Your data security is our top priority. Here's exactly how we protect your information and what data we collect.
When you connect your Google or Microsoft calendar, we use OAuth 2.0 (the industry standard) to access only what we need for scheduling. Here's exactly what we can and cannot do:
You have full control: You can revoke calendar access at any time through your Google or Microsoft account settings. Revoking access will not delete any interviews already scheduled.
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). The same encryption used by banks and financial institutions.
Team members only see data relevant to their role. Admins have full control over who can access what within your organization.
Hosted on enterprise-grade infrastructure with automated backups, DDoS protection, and 99.9% uptime SLA.
We conduct regular security assessments and penetration testing to identify and fix vulnerabilities before they become issues.
Booking sessions expire automatically 7 days after creation if no interview is scheduled.
Interview details are retained for 90 days after the interview date for analytics and reporting purposes.
You can request deletion of specific candidate or interview data at any time by contacting support. We'll delete the data within 30 days.
When you cancel your account, all data is deleted within 90 days, except for billing records which we're required to retain for 7 years.
We're committed to meeting global privacy and security standards:
EU Data Protection
California Privacy Rights
Type II (In Progress)