Privacy Policy

1. What we collect

When you use RecruitScrape, we collect the candidate data you explicitly ask the extension to read from your active browser tab. This includes the candidate's name, work history, skills, and any other text rendered on the profile page.

We also collect basic account information required to provide the service (your email address) and payment information (handled entirely and securely by Paddle, our merchant of record).

2. How we use your data

The profile data we read is used solely to generate screening evidence and candidate records for you. We send the extracted text to our AI provider (Anthropic) for analysis. We do not use your candidate data to train AI models, and we do not sell it to third parties.

3. Data sharing

We share data with specific sub-processors only when necessary to operate the service:

• Anthropic: To process and analyze candidate profiles against job requirements.
• Prospeo: If you use the "Reveal Email" feature, to find contact information.
• Paddle: To handle subscriptions and billing.
• Supabase & Vercel: For secure database hosting and application infrastructure.

One sharing path is not ours and is worth stating plainly. If you use the dictation button to speak your screening notes, that audio is processed by your own browser's speech recognition — in Chrome and Edge that means the audio is sent to the browser vendor's servers, under their privacy policy and not ours. We never receive or store the recording; only the text it produces, once it appears in your notes. If you would rather no audio left your machine, type your notes instead.

4. Extension Permissions

The RecruitScrape Chrome extension requires the activeTab permission to read the profile you are currently viewing when you click the extension. It does not run in the background, does not crawl pages automatically, and never sends messages or connection requests on your behalf.

5. Your rights

You can delete your account at any time from your settings page. You may also request a copy of your data by contacting us.

When you delete your account:

• Your sign-in, your profile and any pending team invitations to your email address are deleted immediately.
• Any workspace where you are the only member is deleted with everything in it: jobs, candidates, notes, documents, audit history and credit history.
• In a team workspace you share with others, the candidates and jobs you added belong to that team and stay with it. They are no longer linked to you and are shown as added by a former member. The team's owner can delete them.
• If you are the only owner of a team workspace with other members, you must first make someone else an owner. If you own a paid subscription, you must cancel it first so that you are not billed again.
• Invoices and payment records are kept by Paddle, our merchant of record, for as long as tax and accounting law requires. We do not hold your card details.
• We keep a one-way cryptographic hash of your email address (not the address itself) so the free credits can't be claimed again with the same address. It is used only for that check and isn't linked to any other data.
• Deleted data may remain in our database provider's encrypted backups until those backups expire.

6. Security

Data is encrypted in transit and at rest by our infrastructure providers, access to production systems is limited to the operator of this service, and payment details never touch our servers.

We want to be straightforward about the limits of that: RecruitScrape is an independent product and we do not hold any security certification. We are not SOC 2 audited and we are not ISO 27001 audited. If your organisation requires a certified processor, please take that into account before putting candidate data into this service.