What we collect
- Candidates: the email address you verify, your answers to the interview, the full chat transcript, any resume or file you upload (and the text we extract from it), and basic metadata such as when you started and last interacted.
- Recruiters: the email address you sign in with, your name, your company name and logo, the openings and interview flows you create, and the candidate materials listed above.
- Automatically: a session cookie to keep you signed in, your IP address for rate limiting and verification abuse prevention, and your theme preference stored in your browser.
Why we use it
We use this data to run the interview, show the recruiter your answers, transcript, resume text, and an AI-generated evaluation, to secure the service against abuse, and to operate the product day to day. Where a legal basis is required, we rely on your consent (the notice you accept before starting a chat), the performance of our service, and our legitimate interest in preventing fraud and abuse.
AI processing
Your answers and resume text are sent to a third-party AI model to generate conversational replies and a recruiter-facing evaluation. Candidate-provided text is always treated as untrusted data and is never used to train models. The AI evaluation is an assistive summary and can be wrong; it is not the sole basis for any hiring decision. Deployments using a free-tier model provider may have different data handling. Check with the operator of the ezhire instance you are using.
Sharing
We share data with the recruiter for the role you applied to, and with the service providers that make the product work: a transactional email provider (to send verification codes and sign-in links), an AI model provider (to generate replies and evaluations), and our hosting and database infrastructure. We do not sell your personal data.
Retention
Application data is kept for as long as the recruiter needs it and no longer than allowed by the retention period recorded for each application. When you or the recruiter delete an application, we remove the resume file, extracted text, messages, answers, notes, decisions, evaluations, usage rows, and verification records.
Security
Verification codes are stored only as salted hashes and are single use, with expiry and attempt limits. Sign-in tokens are stored only as hashes. Sessions use signed, httpOnly cookies. Resume downloads are streamed through authenticated routes.
Your choices and rights
Candidates can delete their data at any time from their dashboard, or by verifying their email through the public delete endpoint. Depending on where you live, you may also have the right to access, correct, or port your data, or to object to certain processing. To exercise these rights, contact us using the details below.
Cookies
We use one essential session cookie to keep you signed in, and a small browser-stored value for your light/dark theme preference. We do not use advertising cookies.
Changes and contact
We may update this policy; material changes will be reflected by the date above. Questions or requests can be sent to privacy@ezhire.si. See also our Terms of Service.