Privacy Policy

1. SCOPE

This Privacy Policy applies to all visitors and Users of https://www.10x.com and related services, apps, and features (collectively, the Services).

For candidates using 10x’s AI Video Recruiter, please also read the Privacy Notice for Candidates (10x’s AI Video Recruiter), which supplements this Policy.

2. WHO WE ARE (CONTROLLER)

10x Team B.V. (10x) acts as data controller for processing described here (and co/independent controller with Clients in specific interactions—see §8).

3.  INFORMATION WE COLLECT

From all Users

• Account & contact: name, email, company (if applicable), role, phone (optional).
• Usage/telemetry: IP address, device/browser info, pages/events, crash logs.
• Log & security data: authentication logs, fraud/abuse signals, rate-limit events.
• Preferences: language, notification choices, cookie consents.

From Employers/Clients

• Organization details: legal entity, billing contacts, subscription tier.
• Billing: invoicing details, VAT, payment metadata (processed by our payment processor).
• Recruitment inputs: job requirements, structured role criteria.

From Candidates (high level)

• We collect professional profile and interview/assessment artifacts only when candidates engage with 10x’s AI Video Recruiter. See the Privacy Notice for Candidates (10x’s AI Video Recruiter) for full details.

4. WHY WE USE YOUR INFORMATION (PURPOSES & LEGAL BASES – GDPR)

Legitimate interests: operating a reliable, secure, and useful platform. You can object to processing based on Art. 6(1)(f) (see §11).

5. COOKIES & SIMILAR TECHNOLOGIES

We use cookies/pixels to keep you signed in, secure the platform, remember preferences, and perform analytics. Where required, we obtain consent via our banner.
Manage preferences in our Cookie Settings (link from banner or footer). See our Cookie Notice (https://www.10x.ai/cookie-policy) for details.

6. GOOGLE ANALYTICS (AND SIMILAR)

We may use analytics tools to understand usage and improve the Services. You can opt out of Google Analytics via the browser add-on and/or our Cookie Settings.

7. OUR USE OF AI (NON-CANDIDATE CONTEXTS)

10x offers features powered by AI/ML (e.g., search, insights, assistance).

• Personal data handling: We apply privacy by design; any AI processing of personal data follows this Policy.
• Opt-out: You can request we disable optional AI features tied to your account where technically feasible by contacting privacy@10x.com.
• For 10x’s  AI Video Recruiter (candidate interviews), see the Candidate Notice.

8. SHARING YOUR INFORMATION

We share personal data only as needed:

• Service providers (processors): EU cloud hosting, authentication, analytics, email, support. Bound by DPAs and confidentiality.
• Clients/Employers: Only when you (or your organization) engage a workflow that requires sharing (e.g., candidate evaluation).
• Affiliates & corporate transactions: If we restructure, merge, or sell assets, data may transfer under equivalent protections.
• Authorities & legal: If required by law or to protect rights, safety, and security.

Controller vs. processor notes

• For 10x platform accounts, 10x is controller.
• For candidate evaluation initiated by a Client, 10x and the Client may act as independent controllers for their respective purposes. In some cases, 10x may act as processor for specific Client-defined operations. Where a DPA is required, we will execute one with the Client.

9. INTERNATIONAL TRANSFERS

Primary hosting is in the EU. If transfer outside the EEA/UK/CH occurs (e.g., to vetted US sub-processors for video or analytics), we use Standard Contractual Clauses, transfer impact assessments, and supplementary measures. Where available, we rely on adequacy decisions.

10. DATA RETENTION

We keep data only as long as needed for the purposes above:

• Account data: for the life of the account, then deleted or archived per legal requirements.
• Billing/finance records: typically 7 years (Dutch law).
• Security logs: typically 12 months (longer if needed for investigations).
• Candidate data: per the Candidate Notice (role-specific and time-bounded).
  When deletion isn’t immediately possible (e.g., backups), we isolate until deletion is feasible.

11. YOUR RIGHTS (EEA/UK/CH)

You may access, rectify, erase, restrict, object (including to processing based on legitimate interests), and port your data; and withdraw consent at any time (where relied upon).
To exercise rights, email privacy@10x.com. We’ll respond within 1 month (extendable for complexity).
You may complain to your local authority; in NL: Autoriteit Persoonsgegevens.

12. MARKETING CHOICES

You can opt out of marketing at any time via unsubscribe links or by contacting us. Service/transactional communications will continue.

13. SOCIAL LOGINS

If you use a social login, we receive profile information (e.g., name, email, avatar) from that provider according to their privacy policy. We use it only to set up your account and authenticate you.

14. CHILDREN

Our Services are for users 18+. We do not knowingly collect data from children.

15. SECURITY

We use technical and organizational measures (encryption, access control, logging, vendor due diligence, least privilege). No method is perfect; we maintain incident response processes and notify when legally required.

16. REGION-SPECIFIC ADD-ONS

Canada (PIPEDA): We process based on consent or recognized exceptions (e.g., fraud prevention, legal, vital interests). You may access/correct your data and complain to the OPC.
US State Privacy Laws (e.g., CA/CO/CT/VA/UT, etc.): Depending on your state, you may have rights to access, correct, delete, obtain a copy, and opt out of targeted advertising/profiling. To exercise, contact privacy@10x.com. We will verify your request and respond within required timelines. If denied, you may appeal by replying to our decision; further complaints can be filed with your state AG.
Australia/NZ/South Africa: We align with local principles for notice, access, and correction; contact us to exercise rights or lodge complaints with the OAIC (AU), OPC (NZ), or the Information Regulator (SA).

17. CONTACT

• Privacy: privacy@10x.dom
• (If appointed) DPO: dpo@10x.com
• Mail: 10x Team B.V. (10x), Oudeschans 72a, 1011LE Amsterdam, The Netherlands

18. CHANGES TO THIS POLICY

We may update this Policy. We’ll change the “Last updated” date and, where appropriate, notify you in-product or by email.