Privacy Policy

1. Who is responsible

If you are a job applicant: The hiring organisation that posted the position through Rekruit is the data controller for your application data. Aitonomy Solutions KIG acts as a data processor on their behalf, processing your data only to provide the recruitment service to that organisation. For questions about how your data is handled in relation to a specific application, contact the hiring organisation directly. You may also reach Aitonomy at privacy@rekruit.app and we will forward your request to the relevant controller or assist as processor.

If you are a recruiter or platform user: Aitonomy Solutions KIG, Münchensteinerstrasse 117, 4053 Basel, Switzerland is the data controller for your account data. For privacy-related requests, contact us at privacy@rekruit.app.

2. What data we collect and why

From job applicants — when you apply for a position through Rekruit, we collect:

• Contact information: name, email address, phone number
• Professional information: CV/resume text, LinkedIn profile URL, work history, education, skills
• Your responses to application form questions and AI interview questions
• A photo if embedded in your CV (extracted automatically from PDF files and displayed to the hiring team alongside your application; it is not used for automated identification or biometric processing)
• Documents you attach: cover letters, certificates, other files

This data is collected on behalf of the hiring organisation using Rekruit and is used solely to evaluate your application for the specific role you applied to. The legal basis for this processing is Art. 6(1)(b) GDPR / nDSG Art. 31 — processing necessary to take steps at your request prior to entering into a contract (the employment relationship).

From platform users (recruiters) — name, email address, profile photo, and organisational role, used to operate your account.

3. Automated decision-making

Your application may be evaluated using automated scoring powered by AI. This produces a score and summary that is made available to the recruiter as one input among others. AI scores are advisory only — they do not constitute an autonomous hiring decision and a human recruiter makes all final decisions. To request human review of your score or to object to its use, contact privacy@rekruit.app.

4. Who we share your data with

Your personal data is processed by the following third-party service providers under data processing agreements:

• Supabase — database and file storage (EU region)
• Anthropic / OpenAI via OpenRouter — AI model inference for CV parsing and application scoring. Resume text is stripped of identifying information (name, email, phone, LinkedIn URL) before being sent. OpenAI Whisper is additionally used to transcribe audio from video interview responses.
• LlamaParse (LlamaIndex) — PDF parsing fallback used when a CV file cannot be read directly. The complete PDF file, which may contain all personal data it includes, is transmitted to servers hosted in the United States. Appropriate transfer safeguards apply.
• Resend — transactional email delivery
• Mux — video hosting for video interview responses
• Stripe — payment processing (applies to hiring organisations only)
• Vercel — web hosting

We do not sell your personal data to third parties.

5. Data retention

Application data is retained for up to 2 years from submission, unless you request earlier deletion. After this period, data is eligible for deletion. Platform user account data is retained for the duration of the account and deleted upon account closure.

6. Your rights

Under the Swiss nDSG and GDPR, you have the right to:

• Access — request a copy of the personal data held about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to automated decision-making and request human review

Job applicants: Because the hiring organisation is the data controller for your application data, requests for access, correction, deletion, or portability should be directed to that organisation. You may also email privacy@rekruit.app and we will forward your request to the relevant hiring organisation on your behalf.

Platform users (recruiters): Email privacy@rekruit.app. We will respond within 30 days.

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.

7. Security

All data is encrypted at rest and in transit. Files (CVs, photos, documents) are stored in a private storage bucket and accessible only via time-limited signed URLs. Access to candidate data is restricted to members of the hiring organisation that received your application.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy.