Privacy & Data Protection

Privacy Policy

Last updated: March 19, 2026

1

Data Controller

Recruo ("we", "us") is the data controller for personal data processed through this platform. For questions about your data, contact us at supportrecruo@recruo.com.

2

Data We Collect

  • Account data: name, email address, and authentication credentials (stored in Supabase Auth).
  • Interview data: target role, job description, interview questions, your spoken answers (transcribed to text), and AI-generated feedback and scores.
  • Technical data: session cookies required for authentication. We do not use analytics or tracking cookies.
3

What We Do NOT Collect

  • We do not store audio or video recordings. Voice interviews are processed in real time and only the text transcription is saved.
  • We do not use analytics, advertising, or third-party tracking.
4

Legal Basis (GDPR Art. 6)

  • Consent (Art. 6(1)(a)): you provide explicit consent at signup and before each interview.
  • Contract performance (Art. 6(1)(b)): processing is necessary to deliver the interview service you requested.
5

Sub-processors

We use the following third-party services to deliver the platform:

SupabaseEU

Database and authentication

LiveKit

Real-time voice (no recordings stored)

OpenAI / Anthropic

AI question generation and feedback

Google Gmail API

Sending result emails (on request)

Stripe

Payment processing (PCI DSS Level 1) · Privacy Policy

6

Data Retention

Interview sessions (questions, answers, feedback) are automatically deleted 90 days after completion. Account data is retained until you delete your account.

7

Your Rights

Under GDPR, you have the right to:

  • Access & portability: export all your data from the dashboard (JSON format).
  • Erasure: delete your account and all associated data.
  • Rectification: update your profile information at any time.
  • Withdraw consent: stop using the service at any time; your data will be deleted after the retention period.
  • Lodge a complaint: with your local data protection authority.
8

Cookies

We use only essential session cookies to keep you signed in. Stripe.js sets essential cookies for fraud detection on payment pages. These cookies are strictly necessary and do not track your activity. No consent is required under GDPR, but we inform you via a notice banner.

9

Data Security

All data is encrypted in transit (TLS) and at rest. Database access is protected by row-level security policies ensuring users can only access their own data.

10

Contact

For any privacy-related requests, email supportrecruo@recruo.com.

© 2026 Recruo. All rights reserved.

recruo.ai