- [site] does not rent or sell your personally identifiable information to third parties.
- [site] does not share your contact information with other users or third parties without your consent.
- Any personally identifiable information that you provide to [site] will be secured with industry standard protocols and technology.
In speaking with their staff, I have been informed that their terms of service contains language that makes users "solely responsible for information posted on our Website" and that users "hereby assign to [site] your rights in any Non-Multimedia Content." They believe that those statements in the terms of service override the quoted privacy statements.
It seems to me that an uploaded resume is "personally identifiable information" and that it should be "secured with industry standard protocols and technology." If the resume is publicly downloadable on the Internet, that's the definition of unsecured. Would their position stand up to the California CCPA, or Europe's GDPR rules? The resumes appear to belong to users from around the globe.