Privacy policy

Who we are

ElasticRecruiter is a recruitment service for engineering teams. We source candidates, screen them, interview them by phone and set them a technical test, then present the ones who pass to a hiring client.

The data controller for the personal data described here is ElasticDash Inc., at 1111B S Governors Ave # 40178, Dover, DE 19904. For questions about this policy, or to exercise any of the rights below, email contact@elasticdash.com.

What we collect from clients and visitors

If you browse this site, we collect nothing. There is no analytics, no tag manager and no third-party script on any page, and nothing here sets a cookie.

If you book a call or open a client account, we collect the details you give us: your name, work email, company, the role you are hiring for, and the job description and requirements you send us. If you unlock a candidate, we keep a record of that unlock so we can bill for it and so you keep access to the profile.

What we collect about candidates

If you are an engineer we have sourced, we may hold: your name and contact details, the public professional profile we found you through, your resume, the notes taken during a phone screen, your submission to a technical test, and the score and written assessment that came out of it.

Most of this comes from you directly, when you apply or when you reply to us. The rest comes from sources that are public or that you chose to publish: job boards you posted a profile on, and public developer profiles.

Before a client unlocks you, they see everything except your identity: stack, seniority, screen notes, test submission and score. Your name and contact details are revealed only when a client unlocks your profile, which is the point at which they are charged.

How AI is used on your data

Automated systems are part of how we work, and they act on candidate data. An AI reads resumes and public profiles against a role's requirements and scores the match. Outreach is drafted per candidate. Technical tests are generated per role, and the test session is recorded: the code written, the steps taken, and the transcript of any AI coding agent used during the test. That recording, and the score derived from it, are part of what a client sees.

A score never rejects you on its own. A person reviews the shortlist and speaks to candidates before anything is passed to a client. If you would like a decision that affected you explained, or reviewed by a person, ask us using the contact address above.

How we use it and why we are allowed to

Client data is used to run the service you asked for and to bill you for it: performing our contract with you. Candidate data is used to assess fit for a role and to present suitable candidates to a client: our legitimate interest in operating a recruitment service, and, where you have applied or agreed, your consent.

We also use a limited amount of data to meet legal obligations, such as keeping accounting records, and to establish or defend legal claims.

We do not sell personal data. We do not use candidate data to train general-purpose AI models.

Who we share it with

Hiring clients, when they unlock a profile. At that point the client receives the candidate's identity and contact details along with the file, and becomes a controller of that data in their own right.

Service providers who process data on our instructions. Today there is one: Amazon Web Services, which hosts the service and runs the models that do the screening and testing described above. We use no other processor, and we do not sell or rent personal data to anyone. If that changes, this section changes before the processing does.

Job boards receive the job posting, not candidate data. If you apply through a board, you share your details with us through that board, under its own policy rather than this one.

Authorities, where the law requires it.

International transfers

Our infrastructure runs in Amazon Web Services' Australian region. Personal data is stored and processed in Australia whichever country you are in, and nowhere else.

If you are in the UK or the EEA, that is a transfer outside your region. We rely on the standard contractual clauses in our agreement with Amazon Web Services as the mechanism for it.

How long we keep it

We keep candidate data for 90 days. Profiles, screen notes, test submissions and session recordings are deleted 90 days after we collect them.

An unlocked profile is a second copy, in a client's hands. Deleting ours does not delete theirs. What a client may do with it is set by their obligations to us and by their own privacy notice.

Billing records are the exception, because tax law requires it. They are kept for as long as that law says, and they record that an unlock happened rather than the candidate file behind it.

You can ask us to delete your data sooner, and we will unless we are required to keep it. See "Your rights" below.

How we protect it

Access to candidate files is limited to the people who need it to run a search, and to the client who has unlocked that candidate. Data is encrypted in transit. No system is perfectly secure, but if a breach affects you and the law requires us to tell you, we will.

Your rights

Depending on where you live, you can ask us for a copy of the data we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Where we rely on consent, you can withdraw it at any time.

If you are in the UK or the EU, these rights come from the UK GDPR and the GDPR. If you are in California, the CCPA gives you rights to know, delete, correct and opt out of sharing; we do not sell or share personal data as those terms are defined there. Exercising a right will never get you worse service.

To make a request, email contact@elasticdash.com. We will respond within the time the law allows. If you are unhappy with our answer you can complain to your data protection authority.

Cookies and tracking

This site sets no cookies and runs no analytics, advertising or session-recording scripts. There is nothing to consent to and no banner to dismiss, which is why you have not seen one.

If that changes, this section changes with it, and anything that requires consent will ask for it first.

Children

This service is for people in professional employment and is not directed at children. We do not knowingly collect data about anyone under 16. If you believe we have, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top. If a change materially affects how we use data we already hold, we will tell the people it affects directly.

Contact

Questions about this policy, or a request about your data: contact@elasticdash.com.