Privacy Policy

Overview

Colleagu provides an AI-powered recruitment platform for employers, recruiters, hiring teams, and candidates. We process personal information to operate the platform, analyze CVs, support candidate matching, schedule interviews, communicate with users, secure the services, and comply with legal obligations.

Candidate Data We Collect

• Name, email address, phone number, and contact details.
• CVs, resumes, cover letters, portfolios, and uploaded files.
• Work history, education, skills, certifications, languages, and professional qualifications.
• Job applications, screening answers, interview notes, evaluations, scores, recommendations, and hiring workflow status.
• Interview scheduling data, call recordings, transcripts, SMS, WhatsApp, and email communications where enabled.

Recruiter and Employer Data We Collect

• Account details, including name, email, phone number, role, login activity, and authentication data.
• Company details, billing details, subscription information, team members, permissions, and company profile data.
• Job postings, job descriptions, hiring requirements, interview notes, candidate evaluations, and recruiter communications.
• Support requests, onboarding details, settings, integrations, and platform configuration choices.

Technical Data We Collect

• IP address, browser type, device information, operating system, approximate location, and language settings.
• Cookies, session identifiers, authentication tokens, analytics events, log data, page views, clicks, and feature usage.
• Security telemetry, audit logs, API activity, error logs, and performance data.

Analytics and Tracking Tools

We may use analytics and tracking technologies such as Google Analytics, Meta Pixel, Microsoft Clarity, and similar tools to understand product usage, improve performance, measure marketing, prevent abuse, and improve user experience. Where required, we use consent controls or other lawful bases before enabling non-essential tracking.

How We Use Information

• Provide, operate, maintain, and improve Colleagu.
• Analyze CVs, extract candidate details, match candidates to roles, rank or recommend candidates, and support recruitment workflows.
• Create and manage accounts, companies, jobs, applications, interviews, calls, messages, and subscriptions.
• Send service messages, verification emails, interview communications, support replies, and product notices.
• Detect, investigate, and prevent fraud, abuse, security incidents, policy violations, and illegal activity.
• Comply with legal obligations, enforce agreements, resolve disputes, and protect rights and safety.

AI Processing

Colleagu uses Artificial Intelligence for CV analysis, candidate screening, candidate matching, ranking, recommendations, summaries, interview workflows, and recruitment automation. AI outputs may be inaccurate or incomplete. Employers remain responsible for human review and final hiring decisions.

Data Ownership and Customer Instructions

For B2B customers, Colleagu generally acts as a processor or service provider for recruitment data processed on behalf of the customer. Customers are responsible for having a lawful basis to collect and submit candidate data and for providing required notices or obtaining required consents.

Sharing and Subprocessors

We do not sell personal information. We may share information with:

• Cloud, hosting, storage, database, monitoring, security, and infrastructure providers.
• AI and automation providers, including providers such as OpenAI, AWS, Alibaba Cloud, Google Cloud, and Microsoft Azure where used.
• Communications, email, SMS, WhatsApp, voice, calendar, authentication, analytics, payment, and customer support providers.
• Employers, recruiters, team members, and candidates as needed to run the recruitment workflow.
• Legal authorities, regulators, courts, or third parties when required by law or needed to protect rights, safety, or security.

Retention and Deletion

• Account data is retained while the account is active and for a reasonable period after closure for legal, security, billing, fraud prevention, backup, and dispute purposes.
• Deleted account data is targeted for deletion or anonymization within 30 days unless a lawful retention reason applies.
• Candidate CVs and recruitment records may be retained for up to 24 months after last relevant customer activity unless deleted earlier or a customer agreement sets a different period.
• Backups may be retained for up to 90 days and removed through normal backup rotation.
• Security, audit, billing, and operational logs may be retained as needed for compliance, debugging, security, and business operations.

Security

We use technical and organizational safeguards designed to protect personal information, including encryption in transit, encryption at rest where supported, access controls, authentication controls, audit logs, monitoring, backups, and incident response procedures. No system is completely secure.

Security Incidents

If we determine that a security incident affects personal information, we will investigate, take reasonable steps to contain and remediate it, and notify affected customers or users as required by applicable law.

International Transfers

We may process and transfer information in the UAE and other countries where we or our subprocessors operate. Where required, we use appropriate contractual, technical, and organizational safeguards for international transfers.

Your Choices and Rights

• Access, update, correct, export, or delete account information where available.
• Request deletion or restriction of personal information, subject to legal and contractual limits.
• Object to certain processing or withdraw consent where processing is based on consent.
• Opt out of marketing communications at any time.
• Manage cookies through browser settings and any consent controls we provide.

Contact Us

For privacy questions, data requests, or deletion requests, contact us at privacy@colleagu.com.