Privacy Policy

C2C Central ("C2C Central", "we", "us", or "our") provides a software platform for corp-to-corp staffing firms and bench consultants. This Privacy Policy explains how we handle personal data when you visit our website, evaluate the platform, or use C2C Central as a customer.

For most data that a firm stores in C2C Central — candidate records, submissions, and compliance documents — the firm is the controller and C2C Central acts as a processor on the firm's behalf. For our own website visitors and account holders, C2C Central is the controller.

Account and contact data: name, work email, phone number, company name, role, and login credentials managed through our authentication provider.

Platform data: bench candidate profiles, resumes, submissions, application activity, recruiter performance metrics, and immigration and compliance records that your firm chooses to store.

Usage data: pages viewed, features used, device and browser information, and IP address, collected to operate and improve the service.

Communications: messages you send us through sales, support, or demo requests.

To provide and operate the platform, including bench management, submissions, recruiter performance, and compliance tracking.

To authenticate users and enforce role-based access for Owners, Managers, and Recruiters.

To maintain audit logs of recruiter actions for performance reporting and compliance.

To respond to your requests, provide support, and process billing.

To secure the service, prevent abuse, and meet our legal obligations.

We do not sell personal data. We share data only with subprocessors that help us run the service — including cloud infrastructure, authentication, payments, and email delivery — under contracts that require them to protect it.

We may disclose data when required by law, to enforce our agreements, or to protect the rights and safety of users and the public.

Firm-level data isolation is absolute: one firm's data is never shared with, or made visible to, another firm.

We retain personal data for as long as your account is active or as needed to provide the service. When a firm or account closes, we delete or anonymize the associated personal data within a reasonable period, except where we are required to retain it for legal, tax, or compliance reasons.

Customers can request export or deletion of their data at any time, subject to legal retention requirements.

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing.

Where a firm is the controller of platform data, we will direct your request to that firm and support them in honoring it.

To exercise any right, contact us using the details below. We will respond within the timeframes required by applicable law.

For individuals in the European Economic Area and the United Kingdom, we process personal data under lawful bases including contract, legitimate interests, and consent, and we support the data subject rights granted by the GDPR.

For California residents, the CCPA gives you the right to know what personal information we collect, to request its deletion, and to opt out of any sale of personal information. We do not sell personal information.

Firms that require one can request a Data Processing Addendum. See our DPA at /legal/dpa.

We protect data with encryption in transit and at rest, strict role-based access control, absolute firm-level isolation, and full audit logging. See our Security page for details.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify account holders.

Questions about this policy or your data? Email us at hello@c2ccentral.com. We are headquartered in the United States.