labor-market intelligence database to enable analysis of labor market data, individual labor market participants, and identification of sales leads;
to enable clients to enrich CRM records and receive timely updates;
to undertake research and compile statistical aggregated reports;
to run our own marketing campaigns and promote our services.

In the course of these activities, data may be transferred to other countries. To ensure your information remains secure and is treated in accordance with applicable privacy laws, we implement appropriate legal safeguards for these cross-border transfers, including the use of approved data protection mechanisms such as Standard Contractual Clauses (SCCs) for Data Protection Agreements (DPAs).

6. Who we share information with

We share personal information with Lightcast companies, customers, subcontractors, service providers, government authorities, and potential investors as necessary to operate and deliver our services. A list of our service providers may be found here: https://trust.lightcast.io/

We may share personal information with third‑party service providers who help deliver our products and services (e.g., hosting, analytics). We require these providers to maintain confidentiality and use information only for services provided to us.

We may share personal information with other third parties: (a) to comply with legal obligations or respond to lawful requests; (b) to establish, exercise, or defend legal claims; (c) to protect vital interests; or (d) where we have your consent.

Some sharing may be considered a “sale,” “sharing,” or use for “targeted advertising” under certain U.S. state laws; corresponding opt‑outs are provided. We do not sell or share Business Contact Information for cross‑context behavioral advertising.

7. Duration of processing & securing your data

We retain personal information only as long as necessary for the purposes described in this Policy, taking into account the nature and sensitivity of the data, potential risk of harm from unauthorized use or disclosure, the purposes of processing, and applicable legal requirements.

We implement administrative, technical, and physical security measures to prevent unauthorized access. Despite these measures, no data transmission over the Internet can be entirely secure. You are responsible for maintaining the security of credentials used to access any Lightcast service or account and must report suspected unauthorized activity to us.

8. Your data protection rights

You may exercise rights under relevant jurisdictions using our online form. Where provided by law, we will respond without undue delay within the required timeframes; this may be extended in certain circumstances (e.g., where requests are complex or numerous). Due to the volume of requests, we do not accept requests via email and will redirect you to the form.

European data protection rights

EU/EEA/UK residents have rights of access, rectification, erasure, restriction, objection, withdrawal of consent, and data portability. If have any queries in relation to your rights or general privacy matters, you can email Lightcast at privacy@lightcast.io or email our Representative at eurep@itgovernance.eu. Please ensure to include our company name in any correspondence you send to our Representative

U.S. State Privacy Rights

Residents of California, Virginia, Colorado, Connecticut, and other states may have rights to know, access, deletion, correction, opt out, and non‑discrimination. We honor Global Privacy Control (GPC) and other recognized Universal Opt‑Out Mechanisms as valid opt‑out requests.

Canada Privacy Rights

Residents have rights to access, correction, deletion, opt‑out, and be forgotten under PIPEDA.

9. Protection of Children

We do not knowingly collect personal information from or about anyone under the age of 16. If a parent or guardian becomes aware that a child has provided us with information without consent, they should contact us at privacy@lightcast.io, and we will delete such information within a reasonable time.

Useful Links

Network Advertising Initiative Opt-Out: https://optout.networkadvertising.org

Data Subject Access Request Form: https://privacyportal.onetrust.com/webform/0f61f895-d08d-410f-b96d-ecfd34fd42e3/8d4dfe0d-998d-4c1d-ab6d-4357670fa8e9

Annual Request Metrics: https://legal.lightcast.io/lightcast-legal/privacy-policy

1 Updates & contact

We may update this Policy periodically. If this Policy changes, we will post an updated version on our website. We recommend regularly reviewing this page to remain aware of our practices; changes take effect upon posting.