Privacy Policy
Effective Date: June 23, 2025
Overview
This Privacy Policy explains how Upfound AI collects, uses, stores, and shares personal information related to candidates and users. It also describes your rights and how data is protected.
1. Information We Collect
a. Candidate Information
- Personal details: name, email, phone, address, education, work history, skills, resume content
- Interview data: video/audio recordings, transcripts, questionnaires, evaluations, trust/cheat-detection metrics
- Technical metadata: IP address, device type, timestamps
b. User Information
- Recruiter/admin data: name, email, role, login credentials
- Usage logs: platform activity, preferences, error logs, session data
- Device information: browser, OS, device identifiers
c. Cookies & Tracking
- First-party and third-party cookies for authentication, performance analytics, and preferences
2. How Upfound AI Uses Personal Data
- Candidate Data: for resume evaluation, interview scheduling, AI scoring, cheat detection, reporting, and improvements
- User Data: to manage accounts, support security, billing, analytics, feature development
- Cookies/Tracking: to authenticate sessions, analyze performance, and streamline user experience
3. Legal Basis for Processing
- Consent: from candidates during application/interview
- Contractual necessity: to fulfill hired service agreements
- Legitimate interest: for fraud prevention, platform security, and service optimization
4. Data Storage & Retention
- All data is securely stored on Amazon AWS servers, with industry-standard encryption
- Data is retained as needed for service delivery, legal compliance, and per customer policy
- You may request export or deletion of data, unless retention is required by law
5. Data Security
- Data is encrypted in transit (TLS) and at rest
- Role-based access control, multi-factor authentication, and audit logs protect access
- Regular security reviews and vulnerability assessments are conducted
6. Data Sharing & Disclosure
- With third-party service providers (e.g., ATS, video conferencing, analytics) under strict non-disclosure terms
- When legally required (e.g., subpoenas, court orders)
- For business purposes (e.g., mergers/acquisitions) with continued policy obligations
- NOT sold or shared for marketing
7. International Data Transfers
Data may be processed or stored outside your country. Transfers occur under secure frameworks (e.g., AWS safeguards, Standard Contractual Clauses) similar to HireVue's global model.
8. Automated Decision-Making & Profiling
- AI models analyze candidate responses
- You retain final hiring decisions
- GDPR-rights: candidates can request human review of automated decisions
9. Candidate Rights
You may request to:
- Access, correct, or delete your data
- Restrict processing or object to profiling
- Withdraw consent (where applicable)
- Export your data
- Lodge a complaint with a data protection authority
Requests can be sent to contact@upfound.ai
10. Children's Privacy
- Only users aged 18+ may use the platform
- Upfound AI does not knowingly collect data from minors
11. Changes to This Policy
- Updates will be announced via email or in-platform notices
- Continued use after changes constitutes acceptance
12. Your Acceptance of This Privacy Policy
By using Upfound AI, you agree to this Privacy Policy. If you disagree, please do not use the platform. Continued use after updates means you accept new terms.
13. Contact Information
For questions, privacy rights requests, or complaints:
📩 contact@upfound.ai