This Privacy Policy explains how Reqtify (“Reqtify,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes information about individuals in connection with our websites, applications, and services (collectively, the Services).

Because Reqtify is designed to support recruiting and staffing workflows, we often process personal data on behalf of our business customers (e.g., staffing agencies, recruiters, HR teams) when they use the Services. In those cases, the customer controls the data and Reqtify acts as a service provider/processor.

1) Scope and roles (Controller vs. Processor)

Depending on the context, Reqtify may act as:

Processor / Service Provider (most common): We process candidate and other personal data at the direction of our customers to provide the Services.
Controller / Business: We process certain data for our own business purposes (e.g., account administration, billing, security, marketing for our own products).

If you are a candidate or employee interacting with a Reqtify customer, your relationship is primarily with that customer. Their privacy practices apply to how they collect and use your data. Reqtify generally cannot directly fulfill certain requests about data that our customer controls.

2) Information we collect

A. Information you provide

Depending on how you use the Services, we may collect:

Account and profile information: name, email, phone number, company name, username, password, role/permissions.
Customer support communications: information you include in messages, tickets, or calls.
Billing information: billing contact details and payment information (typically processed by our payment processor; we may receive limited payment details such as last four digits and payment status).

B. Information our customers upload or connect (candidate and recruiting data)

Our customers (and their authorized users) may upload or connect data into the Services, including:

Job descriptions and requisition details
Resumes/CVs, candidate profiles, work history, education, skills, certifications
Interview notes and evaluation content
Submittal materials and recruiter-generated outputs (e.g., branded resume versions)

C. Information collected automatically

We may collect:

Device and usage data: IP address, device identifiers, browser type, operating system, log data, timestamps, pages/screens viewed, features used, and error logs.
Cookies and similar technologies: to operate the Services, remember preferences, and analyze performance. (See Section 8.)

D. Information from third parties

Depending on configuration and customer instructions, we may receive:

Integration data from systems our customers connect (e.g., ATS/CRM tools).
Public professional information if our customers instruct us to enrich candidate profiles using publicly available sources.

3) How we use information

We use information to:

Provide and operate the Services (including ranking candidates against job requirements, surfacing gaps/risk flags, generating interview questions, and producing submittal artifacts).
Maintain security and prevent fraud/abuse (e.g., monitoring, access controls, audit logs).
Improve and develop the Services (e.g., debugging, analytics, product improvements).
Customer support and communications (responding to requests, providing training and updates).
Billing and account administration (invoicing, subscription management).
Marketing (business-to-business) (sending product updates and marketing communications where permitted by law; you can opt out).
Comply with legal obligations and enforce our terms.

4) Legal bases for processing (EEA/UK and similar jurisdictions)

Where required, we rely on one or more of the following legal bases:

Contractual necessity: to provide the Services to our customers and users.
Legitimate interests: to secure, maintain, and improve the Services; prevent abuse; and market to business contacts (where permitted).
Consent: where required for certain cookies/marketing.
Legal obligation: to comply with applicable laws.

5) How we disclose information

We may disclose information:

To our customers and their authorized users (as part of the Services).
To service providers/subprocessors that help us run the Services (e.g., hosting, analytics, customer support tools, payment processing).
For legal reasons (e.g., to comply with law, respond to lawful requests, protect rights and safety).
In connection with a business transaction (e.g., merger, acquisition, financing, or sale of assets). Google user data will not be transferred in any such transaction.

We do not sell personal information in the traditional sense. If applicable law defines “sale” or “sharing” broadly (e.g., certain advertising-related disclosures), we provide choices described in Section 10.

6) AI, automated processing, and model training

Reqtify uses automated processing to help customers evaluate candidates and generate recruiting outputs.

Human-in-the-loop: Our customers decide how to use outputs; Reqtify does not make hiring decisions.
Model training: We may use de-identified and aggregated data to improve the Services. We do not use data obtained through Google APIs to train AI or machine learning models. Candidate data processed through our AI features is never used for model training.
Bias and fairness: We design the Services to provide explainable reasoning and to support consistent evaluation; however, outputs may contain errors and should be validated by humans.

7) Data retention

We retain personal data for as long as necessary to:

provide the Services;
meet contractual obligations;
comply with legal requirements; and
resolve disputes and enforce agreements.

For data processed on behalf of customers, retention is governed by the applicable customer agreement and customer instructions.

8) Cookies and tracking technologies

We use cookies and similar technologies to:

keep you signed in and maintain sessions;
remember preferences;
understand usage and improve performance.

You can control cookies through your browser settings. Where required by law, we will present cookie consent controls.

9) Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal data. No security measures are perfect; we cannot guarantee absolute security.

10) Your privacy rights and choices

Depending on where you live, you may have rights such as:

access to personal data;
correction;
deletion;
portability;
restriction or objection to processing;
opting out of certain processing (e.g., targeted advertising where applicable);
withdrawing consent.

Requests involving customer-controlled data

If we process your data on behalf of a Reqtify customer (for example, you are a candidate in their recruiting workflow), please direct your request to that customer first. If you contact us, we may refer your request to the customer or assist them in responding as required by law.

11) International data transfers

We may process and store information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers (such as Standard Contractual Clauses).

12) Children

The Services are not directed to children under 16, and we do not knowingly collect personal data from children.

13) Google API Services — Limited Use Disclosure

Reqtify’s use of information received from Google APIs is limited to the following: when a user connects their Gmail account, Reqtify uses the gmail.send scope solely to send outbound emails that the user explicitly initiates within the Reqtify platform.

Reqtify does not read, store, index, or otherwise access the content of any Gmail messages. Google user data is not used for advertising, is not sold or transferred to third parties, and is not used to train AI or machine learning models.

This use complies with the Google API Services User Data Policy, including the Limited Use requirements.

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version and update the “Last updated” date.

15) Contact us

If you have questions about this Privacy Policy or want to exercise your rights, contact:

Email: [email protected]

We do not currently publish a mailing address for privacy requests. If you need an alternative way to submit requests, please contact us by email and we will provide next steps.

Appendix A: U.S. State Privacy Disclosures

If you reside in certain U.S. states (e.g., California and others), you may have additional rights. We will provide required notices and methods to submit requests, including verification procedures and authorized agent rules.

Appendix B: Subprocessors

We will provide a list of subprocessors upon request.