Candidate privacy notice

1. Who is responsible

AutoTalent is responsible for AutoTalent’s shared talent pool of public profiles.

The company that contacted you (our customer, usually an employer or recruiter) is responsible for its own recruiting records: its notes, its decisions and the emails it sent. We process those records for them. You can contact that company directly, or contact us and we’ll pass your request on and help.

Contact: support@autotalent.ai.

2. What we hold

• Profile information: name, headline, location, current and past employers and job titles, tenure, education, skills, profile summary and LinkedIn URL, plus the raw public profile record these come from
• Public GitHub activity: username, public repositories, languages and stars
• Contact details: a work email address, where we found it, and how confident we are in it
• Assessments: AI-generated fit scores, strengths and gaps for a customer’s job; the customer’s notes and pipeline status
• Messages: emails sent to you, your replies, an AI label of your reply (for example, “interested”), and delivery, bounce or unsubscribe events

We don’t intentionally collect sensitive data such as health, religion or ethnicity, and we don’t collect government ID numbers.

3. Where it came from

• Your public LinkedIn profile, retrieved through Apify, a web data provider
• Your public GitHub profile, through GitHub’s API
• Email-finding services Apollo.io and Hunter.io, or an address the recruiter entered
• What the recruiter who contacted you wrote, and anything you sent back

4. Why we use it, and on what legal basis

We use your data to show you to recruiters with a matching role, assess the fit, contact you about the role and manage the conversation. We also use it to honour your opt-outs and requests.

Under the GDPR and UK GDPR we rely on legitimate interests (Article 6(1)(f)): ours and our customers’ interest in finding and contacting people for jobs that may interest them, using professional information they made public. We think this is balanced by the limited, work-related nature of the data and your ability to object at any time. Where we must keep records of opt-outs, we rely on legal obligation. You can ask us for more detail on this balancing.

AI and automated steps

AI models score how well your profile fits a role, and some candidates are filtered out automatically in the recruiter’s view. No decision to hire or reject you is made by AutoTalent; people at the hiring company decide. You can ask for a person to review how you were assessed. The AI & automated decisions page has the details.

5. Who we share it with

• Our customers. Your public profile fields are in AutoTalent’s shared talent pool, so any customer whose search matches you can see them and add you to their pipeline. Contact details, scores, notes and messages stay with the customer who created them.
• Service providers who host and process data for us, including AI model providers and our email provider. They are listed on the Subprocessors page.
• Authorities, when the law requires it.

We don’t sell your personal information for money, and we don’t share it for cross-context behavioural advertising.

6. How long we keep it

We don’t yet delete profiles on a fixed schedule. We keep a profile while it may be useful for matching roles, and we refresh it when it’s retrieved again. If you ask us to delete your data, we remove it from the talent pool and from customers’ records. We keep only what we need to make sure you aren’t contacted again, such as your email address on a do-not-contact list.

7. International transfers

AutoTalent runs in the United States, and our providers process data in the US and other countries. For data about people in the EU, UK or Switzerland, we rely on the safeguards in our providers’ data processing terms, such as Standard Contractual Clauses.

8. Your rights

Everyone

Email support@autotalent.ai to see what we hold, correct it, delete it, or stop us using it. We’ll ask for just enough information to find your record and confirm it’s you.

EU, UK and Swiss residents

You have the right to:

• access your data
• have it corrected or erased
• restrict how we use it
• object at any time to processing based on legitimate interests, including being contacted about jobs (we will stop)
• not be subject to decisions based solely on automated processing that significantly affect you
• complain to your data protection authority (in the UK, the ICO)

We reply within one month.

California residents (CCPA/CPRA)

In the last 12 months we have collected:

• identifiers (name, email address, profile URLs)
• professional or employment-related information (work history, education, skills)
• inferences (fit scores and summaries)

It comes from the sources in section 3, is used for the purposes in section 4, and is disclosed to the recipients in section 5. We don’t sell or share it as those terms are defined, and we don’t use sensitive personal information to infer characteristics about you.

You have the right to:

• know what we collect
• delete it
• correct it
• opt out of sale or sharing
• not be discriminated against for using these rights

You can use an authorized agent. We’ll verify requests and reply within 45 days. Other US states give similar rights, and we honour the same requests wherever you live.

9. Recruiting emails and unsubscribing

• Emails sent through AutoTalent usually include an unsubscribe link, which opens a page on AutoTalent. It stops the outreach sequence you’re in and marks that address as unsubscribed.
• If a message had no link, or you want to make sure no AutoTalent customer contacts you again, email support@autotalent.ai. You can also reply asking to be removed: a reply stops the automatic follow-ups and goes to the recruiter.
• We act on opt-outs promptly, and always within the 10 business days that the US CAN-SPAM Act allows.

10. Changes

We update the date at the top when this notice changes.