Privacy Policy

1. Data Controller

EvalMetric Inc. is the data controller for the personal data collected through our website and service creation process. For data uploaded by our customers (such as Candidate CVs), we act as a Data Processor, processing that data solely on behalf of our customers.

2. Information We Collect

• Account Information: Name, email address, company name, billing address, and payment information (processed by our payment providers).
• Usage Data: Information about how you access and use the Service, including IP address, browser type, device information, and interaction logs.
• Customer Data: Resume/CV files, job descriptions, and candidate notes that you upload to the Service for processing.
• Communication Data: Records of your correspondence with our support team.
• Cookies: Data collected via cookies and similar technologies to enhance user experience.

3. How We Use Your Information

• To provide, maintain, and improve the EvalMetric Service.
• To process payments and manage your subscription.
• To send administrative information, such as security alerts, invoices, and support messages.
• To detect, prevent, and address technical issues or fraudulent activity.
• To analyze usage patterns and optimize our AI algorithms (using anonymized, aggregated data only).
• To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

We process your personal data based on one or more of the following legal grounds: (a) Performance of a Contract (to provide the Service you signed up for); (b) Legitimate Interests (to improve our security and product); (c) Consent (where you have explicitly agreed); and (d) Legal Obligation.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data with trusted third-party service providers (Sub-processors) who assist us in operating our Service (e.g., cloud hosting, payment processing, email delivery), subject to strict confidentiality agreements. We may also disclose data if required by law or to protect our rights.

6. Data Retention

• We retain your account information for as long as your account is active or as needed to provide you the Service.
• Customer Data (CVs) is retained according to your account settings or deleted upon termination of your account.
• We may retain necessary records (e.g., billing history) for legal compliance and accounting purposes.

7. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. We adhere to appropriate safeguards, such as Standard Contractual Clauses (SCCs), for such transfers.

8. Security

We employ industry-standard security measures, including encryption in transit and at rest, strict access controls, and regular security audits, to protect your data. However, no method of transmission over the Internet is 100% secure.

9. Your Data Protection Rights

Depending on your location (e.g., EEA, UK, California), you may have rights to access, correct, delete, or restrict the processing of your personal data. You may also have the right to data portability. To exercise these rights, please contact us.

10. Cookies Policy

We use essential cookies for authentication and security, and analytics cookies to understand usage. You can control cookie preferences through your browser settings.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date."