Privacy & Security

Your privacy is taken seriously. Here's exactly what happens with your data.

What IS Collected

• Interview transcript — your spoken or typed responses, converted to text
• Integrity metadata — timestamps of browser events (e.g., if you switched tabs), NOT the content of other tabs
• Resume text — if you upload a resume, the text is extracted and the file is discarded

What is NEVER Collected

• No video recording — your camera is used only for live face detection to verify one person is present. No video frames are stored, transmitted, or recorded.
• No audio recording — voice is processed in real-time for transcription only. No audio files are saved.
• No biometric data — face landmarks, gaze vectors, and other MediaPipe outputs are processed in your browser and immediately discarded. They never leave your device.
• No screen recording — we do not capture your screen content
• No browsing data — we do not track what other tabs or websites you have open

Demographic Self-Identification

Before your interview begins, you may see an optional demographic self-identification step. This appears after you accept the privacy consent and before the resume upload.

The information collected in this step (such as race/ethnicity, gender, age range, disability status, or veteran status) is used only for aggregate compliance analysis across all candidates. It is:

• Never shared with the employer reviewing your application
• Never used in your individual interview scoring
• Never visible on your candidate profile or scorecard
• Analyzed only in aggregate statistical reports to help ensure fair hiring practices

Your interview is scored based solely on the content of your responses. The AI scorer never receives your name, demographic information, or self-identification responses.

How Scoring Works

• The AI scorer never receives your name or any demographic information
• Your interview is scored based solely on the content of your responses matched against the job's competency framework
• The same scoring criteria apply to every candidate for the same posting

Consent

Before your interview begins, you will be asked to grant consent for two specific data uses:

• Interview recording — your spoken or typed responses being processed by Retell AI for real-time transcription
• Resume processing — your resume text being processed by Anthropic Claude for scoring against the job's competency framework

Both consents are required to start the interview. The interview link will not consume your token if you decline. If you change your mind later, see "Data Deletion" below.

Data Retention

Interview data is retained in accordance with employment law requirements (EEOC, NYC Local Law 144) and our published retention policy:

• Candidates, transcripts, scorecards — 1 year after soft-deletion
• Talent pool profiles — 2 years after soft-deletion
• Demographic responses (EEOC) — 2 years for compliance
• Audit logs — 7 years (legally required)

IP addresses associated with your activity are anonymized after 90 days.

Data Deletion (GDPR Article 17)

If you have an account on our platform, you can request immediate deletion at any time by signing in and using the "Delete Account" option in your profile. Your account will be soft-deleted immediately, and all linked candidate and talent-pool records will be hard-deleted after a 30-day grace period.

If you do not have an account but were invited to an interview, contact the employer who invited you. They are the data controller for your application; we are the data processor.