What we collect, why, and how to get rid of it.

If you are a candidate, the employer or agency that invited you is the data controller. They decide what is collected and how long it is kept. Recruit360 is their processor: we act on their instructions.

If you are a customer — someone with an account — we are the controller for your account data, billing details and how you use the product.

You can raise a request with either of us. If it is one only the employer can decide, we will tell you that and pass it on rather than letting it disappear.

Your name and email, whatever the employer asked you to submit (usually a CV), your recorded answers and their transcripts, any code or written work you produced, and the scores generated from them.

We also record integrity signals during the assessment: whether the tab lost focus, whether text was pasted, and how long each answer took. We do not record your screen outside the interview tab, your browsing history, or anything before you started or after you finished.

Account and contact details, billing information handled by our payment processor (we never see full card numbers), product usage for billing and support, and standard server logs including IP address, kept for 30 days.

To run the interview and produce the report the employer asked for; to keep the service working, secure and billed correctly; and to answer you when you contact us.

We do not use candidate data to train models. We do not sell data. We do not share a candidate’s interview with any employer other than the one that invited them.

Scoring is automated; the decision is not. No application is rejected automatically by Recruit360. Scores are evidence placed in front of a person, and every one links to the material that produced it. You can ask the employer how a decision about you was reached.

Candidate data: until the employer asks us to delete it, or you do. Recordings, transcripts, submissions and scores are deleted together. Automated retention schedules are not yet implemented, so deletion is actioned on request rather than enforced on a timer.

Customer account data: for as long as the account is open, then 90 days, then deleted. Invoices are kept for the period tax law requires.

Access, correction, deletion, restriction, portability, and objection — including withdrawing consent to recording, though that may mean the employer cannot continue the assessment.

Email privacy@recruit360.co from the address you applied with. We respond within 30 days, usually within five. You also have the right to complain to your local supervisory authority.

In a single region — Singapore (ap-southeast-1) — on AWS and Supabase, including backups. We do not currently offer a choice of region. Transfers rely on standard contractual clauses. Our subprocessors and what each processes are listed in the DPA.

This marketing site uses Ahrefs Web Analytics, which counts page views without cookies and without collecting personal data. It sets no cookies of any kind and no advertising trackers, which is why there is no consent banner to dismiss.

The application uses a session cookie to keep you signed in and a preference cookie for your colour theme. That is all.

If we change this materially we will tell account holders by email before it takes effect, and the review date above will move.

Questions: privacy@recruit360.co.