Privacy Policy

For recruiters, Skilize Inc. is responsible for your account data (the "controller").

For candidates, the employer you apply to is the controller: it decides why your data is collected and what happens to your application. Skilize processes your data on the employer's behalf, to run Cohr for them. The employer is your first point of contact; if you write to us, we help them answer or pass your request on.

Skilize is also the controller of two records of its own: the Skilize Cohr talent network, the people who tick the box on an application form to hear about other jobs (see section 4), and the list of people banned for cheating in interviews (see section 3).

Recruiters

• your name, work email and sign-in events;
• your company's details: name, logo, careers page, team members and their roles;
• your jobs, rounds, questions, settings, notes and decisions, and a log of actions in your workspace;
• what you ask Copilot, Cohr's assistant;
• your plan and payment status. Card details go to Stripe, our payment provider, and never reach us;
• technical data: IP address, browser and device.

Candidates

• what you give when you apply: name, email, phone, links (such as a portfolio), resume, cover letter and your answers to the employer's questions;
• your interview answers and transcripts, and the audio of voice interviews;
• in proctored rounds, with your permission: video of your camera, video of your screen and audio from your microphone during the interview, and signals such as leaving the interview tab or connecting another display;
• the scores, rankings, summaries and flags Cohr produces about your application, and the employer's notes and decisions;
• technical data: IP address, browser, device and how long the form was open, and a Cloudflare Turnstile check, used to stop bots and duplicate applications;
• whether you ticked the box to join the Skilize Cohr talent network and the employer's talent pool, and the words shown beside it.

• to run Cohr: read and score applications against the job, write and grade interviews, hold voice interviews, review proctoring recordings, rank candidates and summarise them for the employer;
• to let the employer's team search its applicants, including by meaning: Cohr keeps a numeric summary of each resume's work history (no name or contact details), erased with the application;
• to send the emails Cohr sends: invitations, reminders, offers and the daily summary for recruiters;
• to keep Cohr safe and fair: detecting bots and duplicate applications, and keeping the ban list;
• to bill for plans, answer support requests, and fix and improve Cohr.

We do not sell personal data, show advertising, or use candidate data to train our own AI models.

The box on an application form is not ticked unless you tick it. If you do, Skilize keeps a record of you, apart from the application itself, so that it can tell you about jobs that suit you:

• your name, email address and phone number;
• your skills, the job titles you have held and your years of experience, from your resume;
• your areas of expertise: occupations from ESCO, the European Commission's classification of occupations, chosen by AI from your resume;
• where you live: city, region and country;
• when you ticked the box, on which application, and the words you were shown.

It rests on your consent. Only Skilize staff can see it; it is not shown to employers. If you apply again with the box ticked, the record is updated with your latest details. It is kept until you ask us to remove it: write to support@skilize.com and we delete it, with every tick you gave. Withdrawing does not affect your applications, which stay with the employers you applied to.

Cohr uses AI models to read applications and interviews, and to produce scores, rankings, summaries and proctoring flags. Employers decide what to do with them.

An employer can let Cohr move the top-scoring applicants into the next round automatically. Proctoring flags are advice for the employer's team and never decide anything on their own. If you want a person to review a decision about you, ask the employer; Cohr also lets employers take appeals.

Where the GDPR or similar laws apply:

• Recruiter data: to perform our contract with your company; our legitimate interests in security, preventing fraud and improving Cohr; and legal obligations such as tax records.
• Candidate data: the employer's own legal bases, usually steps taken at your request before a contract, its legitimate interest in hiring, or your consent (for example to recordings or the talent pool). We act on the employer's instructions.
• The talent network: your consent, given by ticking the box, which you can withdraw at any time.
• The ban list: our legitimate interest in keeping assessments fair for every employer and candidate on Cohr.

A candidate's data goes to the employer they applied to, and to the members of its team who can see the job. We also use these service providers, who may only use the data to provide their service to us:

• Google Cloud: hosting, storage, and AI models (Vertex AI and Gemini, including the voice interviewer);
• Amazon Web Services: AI models (Bedrock);
• Stytch: sign-in;
• Stripe: payments;
• Resend: email delivery;
• Cloudflare: Turnstile bot checks on application forms.

We may also disclose data when the law requires it, to protect people's rights and safety, or as part of a merger or sale of our business, in which case this policy keeps applying to it.

Cohr runs on Google Cloud. Your data may be stored and processed in the United States and in other countries where we or our providers operate. Where data leaves the EU, the UK or another country with similar rules, we rely on safeguards such as the European Commission's Standard Contractual Clauses.

• Applications, with their documents, answers and recordings, are erased automatically when the employer's retention window ends (24 months after the application, unless the employer sets another), or sooner when the employer erases them or grants a candidate's request. Files and answers are deleted; what is left of the employer's own records is made anonymous.
• Recruiter accounts are kept while the workspace is active and erased after it is closed, apart from what the law requires us to keep, such as billing records.
• Talent network records are kept until you ask us to remove them, and updated whenever you apply again with the box ticked.
• Ban records are kept while the ban is in force.

Data is encrypted in transit (TLS) and at rest by our cloud provider. Access is limited to the people who need it; each workspace keeps a log of what its members do; candidate pages are reached through signed links. No system is perfectly secure: if a breach affects you, we tell you and the authorities as the law requires.

Depending on where you live (for example under the GDPR, the UK GDPR or the CCPA), you can ask to see, correct, erase or receive a copy of your data, object to or restrict how it is used, and withdraw consent you gave. You can also complain to your data protection authority.

Candidates: send your request to the employer, or write to support@skilize.com and we will pass it on and help them answer. Recruiters: write to support@skilize.com. We answer within one month.

Cohr keeps only what it needs to work: your sign-in (a session token stored in your browser), a few settings, and Cloudflare Turnstile on application forms. There are no advertising or cross-site tracking cookies.

Cohr is not meant for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us data, write to support@skilize.com and we will erase it.

We may update this policy. If a change is significant, we tell account owners by email or in Cohr before it takes effect; the date at the top shows the current version.

Skilize Inc. · support@skilize.com. See also our Terms of Service.