Privacy Policy
This policy explains what personal data HR handles, why, and what rights people have. It covers account users (owners, HR staff, employees) and the candidates whose data accounts manage.
1. What we collect
- Account users — name, work email, password (stored hashed), role and company links, and employment details their organization records (job, department, contract, documents, bank account for payroll purposes).
- Candidates — what they submit when applying or what the hiring organization records: name, contact details, CV files and their extracted text, experience, education, skills, interview evaluations, offers, and the hiring documents they upload.
- Technical — login sessions, and an activity log of significant actions (who did what, when) kept for accountability.
2. Why we process it
Only to provide the service: running each account's HR and recruitment workflows, sending its notifications (invitations, approvals, interview assignments), securing the platform, and meeting legal obligations. Each organization using the platform is the controller of its people's data; HR processes it on their instructions. We do not sell personal data or use it for advertising.
3. AI processing
When an account uses AI features (CV parsing, candidate scoring, drafting job descriptions), the relevant text is sent to a third-party AI provider for processing and the usage is logged without personal data. AI providers under our agreements may not use this content to train their models. AI results are suggestions reviewed by people.
4. Retention
- Employee data is kept while the employment relationship and the account exist, then per the account's instructions.
- Candidates who are never hired are automatically anonymised after the account's configured retention period (24 months by default): names, contact details, CV files and documents are erased; anonymous statistics remain.
- Activity and usage logs are kept as long as needed for security and accountability.
5. Sharing
Data stays within the platform except: infrastructure providers that host and back it up, the AI providers above, and email delivery for the service's own messages. All are bound to process it only for us. We disclose data to authorities only where the law requires it.
6. Security
Access is role-based per company; passwords are hashed; sensitive content such as extracted CV text is encrypted at rest; public links (applications, offers, hiring forms) use long single-purpose tokens with expiry dates.
7. Your rights
Depending on your jurisdiction, you may request access to, correction of, or deletion of your personal data, or object to its processing. Employees and candidates should contact the organization that holds their file — it controls the data — and we support it in fulfilling such requests. For questions about this policy or the platform's own processing, contact the operator of HR through your account.
8. Changes
We may update this policy; the version date above changes, and material updates are announced inside the service.