Applicant Consent and Privacy Compliance Updates

Three compliance-focused updates ship together — bringing Fountain in line with A2P 10DLC, GDPR, and CPRA requirements.

Granular SMS and Calls Consent (now available to all accounts)

The applicant-facing consent section is redesigned with four optional, unbundled checkboxes — transactional SMS, transactional calls, marketing SMS, and marketing calls — replacing two mandatory bundled checkboxes. Consent is now captured across every applicant entry point: application form, Add/Edit Applicant screens, CSV import, and Create/Update APIs. Previously enabled for new customers only; now available to all accounts.

Availability: Available to all Hire customers.

Customers on select plans may have this feature enabled on a phased basis. Contact your Customer Success team for details.

iFrame Consent Handling

When Fountain's application form is embedded via iframe, tracking scripts no longer fire on page load. They wait until the host site sends the applicant's cookie consent signal, then fire only for approved categories (Analytics / Advertising / Functional). If the parent site hasn't implemented the integration, Fountain automatically shows its own consent banner — no breaking change to existing embeds.

Availability: Available to all Hire customers.

Customers on select plans may have this feature enabled on a phased basis. Contact your Customer Success team for details.

CPRA Notice in Application Form for US Openings

US application forms now include a clearly labeled 'California Privacy Notice at Collection' link in the footer, anchored directly to the CPRA section of Fountain's Privacy Policy. Displayed only on US openings. Closes the compliance gap that a generic Privacy Policy link may leave for auditors.

Availability: Available to all Hire customers.

Customers on select plans may have this feature enabled on a phased basis. Contact your Customer Success team for details.