Privacy notice

Last updated 12 September 2026.

This notice explains how the CV Match Screening Tool ("the Service") handles personal data. It covers two different roles at once, because they genuinely are different:

Recruiter accounts (client organisations)

If you sign up your organisation to use the Service, we are the data controller for your own account details: your name, work email, and organisation name. We use this only to run your account and to contact you about the Service.

Candidate data

For any CV a recruiter pastes into the Service, the recruiter's organisation is the data controller - they decide to screen that candidate, and they are responsible for having a lawful basis to do so. We act as their data processor, under a written Data Processing Agreement with each client organisation, and only process candidate data on their instructions.

If you are a candidate and want to know how your data was handled, or want it deleted, please contact the recruiter or company you applied to directly - they hold the record of your application and are the right people to action a request. We will assist them if they ask us to.

What we collect and why

Recruiter account: name, work email, organisation name, role.
Candidate data submitted by a recruiter: name, contact details, and whatever the CV itself contains (employment history, education, skills).
The generated match report, and the recruiter's own human review decision and notes.

How long we keep it

Each client organisation sets its own retention period (90 days by default). Candidate data and reports are automatically and permanently deleted once that period passes, and an organisation admin can request immediate deletion of a specific candidate's data at any time.

Who we share data with

The following sub-processors support the Service:

Supabase - database hosting and login, hosted in the UK/EU.
Vercel - hosts the application itself.
Anthropic - processes CV and job description text to generate the match report. Based in the United States.

We do not sell personal data to anyone, for any reason.

Your rights

Under UK GDPR you can ask to access, correct, or delete personal data held about you, or object to how it's processed. Recruiter account holders should contact us directly (below). Candidates should contact the recruiting organisation they applied to.

For recruiters: your own responsibility

If you use the Service, please display this line on your own job adverts or application pages, so candidates know AI is involved in screening:

This application may be assessed with the support of AI-based screening. All decisions are reviewed by a member of our recruitment team.

Contact

Questions about this notice or a data protection request: junaidsalloo@hotmail.co.uk.