Privacy Policy

Last updated: [DATE]

Template for review — replace the bracketed placeholders and have a legal professional check this before you rely on it.

Who we are

recroo (“we”, “us”) is operated by [LEGAL ENTITY NAME], [company number], of [registered address]. For any privacy question, contact [privacy@recroo.co.uk].

The data we handle

We handle two broad categories of personal data:

  • Your account data — your name, email and profile image from your Google or Microsoft sign-in, and your organisation/role.
  • Candidate data you process — CVs, job specs and related content you upload or generate. For this data your agency is the controller and we act as a processor on your instructions.
  • Usage data — which tools and actions are used, for product analytics and billing limits (no candidate content is sent to third-party analytics).

How we use it

  • To provide the service and generate the documents you ask for.
  • To operate accounts, billing and support.
  • To secure the service and enforce fair-use limits.

Sub-processors

We rely on trusted providers to run the service: [Anthropic] (AI generation), [Stripe] (payments), [Resend] (email), [Render] (hosting/database), and the identity providers you sign in with. Each processes data only as needed to deliver their part.

Retention

Account data is kept while your account is active. Candidate data is processed on your instruction and deleted when you delete it, or when your organisation is deleted. [State your default retention period.]

Your rights

Under UK/EU data protection law you may request access, correction, deletion or export of your personal data, and object to certain processing. You can delete your organisation and its data at any time from Settings, or contact [privacy@recroo.co.uk]. You may also complain to the ICO.

Cookies

We use strictly-necessary cookies for sign-in and session security only. We do not use advertising or cross-site tracking cookies.

Contact

[privacy@recroo.co.uk] · [address]