Privacy Policy

This Privacy Policy explains how RecruitCandidates (“we,” “us”) collects, uses, and protects personal data belonging to hiring companies (“Customers”) and the candidates who apply through a Customer's career page.

Two roles: controller and processor

For account and billing information about a Customer and its team, RecruitCandidates acts as a data controller. For candidate data submitted through a Customer's career page — applications, CVs, assessment answers, video recordings, and transcripts — the Customer is the data controller and RecruitCandidates acts as a data processor, processing that data only on the Customer's instructions and for the purposes described in our Data Processing Addendum.

What we collect

• Account data: name, work email, password hash, company details, billing information.
• Candidate data: name, contact details, CV files and extracted text, cover notes, application answers.
• Assessment data: assessment answers, scores, timing information.
• Video interview data: recorded video responses, generated transcripts, AI-generated analysis and scores.
• AI-generated assessments: screening scores, explanations, and recommendations produced by our AI models from the data above.
• Usage data: log data, device information, and product usage analytics.

How we use it

• To operate the career page, application, screening, assessment, and video interview features a Customer configures.
• To generate AI screening reports, transcripts, and interview analysis on the Customer's behalf.
• To send transactional emails (application receipts, invitations, reminders, status updates).
• To secure the platform, prevent abuse, and meet legal obligations.
• To bill Customers for their subscription via Paystack.

Retention

Candidate data is retained according to the Customer's plan-level retention setting (for example, 3 or 12 months of video retention) or until the Customer deletes it, whichever is sooner. Account data is retained for the life of the Customer's account plus a limited period required for legal and accounting purposes.

Deletion

Customers can delete individual candidate records, and can request full account and data deletion. Once a deletion request is confirmed, associated CVs, videos, transcripts, and AI-generated results are permanently removed from active storage within a reasonable operational window, subject to any legal retention obligations.

Sub-processors

We use a limited set of sub-processors to operate the platform, including our database and storage provider, our transactional email provider, our AI model provider (for screening, transcription, and interview analysis), and our payment processor. A current list is available on request.

Your rights

Candidates who wish to exercise data subject rights (access, correction, deletion) should contact the hiring company they applied to, as the data controller for their application. Company account holders can contact us directly at the address below.

Contact

Questions about this policy can be sent to privacy@recruitcandidates.com.