1. Who we are
DFN24 (“we”, “us”, “our”) provides AI-powered recruitment services. We act as a data controller for account and website data, and as a data processor when handling candidate data on behalf of our clients.
2. Data we collect
- Account data: name, email, hashed password, company, billing details, credit balance.
- Candidate data: CVs, work history, screening responses and AI evaluation results provided by our clients.
- Usage data: pages viewed, actions taken, IP address, device and browser identifiers.
- Communications: messages exchanged with our team and support tickets.
3. How we use data
We use personal data to deliver the service, authenticate users, process credit purchases, run AI-based candidate screening, prevent abuse, comply with law and improve our platform. We do not sell personal data.
4. Legal bases (GDPR)
We rely on contract performance (delivering the service), legitimate interests (security, product improvement), consent (non-essential cookies and marketing) and legal obligations (tax, accounting).
5. Sharing
Data is shared with sub-processors that host our infrastructure, send transactional emails, process payments and provide AI model inference. All sub-processors are bound by written data protection agreements.
6. International transfers
When data leaves the EEA/UK we rely on Standard Contractual Clauses and supplementary safeguards where appropriate.
7. Retention
Account data is retained while your account is active and for up to 24 months after closure. Candidate data is retained according to instructions from the controlling client. Invoices are retained for the period required by law.
8. Your rights
You have rights of access, rectification, erasure, restriction, portability and objection. To exercise them, email [email protected].
9. Security
We use encryption in transit, encrypted storage, access controls, audit logging and periodic reviews. No system is 100% secure — please protect your account credentials.
10. Changes
Material changes to this policy will be announced by email or in-product notice at least 14 days before they take effect.
11. Contact
Data protection questions: [email protected].
