Candidate Privacy Notice
Last updated: July 31, 2026
1. Who We Are
2. What Data We Collect
- Name — to identify your application
- Email address — to communicate about your application
- Resume / CV — to assess your qualifications
- Application metadata — timestamp, source, IP address (for rate limiting)
We do not collect: date of birth, social security numbers, government IDs, ethnicity, gender, disability status, religion, or any other protected-class information.
3. Why We Process Your Data
- Lawful Basis: Consent (GDPR Article 6(1)(a)) — You explicitly consent when you check the consent checkbox on the application form.
- Purpose: To evaluate your suitability for the role you applied to, and to match you to future roles if you join our Talent Network.
4. AI-Assisted Screening
Your application may be reviewed using AI-assisted screening technology. Our system uses artificial intelligence to analyze your resume against the job requirements. This includes skills matching, experience evaluation, and qualification scoring.
Important: AI screening produces recommendations only. All hiring decisions are made by human recruiters. You have the right to request a fully human review of your application by contacting us at the address below.
5. How Long We Keep Your Data
- Standard applications: 24 months from the date of submission, after which your data is automatically anonymized.
- Talent Network members: Indefinitely, until you request deletion or close your account.
- Promoted candidates: Data is retained in the hiring organization's pipeline according to their own retention policies.
6. Your Rights
Under GDPR, CCPA, and applicable data protection laws, you have the right to:
- Access — Request a copy of the data we hold about you
- Rectification — Request correction of inaccurate data
- Erasure — Request deletion of your data ("right to be forgotten")
- Portability — Receive your data in a machine-readable format
- Withdraw consent — At any time, without affecting the lawfulness of processing before withdrawal
- Human review — Request that a human reviewer evaluates any automated decision made about your application
7. How to Exercise Your Rights
To request deletion of your data or exercise any of your rights, you can:
- Email us at: privacy@iqmela.com
- Use our automated deletion tool: DELETE endpoint
We will respond to your request within 30 days (as required by GDPR Article 12(3)).
8. Data Sharing
Your data is shared only with:
- The hiring organization for the role you applied to (only if your application is promoted to their pipeline)
- Our infrastructure providers (Vercel, Neon, Cloudflare) for hosting and processing
- Google Gemini for AI-assisted resume analysis (anonymized where possible)
We do not sell your personal data. We do not share it with advertisers or third-party data brokers.
9. Contact
For any privacy-related questions or concerns:
Data Protection Officer
RelyOnAI LLP
Email: privacy@iqmela.com