Privacy Policy

BD Leaders is responsible for data processing on the Platform (the data controller). When a company uploads CVs to its own account or imports candidate files, that company is the controller of those candidates' data and we process it on its behalf.

Privacy contact: privacy@bd-leaders.com

From candidates:

• Account data: name, email, phone number, password (stored hashed; it cannot be recovered).
• Your CV (PDF), the text extracted from it, and profile fields (job title, years of experience, city, country, nationality, date of birth where given, LinkedIn URL).
• Assessment answers and scores, proctoring events (e.g. leaving the test window), and interview bookings.
• A numeric representation (embedding vector) of your CV used for semantic matching with jobs.

From companies (clients):

• Account and team data: company name, industry, city, country, and the names, emails and phones of team users.
• Published job data, hiring-team notes on candidates, and accept/reject decisions.

Technical data: request logs, IP address, browser type and usage timestamps — for security and troubleshooting.

• Matching candidates to published jobs with AI and notifying them of suitable opportunities.
• Generating and grading assessment questions, explaining fit scores, and generating job descriptions for companies.
• Managing applications, interviews and notifications in the Platform and by email.
• Protecting the Platform, preventing fraud and cheating in assessments, and meeting legal obligations.

We do not use your data for third-party marketing and we never sell personal data.

We use external AI model providers (such as OpenAI and Anthropic) to process CV text, job descriptions and answers in order to produce embeddings, scores and explanations. Only the data needed for each operation is sent, under agreements that do not allow them to train their models on it.

We also use hosting and email providers to run the Platform. All processors are contractually bound to protect the data.

Final hiring decisions are made by the company that owns the job, not by the system; fit scores are an aid only.

• Companies see only candidates matched to their own jobs (profile, CV, assessment results); they never see candidates who did not apply to their jobs.
• Candidates see the sector and city of the hiring company; the company name is not disclosed before the interview stage.
• CVs a company imports into its own account stay private to that company and never surface for other companies.
• We may disclose data where required by law or a court order.

We keep candidate account data while the account is active. After 24 months of inactivity we may delete the CV and personal data.

Application and assessment records are kept by the hiring company as part of its recruitment history, anonymised once the candidate deletes their account.

• Access and correct your data from the "My Profile" page.
• Delete your account entirely from "My Profile" ("Delete my account"): the CV file, its text and embedding, and your personal fields are erased immediately and the login is disabled.
• Object to processing, request a copy of your data, or ask to restrict its use via the contact email above.

We respond to requests within 30 days at most.

Data travels over HTTPS, passwords are stored hashed (PBKDF2), each company's data is isolated at the database level (Row-Level Security), and file access is restricted. No system is 100% secure, but we follow available best practices.

We use strictly necessary cookies only, for sign-in and language preference. We use no advertising trackers.

We may update this policy from time to time. The new date is shown at the top of the page; for material changes we will notify you by email or inside the Platform.