Privacy policy.

• We process candidates’ data on behalf of the company that invited the candidate. That company is the controller (it determines why and how the data is processed). Evaluro is its processor under Article 28 GDPR and acts only on its instructions and in accordance with the data processing agreement.
• Evaluro processes the data of users of the Evaluro app and of website visitors (accounts, enquiries) as the controller.

On behalf of the company, we process:

• name, email address and, where applicable, the candidate’s ID in the company’s own system (ATS)
• the CV and the profile prepared from it (experience, skills, languages, education)
• the course of the interview: a transcript of the answers and, depending on the company’s settings, an audio or video recording
• the AI recommendation with quotes from the answers, and the recruiter’s decision
• a record of leaving the interview window (how many times, for how long and at which question) and of pasting text (character count only); this information is for the recruiter, and the AI does not assess it
• the optional closing note the candidate writes after the interview
• consents given (with the version of the text and the time) and any request for another interview format

The only purpose is the hiring process to which the candidate was invited. We do not use the data to train models or for any other purpose. We do not assess appearance, voice or emotions, and we do not use biometric identification.

No automated decision-making takes place: the AI prepares a recommendation, and a recruiter who can see the quotes and the recording decides on the next step (Article 22 GDPR).

Retention period: the data is deleted automatically after the period set by the company (by default 180 days from the candidate’s last screening), or sooner on request. Deletion covers the CV, recordings, transcripts, assessments and decisions. The data is removed from database history and backups within 30 days at the latest.

The For candidates page describes how the interview works and how to request another format. To exercise your rights, contact the company that invited you. We will help it deal with your request.

We use vetted providers of infrastructure and AI services (sub-processors). The database, files and interview recordings are stored in the EU. The language model and the assistant’s voice are provided by suppliers in the US. Speech-to-text runs through a European endpoint.

Where a provider processes data outside the EU (the language model, the assistant’s voice, the job queue, the email service account and, depending on the provider’s settings, the avatar video), this happens only with safeguards under Chapter V GDPR (an adequacy decision or standard contractual clauses). The language model provider does not use data sent to it through the API for training. The current list of sub-processors forms part of the data processing agreement with each company.

• We process the user’s name, email address, company membership and role, login sessions (IP address, browser) and a record of sensitive actions (audit log) so that we can provide and secure the service (performance of a contract, legitimate interest).
• We retain this data for the duration of the account and of the contract with the company.

• We use an enquiry sent through the contact form (name, company, email address, message) only to reply to it, and we delete it within 12 months unless we start working together.
• We only use strictly necessary and functional cookies. The first is the login cookie for the Evaluro app, which is created when you sign in and lasts 14 days. The second is the evaluro-locale cookie, which remembers your chosen language (Czech or English). It is set when you visit the site and when you switch language, lasts 12 months and holds no personal data. We do not use analytics, advertising or tracking cookies.

You have the right of access to your data and the rights to rectification, to erasure, to restriction of processing, to data portability, to object, to withdraw consent and to human review of a decision. You can lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz).

Data protection contact: info@hireup.cz. If your request concerns data from a hiring process, please contact the company that invited you first. You withdraw your consent with that company, and at your request it will delete the data, including the recording.

We describe our technical and organisational measures on the Security and the AI Act page.