Data we collect
We collect information you provide directly, including profile data, applications, and content you upload.
- CVs and resumes: When you upload or create a CV, we store it to provide tailoring, matching, and application features.
- Video interviews: If you complete a video screening, we store the recording and associated metadata so employers can review your response and we can provide AI-assisted analysis where applicable.
- Account and usage data: Email, name, login activity, and usage of our features (e.g. job searches, interview practice) to operate and improve the service.
Legal basis for processing
Under GDPR, we process personal data on the following legal bases:
- Contract performance: Account management, authentication, job search and application features, saved jobs, CV storage, and other core service delivery. Processing is necessary to perform our contract with you.
- Consent: Video recordings for screening and AI analysis (explicit consent required before recording). Non-essential cookies (e.g. analytics) are only set after you accept our cookie banner.
- Legitimate interests: Improving our service, security, fraud prevention, and analytics (where you have accepted cookies). We balance these interests against your rights and do not override them.
Data retention
We retain personal data only for as long as necessary:
- Account and profile: Until you delete your account or request erasure. After deletion, we remove data promptly; backups may retain anonymized copies for up to 90 days.
- CVs and documents: Until you delete them or your account.
- Video screenings: Up to 24 months after the screening, or until the employer deletes the job/listing, unless a shorter period is agreed. Recordings may be retained longer for legal or dispute-resolution purposes where permitted.
- Usage and analytics: Aggregated analytics data may be retained for up to 26 months; individual identifiers are removed or anonymized where feasible.
- Support and feedback: Support tickets and feedback may be retained for up to 24 months after resolution for quality and legal purposes.
Subprocessors and third parties
We use the following subprocessors to operate our service. Each has appropriate data processing agreements and safeguards in place:
- Vercel — Hosting and deployment (EU/US data centres)
- Stripe — Payment processing and subscriptions
- UploadThing — File storage (CVs, documents)
- Resend — Transactional and marketing email delivery
- Google (Gemini) — AI features (summaries, video analysis, content generation)
We may update this list from time to time. Subprocessors are bound by contractual obligations consistent with GDPR Article 28.
How we use AI
We use large language models (LLMs) and other AI tools to power certain features. This section describes how.
- Summaries and rankings: We use LLMs to summarize candidate profiles, interview responses, and job descriptions, and to rank or score candidates or matches where the product offers such functionality.
- Video analysis: Video screenings may be analyzed by AI to produce summaries or insights for recruiters. You will be informed where this applies (e.g. on the screening page).
- Data handling: We send only the data necessary for each feature to our AI providers and require appropriate data and security commitments from them.
Your rights
Depending on where you live, you may have the following rights:
- GDPR (EEA/UK): Access, rectification, erasure, restriction of processing, data portability, objection, and the right to withdraw consent. You may also lodge a complaint with a supervisory authority.
- CCPA/CPRA (California): Right to know, delete, correct, and opt out of sale or sharing of personal information. We do not sell your personal information as defined under CCPA.
To exercise these rights, contact us at the email address provided in the "Contact" section of this site or in your account settings.