Privacy Policy

Last Updated: December 22, 2025

1. Information We Collect

When you use Candidate Evaluator, we collect:

• Account Information: Email address, name, and password (securely hashed).
• Candidate Data: Resumes and job descriptions you upload for analysis.
• Usage Data: Analysis history, including scores, insights, and timestamps.
• Payment Information: Processed securely through Stripe. We do not store your credit card details.

2. How We Use Your Information

We use your data solely to:

• Provide AI-powered candidate analysis services
• Maintain and improve our platform
• Process payments and manage your account
• Send essential service updates (we do not send marketing emails without explicit consent)

3. AI and Third-Party Services

OpenAI API: We use OpenAI's enterprise API to analyze resumes. OpenAI has confirmed that data sent via their API is not used to train their public models. Your data remains confidential.

Stripe: Payment processing is handled by Stripe, a PCI-compliant payment processor. We do not store credit card information.

Data Residency: Candidate data is processed via secure enterprise APIs and stored on secure servers located in Amsterdam, Netherlands. All data is transmitted using encrypted connections and stored in compliance with international data protection standards.

4. Data Security

We implement industry-standard security measures:

• All data transmission is encrypted using HTTPS/TLS
• Passwords are hashed using secure algorithms
• Database access is restricted and monitored
• Regular security audits and updates

5. Your Rights and Data Control

You have the right to:

• Access: View all your stored data at any time through your account dashboard
• Delete: Remove individual analyses or your entire account and associated data
• Export: Download your analysis results in CSV format
• Correct: Update or correct any inaccurate information

6. Data Retention

We retain your data as long as your account is active. When you delete an analysis or close your account:

• Data is immediately removed from our active database
• Backups are purged within 30 days
• Payment records are retained for 7 years for tax compliance purposes

7. Cookies and Tracking

We use minimal cookies:

• Session Cookies: Essential for login and security (cannot be disabled)
• Analytics: We do not currently use third-party analytics or tracking pixels

8. Children's Privacy

Candidate Evaluator is not intended for use by individuals under 18 years of age. We do not knowingly collect data from children.

9. Data Breach Notification

In accordance with the Australian Privacy Act 1988, we are committed to protecting your personal information from unauthorized access, use, or disclosure. In the event of a Notifiable Data Breach as defined under the Privacy Act, we will:

• Notify affected individuals as soon as practicable
• Notify the Office of the Australian Information Commissioner (OAIC)
• Provide clear information about the breach, the type of information involved, and steps you can take to protect yourself
• Take immediate action to contain the breach and prevent further unauthorized access

A Notifiable Data Breach occurs when unauthorized access or disclosure of personal information is likely to result in serious harm to affected individuals.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a prominent notice on our platform.

11. Contact Us

Candidate Evaluator is a registered business name of NPF Corporate Pty Ltd (ABN: 76 180 339 095) as trustee for the NPF Investment Trust.

If you have questions about this Privacy Policy or how we handle your data, please contact us:

• Email: [email protected]
• Support Form: Contact Support