Privacy Policy

1. What Data We Collect

We collect the following information when you use PersonaScore:

• Account information: name, email address, and password (hashed)
• Organization information: company name, team member details
• Candidate data: resumes, cover letters, and application materials uploaded by your organization
• Assessment data: enneagram personality assessment results and AI-generated analysis
• Usage data: pages visited, features used, and general interaction patterns
• Payment information: billing details processed securely through Stripe (we do not store credit card numbers)

2. How We Use Your Data

We use the data we collect to:

• Provide and operate the PersonaScore platform, including candidate screening and personality analysis
• Process candidate resumes and assessments through our AI analysis pipeline
• Send transactional emails (team invites, password resets, account notifications)
• Process payments and manage your subscription
• Improve our platform, features, and AI models

3. AI Processing

PersonaScore uses Claude, an AI model developed by Anthropic, to analyze candidate resumes and personality assessments. When you use our AI features, relevant candidate data is sent to Anthropic for processing.

Anthropic processes this data according to their own privacy policy and data handling practices. We send only the minimum data necessary for analysis. AI-generated results are stored within your PersonaScore account.

4. Data Storage

Your data is stored in Supabase, a managed database platform hosted on Amazon Web Services (AWS) infrastructure. All data is encrypted in transit (TLS) and at rest. Our servers are located in the United States.

5. Data Sharing

We do not sell, rent, or trade your personal information or candidate data to third parties. We share data only in the following limited circumstances:

• AI analysis: Candidate data is sent to Anthropic (Claude) for resume and personality analysis
• Payment processing: Billing information is shared with Stripe to process payments
• Email delivery: Email addresses are shared with our email provider (Resend) to deliver transactional emails
• Legal requirements: We may disclose data if required by law, court order, or governmental regulation

6. SMS / Text Messaging

When a candidate applies to a job on a career page powered by PersonaScore and provides a mobile phone number, that number is used to send SMS text messages from the hiring organization about the application — such as application confirmations, screening call scheduling and reminders, assessment links and reminders, and status updates. Message frequency varies. Message and data rates may apply. Candidates can reply STOP to opt out at any time, or HELP for support. Full terms are in our SMS Terms & Conditions.

No mobile information (phone numbers or SMS opt-in data) is sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are never shared with any third parties for their own marketing. Phone numbers and SMS conversation history are used solely to coordinate a candidate's application with the hiring organization. The only parties that process this data on our behalf are our messaging carrier (Twilio, to transmit the messages) — a service provider, not a marketing partner. Text-messaging originator opt-in data and consent are excluded from all other data-sharing described in this policy.

7. Data Retention

Your data is preserved for as long as your account is active. If you pause or cancel your subscription, your data remains stored and accessible in a read-only state. You can request full deletion of your data at any time by contacting us.

Upon receiving a deletion request, we will permanently remove your data from our systems within 30 days, except where retention is required by law.

8. Cookies

PersonaScore uses essential session cookies for authentication and maintaining your logged-in state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Your Rights

You have the right to:

• Access your personal data and candidate data stored in your account
• Export your data in a portable format
• Delete your data by contacting us at any time
• Correct inaccurate personal information in your account settings
• Object to certain data processing activities

To exercise any of these rights, contact us at [email protected].

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by email or through the platform. Your continued use of PersonaScore after changes take effect constitutes acceptance of the updated policy.

11. Contact

If you have questions about this privacy policy or our data practices, contact us at [email protected].