Privacy Policy

1. Who this applies to

• Candidates — individuals who create a profile, apply to jobs, or are added to the platform.
• Employers — organizations and their team members who use Aptelor to hire.
• Visitors — anyone browsing our public site.

2. Data we collect

From candidates: name, email, phone, location, profile details, skills, work history, résumé/CV and its contents, application answers, assessment/interview responses, and account authentication data.

From employers: name, work email, company details, role, billing contact (if applicable), and content you create (jobs, notes, evaluations).

Automatically: IP address, device/browser info, usage/log data, and cookies (see our Cookie Policy).

From third parties: authentication providers (e.g. Google/Microsoft via our auth provider) when you sign in with them.

We do not intentionally collect special-category data (e.g. race, health, religion). Please don't include it in résumés or free-text fields.

3. How we use data

• Provide and operate the Service (accounts, applications, matching, screening, interviews, offers).
• AI-assisted features: we process profile/résumé/application text to generate structured data, match scores, and screening/interview assistance. These outputs are advisory; hiring decisions are made by human employers. We do not use protected attributes for scoring.
• Communicate with you (notifications, transactional email).
• Security, fraud prevention, and legal compliance.
• Improve the Service (aggregated/de-identified analytics).

We do not sell your personal data.

4. Legal bases (GDPR/EEA/UK)

We process data under: performance of a contract (providing the Service), legitimate interests (operating/securing/improving the Service), consent (where required, e.g. certain cookies/marketing), and legal obligation.

5. Sharing & sub-processors

We share data with service providers who help us run Aptelor, under contract and only as needed:

• Clerk — authentication
• Neon (PostgreSQL) — database
• Cloudflare R2 — file storage (résumés, documents)
• Resend — transactional email
• Anthropic / OpenAI — AI processing of the content described above
• Vercel — hosting
• Calendly — demo scheduling (marketing site)

Employers see candidate data submitted to their jobs. We may disclose data to comply with law or protect rights/safety.

6. International transfers

Data may be processed outside your country, including the United States. Where required, we use appropriate safeguards (e.g. Standard Contractual Clauses).

7. Retention

We keep personal data for as long as your account is active and as needed to provide the Service, then for a limited period to meet legal, tax, dispute-resolution, and security obligations. Candidates may request deletion (see Rights). Employers control retention of candidate data they collect for their own hiring.

8. Your rights

Depending on your location (GDPR/UK GDPR/CCPA and others) you may have rights to: access, correct, delete, port, restrict, or object to processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of "sharing"; we do not sell personal information. To exercise rights, contact privacy@aptelor.com. You may also complain to your local data-protection authority.

9. Security

We use technical and organizational measures (encryption in transit, access controls, private file storage with signed URLs, audit logging). No system is perfectly secure.

10. Children

The Service is not directed to individuals under 18, and we do not knowingly collect their data.

11. Changes

We may update this policy; we'll post the new date and, for material changes, provide notice.

12. Contact

Aptelor Global Pvt. Ltd., Plot No. 357, Sector 37D, Area Garouli, Gurugram, Haryana, India 122001 — privacy@aptelor.com

Data Protection Officer / EU Representative (if applicable): 8448830798