Let's Talk
Ensuring a responsible, transparent,
compliant & safe solution for every user

Privacy Notice Candidates

Last updated: September 25, 2025

pattern 1
pattern 2
pattern 1 (1)
pattern 2 (1)

1. WHAT WE COLLECT

  • Identity/contact: name, email, phone (optional), location/time zone, work authorization.
  • Professional data: CV/résumé, skills, experience, education, links you provide.
  • Interview artifacts:
    • Audio/video recordings of interviews;
    • Transcripts (auto-generated);
    • Screen/coding session capture for technical tasks (if enabled);
    • Assessments & scores (rubric-based);
    • Behavioral/proctoring signals (e.g., tab switches) when integrity features are enabled.
  • Device/technical: IP, device/browser, session IDs, security logs.
  • Special-category (only if you volunteer it): e.g., health or accommodation needs mentioned during interviews. We don’t solicit this by default.

We do not perform biometric identification (no facial recognition templates).

2. SOURCES

You, publicly available professional sources you link, client job requirements, and system-generated outputs (transcripts/scores/logs).

3. PURPOSES & LEGAL BASES (GDPR)

Purpose

Examples

Legal basis

Recruitment & evaluation

running Stackly’s AI Video Recruiter interviews; generating transcripts & scores; sharing results with a prospective employer you engage with

Art. 6(1)(b) (steps at your request / contract); Art. 6(1)(f)(legitimate interests)

Scheduling & communications

invitations, reminders, updates

Art. 6(1)(b)

Platform operation & security

authentication, fraud prevention, proctoring

Art. 6(1)(f)

Product quality & fairness reviews

rubric tuning, error analysis, bias checks in aggregate

Art. 6(1)(f)

Legal & compliance

record-keeping, responding to lawful requests

Art. 6(1)(c)

Special-category data (only if you volunteer it)

optional disclosures of health/limitations

Art. 9(2)(a) explicit consent (we will capture/record consent if such data is processed); or Art. 9(2)(b) where applicable in an employment context raised by the process

You may object to legitimate-interest processing; see §8.

4. AI TRANSPARENCY & HUMAN OVERSIGHT

  • How Stackly’s AI Video Recruiter works: captures audio/video (and screen, if enabled), creates a transcript, and produces role-specific rubric scores and a short summary.
  • No automated hiring decisions: AI outputs are advisory; final decisions are human-made.
  • Your AI rights: request human review, contest an outcome, and obtain a meaningful explanation of relevant logic and factors.
  • Opt-out of AI: where feasible for a given role, you may request a human-only alternative via our Client.

5. SHARING

  • Prospective employers/clients you agree to engage with (e.g., profile, interview results, relevant media excerpts).
  • Processors: EU cloud, video/transcription, analytics, support; some may be US-based and are under SCCs/DPAs.
  • Authorities: where required by law or to protect rights/safety.
  • No sale of personal data. We do not sell candidate data.

6. INTERNATIONAL TRANSFERS

Primary hosting in the EU. When transfers outside the EEA/UK/CH are necessary (e.g., to certain sub-processors), we use SCCs and supplementary measures, and monitor developments in transfer law.

7. RETENTION

  • Interview media (A/V/screen): typically 12 months from interview date (unless a shorter/longer period is required for a specific role or lawful need).
  • Assessment scores/summaries: typically 24 months (auditability and re-use for similar roles).
  • Inactive profiles: we delete or anonymize after 24 months of inactivity, unless legal retention applies.
  • Security logs: ~12 months.
  • Anonymized/aggregated data: may be kept indefinitely (no reasonable re-identification).

8. YOUR RIGHTS

You have GDPR/EEA/UK/CH rights to access, rectify, erase, restrict, object, port, and withdraw consent (where used).
You also have AI-related safeguards (human review, contestation, explanation).
Contact privacy@stackly.com; we’ll respond within 1 month. You can lodge complaints with your local authority (NL: Autoriteit Persoonsgegevens).

9. IS PROVIDING DATA MANDATORY?

Providing required information and enabling necessary capture (audio/video; screen for technical tasks when stated) is needed to participate. Without it, we may be unable to proceed.

10. SECURITY

We apply encryption at rest/in transit, access control, logging/monitoring, environment segregation, and vendor due diligence. We notify where legally required.

11. CHILDREN

Stackly’s AI Video Recruiter is for candidates 18+ only.

12. CONTACT & UPDATES

  • Privacy: privacy@stackly.com
  • (If appointed) DPO: dpo@stackly.com
  • Mail: 10x Team B.V. (Stackly), Oudeschans 72a, 1011LE Amsterdam, NL
    We may update this Notice; we’ll refresh the “Last updated” date and notify where appropriate.
Shopping Basket