Privacy Policy

1. Who we are

Klearskill ("Klearskill", "we", "us") provides an AI-powered CV screening and recruitment platform. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit klearskill.com or use our platform at app.klearskill.com.

If you have questions about this Policy or want to exercise any of your rights, contact us at privacy@klearskill.com or via the contact form.

2. Data controller and processor roles

For personal data submitted by visitors to our marketing site, Klearskill acts as data controller. For personal data uploaded, imported, or processed by our customers within the Klearskill platform (for example, CVs and applicant details), Klearskill acts as data processor and the customer is the data controller. Our Data Processing Addendum is available on request.

3. What we collect

We process the following categories of personal data:

• Account data. Name, work email, company, role, password hash, billing details.
• Usage data. Pages visited, features used, timestamps, IP address, user agent, device type, referrer, and interactions with the product.
• Candidate data (as processor). Information contained in CVs and application forms our customers process using Klearskill (name, contact details, work history, education, skills, and any other content the candidate submits).
• Support data. Messages, screenshots, and attachments you send to us via the contact form, email, or in-app support.
• Cookies and similar technologies. Only strictly necessary cookies by default. Analytics cookies are enabled only if you opt in.

4. How we use your data

We process personal data to:

• Provide, maintain, and secure the Klearskill service.
• Process applications, score candidates against your criteria, and return a ranked shortlist.
• Handle account creation, authentication, billing, and subscription management.
• Respond to sales and support enquiries you send us.
• Improve the product, detect abuse, and prevent fraud.
• Comply with legal obligations.

5. Lawful basis (UK/EU GDPR)

We rely on the following lawful bases: performance of a contract (to deliver the service you signed up for); legitimate interests (to run and improve our business, prevent abuse, and secure the platform); consent (for optional analytics and marketing); and legal obligation (to meet tax, accounting, and other regulatory requirements).

6. AI processing of CVs

Klearskill uses machine learning to score and summarise CVs against the criteria your organisation defines. Automated scoring is provided as an input to human decision making, not as a final hiring decision. Under Article 22 GDPR, decisions with legal or similarly significant effects on candidates must involve meaningful human review, and our customers are responsible for making sure a qualified reviewer signs off before any candidate is progressed or rejected.

We do not use candidate data to train foundation models that would be shared across customers. Candidate data submitted by one customer is not used to improve the model for another customer.

7. Sharing your data

We share personal data only with vetted sub-processors that help us operate the service (hosting, email delivery, error tracking, analytics, payment processing). A current list of sub-processors is available on request. We do not sell personal data.

8. International transfers

Where personal data is transferred outside the UK/EEA, we rely on approved safeguards such as UK International Data Transfer Agreements or EU Standard Contractual Clauses, plus supplementary measures as needed.

9. Retention

Account and billing data is retained while your account is active and for a further six years after closure to meet tax and legal obligations. Support enquiries are retained for three years from the last contact. Candidate data processed on behalf of customers is retained according to the customer's own configuration and instructions.

10. Your rights

You have the right to access, correct, delete, or port your personal data, to object to or restrict processing, and to withdraw any consent you have given. You may also lodge a complaint with your local data protection authority (in the UK, the ICO at ico.org.uk). To exercise any right, contact privacy@klearskill.com.

11. Security

We use encryption in transit (TLS), encryption at rest for stored files, role-based access controls, and regular access reviews. No system is perfectly secure, but we notify affected customers and the relevant supervisory authority in line with GDPR breach notification timeframes if a qualifying incident occurs.

12. Children

Klearskill is a business tool. It is not intended for use by anyone under 16, and we do not knowingly process personal data belonging to children.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be signalled at the top of this page and, where reasonable, notified to account holders by email.

14. Contact

Questions, requests, or complaints? Email privacy@klearskill.com or use the contact form.