Privacy Policy
This Privacy Policy applies to AiGade Consulting Services and describes how we collect, use, and protect personal data in connection with the AiGade Recruitment platform. This policy covers both employers (businesses that use the Service) and candidates (job applicants who interact with our voice AI agent).
1. Data Categories
Employer data: Business name, legal name, address, contact email, phone number, billing information (Stripe), plan details, user credentials (Clerk).
Candidate data: Full name, email, phone (E.164), preferred language, resume text and files, parsed skills and experience, call recordings, call transcripts, AI interview scores (0-100) and breakdowns, application status, rejection codes, cooldown dates, opt-out flags.
Usage data: SMS logs (inbound and outbound), webhook payloads from Vapi and Telnyx, API call metadata, session data (Clerk authentication events).
2. Lawful Basis
Employers: Contract performance and legitimate interest (platform operation, fraud prevention, billing).
Candidates: Legitimate interest of the employer in screening; explicit consent for recording via SMS opt-in and voice disclosure at call start. Candidates may withdraw by replying STOP or emailing privacy@aigade.com.
3. Sub-processors
A full list with DPA references is at /sub-processors. Key sub-processors: Supabase (storage), Vapi.ai (voice), Telnyx (SMS/telephony), Stripe (payments), DeepSeek (LLM scoring).
We notify customers 30 days before adding or replacing any sub-processor. To subscribe, email privacy@aigade.com.
4. Retention
Call recordings and transcripts are retained for 90 days by default. Pro tier may extend to 12 months. Auto-deleted after retention period or upon written request.
Candidate profile data is retained for the duration of the employer account plus 90 days after cancellation, then deleted.
AiGade is not responsible for loss of recordings deleted at your request.
5. Candidate Rights
Candidates have the right to: access, correct, delete, restrict processing, withdraw consent, and opt out of SMS (by replying STOP).
To exercise rights, use the privacy request form or email privacy@aigade.com. We respond within 30 days.
6. International Transfer and DeepSeek Disclosure
Candidate data is processed primarily in the United States. For LLM scoring, we use DeepSeek (China-based provider); all API calls routed via US endpoint. Only anonymized resume text and transcript excerpts are sent to DeepSeek -- no candidate identifiers.
For EU candidates (Sprint 3+), AiGade will implement Standard Contractual Clauses. Until then, the Service is limited to US candidates.
7. Your Responsibilities as Employer
You are the data controller for candidate data. You are responsible for: lawful basis for processing, providing required notices to candidates, compliance with EEOC, FCRA, ban-the-box, wage transparency, ADEA, and maintaining candidate consent records.
AiGade is a data processor acting on your instructions only.
8. Contact
Privacy: privacy@aigade.com or privacy request form.
Support: support@aigade.com