Privacy Policy

Cruitical, Inc. Effective Date: March 20, 2026 Last Updated: March 20, 2026

1. Introduction

Cruitical, Inc. (“Cruitical,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use the Cruitical platform, including the Candidate Passport Generator and related services (the “Service”).

This policy applies to all users of the Service, including job candidates (“Candidates” or “you”). By using the Service, you acknowledge that you have read and understood this Privacy Policy.

For a plain-English explanation of how our AI technology works, please see our AI Transparency Notice.

2. Information We Collect

2.1 Information You Provide Directly

When you use the Service, you may provide us with:

Contact Information: Your name, email address, phone number, and location.
Resume and Professional Documents: Your resume, CV, cover letters, or other career documents you upload.
Professional Profile Information: Your work history, education, skills, certifications, and career preferences.
Target Roles and Companies: Information about the roles, companies, or industries you are interested in.
Communications: Messages, feedback, or inquiries you send to us.

2.2 Information We Collect from Public Sources

To generate your Candidate Passport, our AI system conducts research using publicly available information, including:

Professional Profiles: Information from public LinkedIn profiles, personal websites, and professional portfolios.
Code Repositories: Public GitHub profiles, contributions, and project activity.
Published Work: Articles, research papers, conference talks, or other publicly available professional content attributed to you.
Institutional and Company Information: Public information about your employers, educational institutions, and organizations listed on your resume, used to contextualize your experience.

We only access information that is publicly available on the open internet. We do not access private accounts, password-protected content, or information behind authentication walls.

2.3 Information Collected Automatically

When you access the Service, we may automatically collect:

Device and Browser Information: Browser type, operating system, device type, and screen resolution.
Usage Data: Pages visited, features used, time spent on pages, and interaction patterns.
Log Data: IP address, access times, referring URLs, and error logs.
Cookies and Similar Technologies: We use essential cookies to maintain your session and preferences. See Section 9 for details.

3. How We Use Your Information

We use your information for the following purposes:

Purpose	Data Used
Generate your Candidate Passport	Resume, professional profiles, public web data
Evaluate role and company fit	Resume, target roles, public professional data
Identify adjacent career opportunities	Resume, skills, experience, career trajectory
Share your profile with employer partners	Candidate Passport, contact information
Communicate with you	Contact information
Improve and develop the Service	Usage data, feedback, aggregated assessment data
Ensure security and prevent fraud	Log data, device information
Comply with legal obligations	As required by applicable law

4. AI Processing and Automated Decision-Making

This section describes how artificial intelligence is used to process your data. For a more detailed, plain-English explanation, see our AI Transparency Notice.

4.1 What AI Does

When you submit your resume and information, our AI system:

Parses and extracts structured data from your resume (work history, education, skills, achievements).
Conducts web research on publicly available sources to enrich your profile with additional context about your employers, institutions, projects, and professional activity.
Evaluates your profile across multiple dimensions, including education quality, work experience depth, skills alignment, career trajectory cohesion, and role-specific fit.
Generates your Candidate Passport, a comprehensive, AI-produced profile document with scores, fit assessments, and actionable recommendations.
Identifies role and company fit, comparing your profile against the requirements and culture of specific roles and companies.
Discovers adjacent opportunities, suggesting roles you may not have considered but for which your profile indicates strong potential.

4.2 AI Models and Providers

We use the following third-party AI services to process your data:

Google Gemini (primary AI model) — operated by Google LLC
OpenAI GPT models (fallback AI model) — operated by OpenAI, Inc.

Your data is transmitted to these providers for processing. These providers process data in accordance with their respective privacy policies and data processing agreements. We do not sell your data to these providers; they process it solely on our behalf to deliver the Service.

4.3 No Fully Automated Hiring Decisions

Cruitical does not make hiring decisions. The Candidate Passport is an informational tool designed to:

Help you understand your strengths, gaps, and opportunities.
Help employer partners evaluate candidates more effectively.

No employment decision is made solely by AI without human involvement. Employer partners who receive your Candidate Passport make their own independent hiring decisions.

4.4 Your Rights Regarding AI Processing

You have the right to:

Request an explanation of how your Candidate Passport was generated.
Contest AI-generated assessments you believe are inaccurate by contacting us.
Opt out of AI processing entirely by requesting deletion of your data.
Request human review of any AI-generated assessment or score.

To exercise these rights, contact [email protected].

