Kenexa is a leading end-to-end provider of software, proprietary content, services and process outsourcing that enable organizations to more effectively recruit and retain employees. This ASP Privacy Policy applies only to the transfer of personally identifiable information ("Personal Information") received by Kenexa in any format through its hosted software, whether supplied directly by Kenexa customers or by employees or users of the hosted software anywhere in the world, including transfers from the European Economic Area (EEA) to the United States.

Kenexa abides by the EU Safe Harbor framework as set forth by the United States Department of Commerce regarding collection, use, and retention of data received from the European Union. For more information about Safe Harbor, go to www.export.gov/safeharbor/. Accordingly, we operate as a data processor for our customers. Kenexa's customers act as data controllers. Kenexa maintains only that Personal Information which its customers have asked it to process. This ASP Privacy Policy does not reflect the privacy practices of Kenexa's customers and Kenexa is not responsible for its customers' privacy policies or practices. Kenexa does not review, comment upon or monitor its customers' privacy policies or their compliance with their respective privacy policies, nor does Kenexa review its customers' instructions to determine whether they are in compliance with or conflict with the terms of a customer's published privacy policy.

Because it supplies a hosted system, Kenexa operates as a data processor for its customers. Kenexa's customers act as data controllers. Individual users involved in employment activities may interact directly with Kenexa's customers rather than with Kenexa. Kenexa provides its customers with the option of disclosing their relationship with Kenexa by providing notice to individual employees and candidates of the customer regarding the Kenexa technology that they use. Kenexa maintains only that Personal Information which its customers have asked Kenexa to process. It is the Kenexa customer's responsibility to ensure that the data the customer collects can be legally collected in the country of origin. The Kenexa customer is responsible for giving its employees, applicants and users the appropriate level of notification that Personal Information is being collected and maintained.

Kenexa will maintain Personal Information in accordance with this ASP Privacy Policy. If Kenexa decides to change this Policy, Kenexa will post the changes on this page so our customers and/or their employees, applicants and users are aware of what Personal Information Kenexa processes, how Kenexa uses it, and under what circumstances, if any, Kenexa discloses it. If at any point Kenexa decide to retain or use Personal Information in a different manner, Kenexa will notify its customers by way of email or by posting a notice on Kenexa's website for at least 30 days prior to the change in use. Customers, in turn, are responsible for their users and providing them a choice as to whether or not Kenexa uses their Personal Information in this revised manner.

We are a global corporation with operations in several countries. We have developed global data practices designed to assure Personal Information is appropriately protected. While our primary data centers are in the USA, we may transfer Personal Information to Kenexa offices outside of the United States. In addition, we may employ other companies and individuals to perform functions on our behalf. If we disclose Personal Information to a third party or to Kenexa employees outside of the United States, we will ensure that such party has agreed to abide by the Safe Harbor principles or is subject to the Data Directive, or can otherwise assure adequate protection of such Personal Information.