Privacy Policy & Data Protection Charter
We never sell, rent, or trade candidate resumes, interview audio recordings, or evaluation scores to third-party data brokers, marketers, or external AI model trainers.
All interview transcripts, code sandboxes, and recruiter notes are encrypted with AES-256 at rest and TLS 1.3 in transit, with dedicated multi-tenant schema partitioning.
Candidates retain full GDPR Article 17 rights to export verbatim transcripts, inspect 100-point rubric breakdown logic, or request complete profile erasure at any time.
1. Scope & Legal Relationships (Controller vs. Processor)
This Privacy Policy explains how SOLLERT Inc. ("SOLLERT", "we", "us", or "our") processes personal data when recruiters, hiring teams, candidates, and website visitors interact with our autonomous technical assessment platform, web applications, and services at sollert.io.
Under the European Union General Data Protection Regulation (EU GDPR), United Kingdom GDPR, and applicable global privacy regimes:
- SOLLERT as a Data Processor / Service Provider: When employers and recruiters use SOLLERT to schedule, conduct, and score technical interviews for their job openings, the employer acts as the Data Controller. SOLLERT acts strictly as a Data Processor executing candidate screening pursuant to the employer's instructions and our Data Processing Addendum (DPA).
- SOLLERT as a Data Controller: When recruiters create administrative accounts, manage billing, or visitors browse sollert.io and submit contact inquiries, SOLLERT acts as an independent Data Controller.
2. Categories of Information We Collect
We collect information in three operational contexts: candidate assessments, recruiter workspace administration, and platform telemetry. For a dedicated technical breakdown, see our What User Data We Collect Page.
A. Candidate Assessment Data
Full name, email address, phone number, LinkedIn URL, GitHub handle, uploaded resume documents, verbatim interview dialogue transcripts, recorded audio streams (processed via browser Web Speech API), code submissions, compilation logs, and integrity telemetry (tab-switching focus loss events and answer timing latencies).
B. Recruiter & Employer Workspace Data
Recruiter identity credentials, business email address, company name, workspace configuration, customized evaluation rubrics, job specifications, and billing contact details. Payment card details are tokenized and processed directly by Stripe (PCI-DSS Level 1 compliant); SOLLERT never stores raw credit card numbers.
C. What We Explicitly DO NOT Collect
SOLLERT does NOT collect biometric facial recognition geometry, iris scans, keystroke biometric dynamics, or protected demographic traits (such as race, religious beliefs, political affiliation, or health records).
3. Legal Bases for Processing (GDPR Article 6)
We process personal information under the following established legal foundations:
- Performance of a Contract: Providing autonomous candidate screening requested by the candidate and employer.
- Explicit Consent: Where candidates grant microphone permission and acknowledge terms prior to initiating an AI interview session.
- Legitimate Interests: Defending platform security, verifying anti-cheat integrity, preventing automated denial-of-service, and diagnosing system latency.
- Compliance with Legal Obligations: Retaining audit trails necessary to satisfy anti-bias hiring audit laws and statutory record-keeping mandates.
4. AI Scoring, Automated Tools & Human-in-the-Loop Transparency
SOLLERT adheres strictly to the EU Artificial Intelligence Act (EU AI Act) provisions for high-risk employment software and the New York City Automated Employment Decision Tools (AEDT / NYC Local Law 144) standard:
Every score produced by SOLLERT provides full explainability, detailing the exact criteria, candidate quote snippets, and rubric weights applied. Candidates are entitled to request human review of any AI screening evaluation.
5. Audio Streams, Speech Recognition & Anti-Cheat Telemetry
During active AI interviews, our system requests browser microphone access to capture candidate verbal answers. Audio processing utilizes client-side Web Speech APIs and streaming low-latency speech engines solely to transcribe candidate spoken answers into text.
To ensure fairness across all applicants, our sandboxes track passive telemetry:
- Browser window visibility and tab focus loss counts (flagging potential external copy-paste or search aids).
- Compilation attempt timestamps and syntax execution error rates.
- Cadence of answer generation to detect unauthorized automated script injection.
Telemetry flags are provided to recruiters as contextual indicators; they do not trigger automated candidate disqualification.
6. Third-Party Sub-Processors & Infrastructure
SOLLERT partners with vetted enterprise infrastructure providers who maintain SOC 2 Type II and ISO 27001 certifications. We execute Data Processing Addendums (DPAs) incorporating standard contractual clauses with all vendors.
For a live, transparent inventory of all cloud hosting, database clusters, and AI model providers, please review our public Third-Party Sub-Processors Directory.
7. International Cross-Border Data Transfers
When candidate or customer data is transferred outside the European Economic Area (EEA), the United Kingdom, or Switzerland, SOLLERT relies on the European Commission's Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework. We implement supplemental technical safeguards, including AES-256 field-level encryption, to protect transferred personal records.
8. Candidate & User Rights (GDPR & California CCPA/CPRA)
Under applicable data privacy legislation, candidates and platform users hold enforceable rights regarding their records:
Request an export copy of your interview transcript, 100-point scorecard, and rubric metrics in JSON or PDF format.
Request permanent deletion of your candidate profile, uploaded resumes, and interview logs from SOLLERT systems.
Correct inaccurate contact details or request human re-evaluation of an automated interview scorecard.
We will never deny services, charge different prices, or penalize any user exercising their statutory privacy rights.
To exercise any privacy right, email our Data Protection Team at privacy@sollert.io. Requests are verified and fulfilled within thirty (30) days without charge.
9. Data Retention Schedules & Deletion Protocols
We retain candidate assessment dossiers strictly for the duration specified by the hiring organization's data retention policy (defaulting to twelve (12) months following interview completion to satisfy EEOC statutory compliance). Following the expiration of the retention window, candidate records and audio files are permanently purged via cryptographically secure deletion routines.
10. Data Protection Officer & Contact Information
If you have any questions, complaints, or wish to exercise your data rights, please contact our designated Data Protection Officer: