- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
XING collects profiles, tracking, and contacts, personalizes and ads-targets you, and keeps data until you delete your account.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account and profile data, messages, photos, tracking, device IDs, city location, and sometimes contacts or LinkedIn data.
Read the exact line
Privacy policy
“Tracking involves the processing of login data (e.g. date and time of the visit, referrer, IP address, cookie ID, location data, product and version information about the browser or app used, device ID or data) and interaction data”
Training
They personalize jobs and contacts, build interest profiles, send newsletters, and with consent run ads and targeting off XING.
Read the exact line
Privacy policy
“Interest and usage profiles are created. In order to be able to show you recommendations, e.g. for jobs or contacts, and to suggest you as a valuable business contact or potential employee, we must have an idea of what your interests might be.”
Sharing
Other members, search engines if you allow it, advertisers, API partners, payment firms, and companies you apply to.
Read the exact line
Privacy policy
“We only pass your personal data on to third parties when this is required to fulfil our business purposes (i.e. in particular to perform the services we are obliged to provide you with, e.g. making your profile available to another user), when you have given your consent to this”
Kept
Most data stays until you delete your account; some applications last 6 months and support data up to 7 years.
Read the exact line
Privacy policy
“We delete this data when you delete your user account.”
Controls
You can hide some profile fields, unsubscribe from mail, withdraw ad tracking, and ask for access or deletion.
Read the exact line
Privacy policy
“You have legal rights available to you with regard to data access, rectification, , restriction of processing and objection to processing, as well as the right to data portability, amongst others.”
Fine print
The privacy policy is dated December 2025; paid memberships auto-renew. Terms on suing or closing accounts are not in this document.
Read the exact line
Privacy policy
“Your billing details are saved for payment and invoice processing when your user term is automatically renewed.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Adjust tracking opt-in for XING apps
XING settings / Opt-In Tracking Settings links in the privacy policy
Unsubscribe from newsletters
Notification settings in the social network or the link at the end of emails
Withdraw Leverage your application consent
Email datenschutz@new-work.se or the link in notification emails
Request access or deletion
Contact form; TalentService gdpr_xts@xing.com; applications xing-exchange@xing.com; DPO https://www.xing.com/support/contact/security/data_protection
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Premium users can see who visited their profile, and you cannot turn Clickpath off.
Read the exact line
Privacy policy
“This information about other users also applies to users who are not logged in but have been identified by XING using cookies and e-mail tokens.”
For example, if you open someone’s profile, they may later see that you looked at them.
With consent they and ad partners track you across sites and devices for ads.
Read the exact line
Privacy policy
“If you opt in, a cookie is set on your end device that enables us to recognise you on XING web pages even if you’re not logged in. The cookies have a lifespan of up to 2 years.”
For example, after you browse jobs on XING you might see matching ads on Facebook.
They can upload hashed emails and phones to Google or Meta so those platforms can target you.
Read the exact line
Privacy policy
“In addition to cookies and technical IDs, we use hashed information such as your e-mail address or phone number along with the aforementioned encoded user attributes and other technical IDs to create custom audiences.”
For example, Meta may match your hashed email and show you a XING ad in Instagram.
Someone else can upload your name, email, and phone from their address book.
Read the exact line
Privacy policy
“Users who already have access to your data can upload this information to XING.”
For example, a colleague can upload their phone contacts and your number lands on XING.
If you dislike profile-visit tracking, their answer is do not use XING.
Read the exact line
Privacy policy
“You are not able to deactivate this feature in your privacy settings. If you do not agree that other users may see that you have visited their profile, Business Page, etc., you should refrain from using the service XING.”
For example, there is no switch to browse profiles privately.
Deleting your account does not wipe private messages the other person still has.
Read the exact line
Privacy policy
“The recipients of your messages will not however have these conversations erased when you delete your user account. This data is only deleted in full once it has been deleted by both the sender and recipients.”
For example, a recruiter can still read your old chat after you leave XING.
Support tickets can be kept for up to seven years.
Read the exact line
Privacy policy
“Data we receive from you when contacting our customer service team is deleted in full 7 years following completion of the respective customer request at the latest.”
For example, an email you sent to help desk in 2025 could still be stored in 2032.
They keep city-level location, not your exact street.
Read the exact line
Privacy policy
“We do not save your precise location. We only store information about which cities you are in on a regular basis.”
For example, they may know you are often in Hamburg, not your office address.
You can stop marketing emails in settings or via a link in the email.
Read the exact line
Privacy policy
“You can unsubscribe to newsletters at any time, either in your notification settings in the social network or by clicking on the link provided at the end of e-mail newsletters.”
For example, you click unsubscribe at the bottom of a jobs newsletter.
If you let them share your CV with extra recruiters, you can take that back by email.
Read the exact line
Privacy policy
“You can withdraw your consent to the "Leverage your application" feature at any time by e-mailing datenschutz@new-work.se or via the link provided in notification e-mails.”
For example, you email datenschutz@new-work.se and they stop showing your CV to other firms.
Words to know
Legal words from the lines above, in plain English.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- precise geolocation
- Your exact position, usually from GPS, often accurate to within a few metres. For example, an app can tell not just your city but which building you are in right now.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
- right to erasure
- Your right to have a company delete the personal data it holds about you, with some exceptions. For example, you can ask a social app to wipe your old posts and profile and it must, unless a law says otherwise.
- data portability
- Your right to get a copy of your data in a file you can take to another service. For example, you can download all your playlists and upload them to a rival music app.
- opt in
- Something is off until you actively say yes to it. For example, marketing emails that only start after you tick a box are opt in.
How we got here · grade F · score 30/100 · 15 of 15 policy answers backed by a verified quote · 8 not stated
What does the app collect beyond what it needs to work?
They collect profile and login data plus tracking, device IDs, city location, messages, photos, address-book uploads, and LinkedIn imports.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
With consent they and third-party ad partners track you, build interest profiles, and run retargeting and custom audiences.
Do they sell or share your data, and can you opt out?
They share profiles with other users, targeting data with advertisers, and hashed emails with platforms; ad targeting needs consent you can withdraw.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Account data is deleted when you delete the account, but support data can last 7 years and security logs up to 12 months.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They build interest and usage profiles for recommendations; Clickpath visit tracking cannot be turned off.
Do they commit to basic security, and have they leaked data?
They say only limited staff see security logs and they review processors, but there is no audit or bug-bounty program described.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The policy is dated 01 December 2025 and they say they will tell you if they use data for a new purpose, but retention is mixed.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 11,075 words at a college level (Flesch reading ease 46.1).
