Legal

Privacy Policy

Effective date: May 17, 2026

Plain-language summary: SkillTrace processes candidate data on your organization's written instructions only. We do not sell candidate data, do not share it across employer customers, and do not use it to train AI models without your explicit authorization. Your organization — not SkillTrace — is the data controller for all candidate information.

1. Who We Are

SkillTrace is an AI-assisted recruiting workflow tool. Our platform helps hiring teams analyze candidate-provided materials and publicly shared professional contributions. We do not autonomously screen, rank, or make hiring decisions — those decisions remain with your organization's recruiters.

2. Information We Collect From Employer Accounts

Account information

When you create an employer account we collect your name, work email address, organization name, and login credentials.

Job vacancy data

Role titles, job descriptions, skill requirements, and any other criteria your team uploads to define a hiring workflow.

Candidate materials

CVs, resumes, and any candidate files your team uploads for a specific hiring workflow. SkillTrace processes this data as a service provider acting on your instructions. Your organization remains the data controller for all candidate information.

Usage and technical data

Platform usage events, IP address, browser type, and device identifiers — used to operate and improve the service.

3. How We Use Employer Account Data

  • To operate your SkillTrace account and deliver the services described in our agreement.
  • To analyze candidate-provided materials against the role criteria your team has defined.
  • To present structured, human-reviewable insights to your recruiting team.
  • To maintain the security and integrity of the platform.
  • To comply with our legal obligations.
What we do not do: We do not use candidate data from one employer to improve services for another. We do not train AI models on your candidate data without your explicit written authorization. We do not sell candidate information to any third party.

4. Data Sharing and Service Providers

We use third-party service providers for infrastructure, security, analytics, and communications. These providers access data only to the extent necessary to perform services on our behalf and are contractually prohibited from using that data for any other purpose.

We do not share candidate data across employer customers. Candidate information uploaded under one employer's account is not accessible to or combined with any other employer account.

We may disclose information when required by law, court order, or valid legal process.

5. Data Retention

We retain employer account data for the duration of the active service relationship and for a reasonable period thereafter as required by applicable law or our agreement.

Candidate data is retained only for as long as necessary to provide the hiring workflow services your organization has requested. Upon termination of your account or upon your written request, we will delete or de-identify candidate data.

6. Security

We apply industry-standard technical and organizational measures to protect personal information — including encryption in transit and at rest, access controls, and contractual security obligations for all sub-processors. We maintain incident response procedures consistent with applicable data breach notification requirements.

7. Employer Rights and Choices

As the data controller for candidate information processed through SkillTrace, your organization may request access to, correction of, or deletion of candidate data at any time by contacting us. We will respond to verified requests in accordance with our data processing agreement and applicable law.

8. Changes to This Policy

We will notify active account holders of material changes to this Privacy Policy by email or by a prominent notice within the platform at least 30 days before the change takes effect.


For Job Applicants

Candidate Privacy Notice

Effective date: May 17, 2026

This notice applies to job applicants and candidates whose personal information is processed through SkillTrace by a prospective employer.

Who controls your data: The employer using SkillTrace to manage their hiring process — not SkillTrace — is the data controller for your personal information. SkillTrace processes your information solely on that employer's instructions as a service provider. To exercise your rights, contact the employer directly or use the contact details at the bottom of this notice.

1. Categories of Personal Information Collected

Identifiers

  • Name, email address, phone number, and mailing address as contained in a submitted CV or resume.
  • Professional profile URLs or links you have voluntarily provided.

Professional and employment-related information

  • Work history, job titles, and employer names.
  • Educational background, degrees, certifications, and institutions attended.
  • Skills, technical competencies, and areas of expertise.
  • Publications, projects, open-source contributions, or other professional works you have publicly shared.
  • Any other information included in your submitted materials.

AI-generated assessments

  • Structured assessments of how your stated qualifications compare to the employer's defined role requirements.
  • These assessments are presented to the employer's recruiting team as signals for human review — not as automated hiring decisions.
What we do not collect: SkillTrace does not collect sensitive personal information such as financial account details, biometric data, health or medical information, or genetic data. We do not autonomously harvest your information from social media platforms or third-party websites without the employer's team initiating a specific action within the platform.

2. Purposes for Which Your Information Is Used

  • To evaluate your qualifications for the specific role to which you applied, as directed by the employer.
  • To present structured, human-reviewable insights to the employer's recruiting and hiring team.
  • To allow recruiters to compare candidate qualifications against role requirements.
  • To maintain the security and integrity of the platform.
  • To comply with applicable law.

Your information is not used for any purpose unrelated to the specific hiring workflow for which it was collected.

3. Sale or Sharing of Your Personal Information

SkillTrace does not sell your personal information. SkillTrace does not share your personal information across employer customers. Your information is only disclosed to sub-processors who assist in operating the platform, under strict contractual restrictions that prohibit any other use.

4. Retention of Your Personal Information

Your personal information is retained only for as long as necessary for the employer to complete the hiring workflow for which it was collected, or as required by law. We do not retain candidate information beyond the employer's active use of the relevant hiring workflow.

5. Automated Decision-Making

What automated technology is used

SkillTrace uses AI-assisted tools to analyze your submitted materials and generate structured assessments comparing your stated qualifications to the employer's role requirements.

How it functions

The AI analyzes text and structured data from your submitted materials. It does not make hiring decisions. All outputs are presented as signals for human review. The employer's team makes all final hiring decisions.

Your rights regarding automated processing

  • You may request information about how the automated technology functioned and how it affected you.
  • You may request that a human recruiter or hiring manager review any decision that significantly affects you.
  • Where applicable law provides a right to opt out of automated decision-making in hiring, you may exercise that right by contacting the employer or SkillTrace.
  • A human appeal path exists for all hiring decisions informed by SkillTrace.

6. Your Privacy Rights

Access, correction, and deletion

You may request access to, correction of, or deletion of your personal information. Requests should be directed to the employer first, as they are the data controller. You may also contact SkillTrace using the details in the Contact section below.

Right to know

You may request disclosure of the categories of personal information collected about you, the purposes for which it is used, and the categories of third parties with whom it is shared.

Right not to be discriminated against

You will not be discriminated against for exercising any of your privacy rights.

Pre-adverse-action rights

If an employer uses SkillTrace outputs as part of a formal screening process, you have the right to be notified before any adverse hiring decision is made based on that information, and to receive a copy of the relevant report. You have the right to dispute the accuracy of any information used against you.

State-specific rights

Depending on where you are located, additional rights may apply under your state's privacy or AI-related laws. Contact SkillTrace or the employer to learn about the specific rights available to you based on your state of residence.

7. Anti-Discrimination Commitment

SkillTrace's AI-assisted tools are designed to support human recruiters — not to autonomously screen or exclude candidates. Analysis is based on professional qualifications and publicly shared technical contributions as defined by the employer's role requirements. The platform is not designed to surface or expose protected personal characteristics to hiring managers.

Employers are responsible for ensuring their use of SkillTrace's outputs complies with all applicable anti-discrimination laws. If you believe an employer's use of an AI hiring tool has discriminated against you, you may file a complaint with the relevant government authority in your jurisdiction.

8. Contact

To exercise any of the rights described above, or to ask questions about how your personal information was processed:

Contact the employer directly

The employer is the primary data controller and the first point of contact for access, correction, and deletion requests.

Contact SkillTrace

For general questions about this notice or SkillTrace's data practices, contact us through the SkillTrace website.

We will respond to verifiable requests within the timeframe required by applicable law.