← Back to home
Updated: October 4, 2026
LEGAL SPECIFICATION & DATA PRIVACY

Privacy Policy

How RecruitX AI collects, processes, and protects your data, candidate data, and connected account data.

Last updated: October 4, 2026 • Effective immediately

1. Who This Applies To

This Privacy Policy covers RecruitX AI, operated by Piyush, independently, not currently through a registered company, a tool that scores job candidates against hiring criteria, accessed through a Chrome extension and a web application at www.recruitkaro.live. It applies to account holders, meaning recruiters, founders, and hiring teams who sign up and use the product. It does not apply to candidates whose resumes or profiles are evaluated by our users, their data is covered separately in Section 7.

2. What We Collect

  • Account information. Email address and name, provided at signup. No company domain restriction applies, any email is accepted.
  • Role and hiring data. Job descriptions, role requirements, and hiring criteria entered by the account holder.
  • Candidate data, provided by the account holder or their connected sources. Resume files and their extracted content, LinkedIn, Naukri, or Indeed profile text read at the account holder's direction, form submission data from connected channels (Google Forms, Typeform, Tally, JotForm, Airtable, Notion Forms), and any additional form fields submitted alongside a resume, such as free-text answers to application questions.
  • Connected account data. Where the account holder connects Google Sheets, Google Drive, Gmail, Outlook, or similar services, we access only what is explicitly authorized through that connection, scoped to the specific sheet, folder, or inbox label or filter the account holder selects. Email access, where enabled, is strictly read-only and is used only to detect replies related to tracked job applications; we never send, delete, or modify anything in a connected inbox.
  • Usage data. Actions taken in the product, scores run, batches processed, features used, for the purpose of enforcing plan limits and improving the product.
  • Billing data. Handled by Dodo Payments, our payment processor. We do not store full card numbers or other raw payment credentials ourselves, see Section 5.

3. How We Use What We Collect

To operate the core product: parsing and scoring candidates against roles, as directed by the account holder. To enforce plan limits and manage subscriptions. To detect application replies, where the account holder has enabled that feature. To send transactional emails related to billing, account activity, and product updates. To improve the product's accuracy, including periodic manual review of AI outputs against source material, as described in the product's own guardrail practices. We do not use candidate or account holder data to train third-party AI models beyond what is contractually agreed with our AI providers for the single request being processed, see Section 4.

4. Who We Share Data With

We use the following service providers to operate RecruitX AI, each receiving only what is necessary for their function:

Supabase — database, authentication, and file storage.
xAI and the AI providers behind our scoring engine (including TypeSafe AI's JEV service) — process resume and profile text to produce scores and summaries. Content sent for evaluation is processed per request and is not knowingly used to train these providers' general models beyond what their own data processing terms specify.
Dodo Payments — processes subscription payments. We never see or store full payment card details ourselves.
Composio — manages read-only connections to Gmail, Outlook, and Google Drive on the account holder's behalf.
Resend — sends transactional emails (billing confirmations, account notifications).
Render — hosts our backend processing infrastructure, including PDF parsing.

We do not sell personal data to third parties, and we do not share data with advertisers.

5. Payment Data

Checkout is hosted entirely by Dodo Payments. We never receive, see, or store full card numbers, UPI handles, or other raw payment credentials. We retain only what Dodo provides back to us for account management purposes: subscription status, plan, billing cycle, and a masked reference to the payment method (such as the last four digits of a card) for display in account settings.

6. Data Retention

Candidate data, resumes, parsed resume content, and scores, is retained for 90 days from the date of scoring, after which it is automatically deleted. Account holders may request earlier deletion of any specific candidate's data or their full account at any time; such requests are honored within 7 days. Account information and billing history are retained for as long as the account remains active, plus any additional period required by applicable tax or financial record-keeping law, and are deleted upon account closure except where retention is legally required.

7. Candidates Whose Data Is Processed by Our Users

RecruitX AI is used by recruiters and hiring teams to evaluate job candidates. If you are a candidate whose resume or profile was processed through RecruitX AI, your data was submitted by, or collected at the direction of, the account holder evaluating you for a role, not by you directly to us. Questions about how your application data is used should be directed to the company or recruiter you applied to. We act as a data processor on their behalf for this purpose. Candidate data is subject to the same 90-day retention period described in Section 6, and an account holder may delete it earlier at their discretion.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at piyush@recruitkaro.live. For account holders based in India, these rights are provided consistent with the Digital Personal Data Protection Act, 2023. For users in the European Economic Area, these rights are provided consistent with the GDPR, where applicable.

9. International Data Transfer

Our service providers operate infrastructure in multiple regions. Where personal data is transferred outside the country it was collected in, we rely on our providers' own compliance mechanisms (such as standard contractual clauses, where applicable) for that transfer.

10. Children's Privacy

RecruitX AI is not directed at or intended for use by anyone under 18. We do not knowingly collect personal data from minors.

11. Security

We rely on our infrastructure providers' security practices, including encryption in transit and at rest where supported, row-level access controls on our database, and scoped, revocable permissions for every third-party connection (Sheets, Drive, Gmail, Outlook). No system is perfectly secure, and we cannot guarantee absolute security of any data transmitted to us.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be notified to account holders by email or an in-product notice before taking effect.

13. Contact

Questions about this policy: piyush@recruitkaro.live. Mailing address: not currently published.