5.1 Employer Partners

Cruitical works with employer partners — including AI startups, FinTech companies, and B2B SaaS companies — to connect candidates with job opportunities. We may share the following with employer partners:

Your Candidate Passport (including AI-generated assessments and scores).
Your contact information (name and email), so employers can reach out to you.
Your resume or professional profile data.

You may opt out of sharing with employer partners at any time by emailing [email protected]. Opting out means your profile will not be shared with prospective employers, but you can still use the Service for personal career feedback.

5.2 AI and Infrastructure Service Providers

We share data with third-party service providers that help us operate the Service:

Provider	Purpose	Data Shared
Google (Gemini)	AI processing	Resume data, professional profile data
OpenAI	AI processing (fallback)	Resume data, professional profile data
Amazon Web Services (AWS)	Cloud hosting, storage, database	All data stored on the platform

These providers act as data processors on our behalf and are contractually obligated to protect your data.

5.3 Legal and Compliance

We may disclose your information if required to:

Comply with applicable law, regulation, legal process, or governmental request.
Enforce our Terms of Service.
Protect the rights, property, or safety of Cruitical, our users, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such transfer and any changes to this Privacy Policy.

5.5 No Sale of Personal Information

Cruitical does not sell your personal information to third parties. Sharing your Candidate Passport with employer partners for the purpose of employment matching is not a “sale” of data — it is the core function of the Service and is done with your knowledge and consent.

6. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specifically:

Active user data (resume, Candidate Passport, profile): Retained for as long as your account is active, plus 24 months after your last activity.
Usage and log data: Retained for up to 12 months.
Communications: Retained for up to 24 months.

You may request deletion of your data at any time by contacting [email protected]. We will process deletion requests within 30 days, subject to any legal retention obligations.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

7.1 Access and Portability

You have the right to request a copy of the personal information we hold about you, including your Candidate Passport and any AI-generated assessments, in a portable, machine-readable format.

7.2 Correction

You have the right to request correction of inaccurate or incomplete personal information.

7.3 Deletion

You have the right to request deletion of your personal information. Upon a valid deletion request, we will delete your data from our active systems within 30 days. Note that:

Data already shared with employer partners prior to your deletion request cannot be recalled by Cruitical. You may need to contact those employers directly.
Some data may be retained in backups for a limited period or as required by law.

You may opt out of having your Candidate Passport and profile shared with employer partners at any time by emailing [email protected].

7.5 Opt-Out of AI Processing

You may request that your data not be processed by AI. Note that this will prevent us from generating or maintaining your Candidate Passport, as AI processing is integral to the Service.

Where we rely on your consent to process personal information, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know: You may request the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purpose, and the categories of third parties with whom we share it.
Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
Right to Correct: You may request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing: Cruitical does not sell personal information. We share personal information with employer partners as described in Section 5.1. You may opt out of this sharing.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email [email protected] with the subject line “CCPA Request.”

Categories of Personal Information Collected (per CCPA categories):

CCPA Category	Examples
Identifiers	Name, email, phone number, IP address
Professional/Employment Information	Resume, work history, job titles, employers
Education Information	Schools, degrees, coursework, GPA
Internet/Electronic Activity	Usage data, log data, browser information
Inferences	AI-generated assessments, scores, role-fit evaluations

9. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

Essential Cookies: Required for the Service to function (session management, authentication). These cannot be disabled.
Analytics Cookies: Used to understand how users interact with the Service and to improve functionality. We use the following analytics providers:
- Google Analytics — operated by Google LLC. Google Analytics uses cookies to collect usage data, which is processed in accordance with Google’s Privacy Policy.
- PostHog — operated by PostHog, Inc. PostHog uses cookies and event tracking to analyze product usage, which is processed in accordance with PostHog’s Privacy Policy.

We do not use third-party advertising cookies or cross-site tracking technologies.

You can control cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

10. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including:

Encryption of data in transit (TLS/HTTPS) and at rest.
Access controls limiting data access to authorized personnel.
Secure cloud infrastructure (AWS) with industry-standard protections.
Regular review of security practices.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you become aware of a security incident, please contact us immediately at [email protected].

11. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will promptly delete it.

12. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy regardless of where it is processed.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last Updated” date at the top of this page and, where practicable, by providing notice through the Service or via email. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

Cruitical, Inc. Privacy Inquiries: [email protected] General Inquiries: [email protected] Website: https://cruitical.com Product: https://app.cruitical.com

Cruitical, Inc. | Delaware C-Corp | EIN: 41-4866189