Privacy Notice

Last updated: 9 August 2026

What we collect

• Account data: name, email, authentication records.
• Career data you provide: profile, resume, skills, preferences, applications, and assessment responses.
• Organization data: roles, pipelines, evaluations, and messages created by recruiting teams.
• Security and audit records of sensitive actions.

Consent controls what employers see

Your contact details are revealed to an organization only through a consented, credited, and audited unlock. You can make your profile discoverable or private, share it with specific organizations or roles, withdraw recruiter communication at any time, and see the history of who accessed your data — all from Privacy Settings. Withdrawing consent takes effect immediately: active outreach stops and previously revealed contact details disappear from employer lists and exports.

Retention and deletion

Every record class has a defined retention policy. When you request account deletion there is a 30-day grace period to change your mind; after it, your identity and files are destroyed, process records are de-identified, and suppression records are kept only so that opt-outs keep working. Legal holds pause destruction only where the law requires it.

Export

You can export your data at any time from Privacy Settings. The export includes a manifest listing every included section and its record count.

Processors

We use Supabase (data hosting), Stripe (payments), Resend (email), and AI model providers (Anthropic, OpenAI) for the AI features described in the AI Use Notice. Model providers receive only the minimum content needed for each feature.

Contact

Privacy questions and rights requests: engage@thearq.ai.