Search for jobs, applications, candidates, and more
We use cookies to keep the site running and, with your permission, to measure how you use it.
Svayz Ltd (“Svayz”, “we”, “our”, or “us”), a company registered in England and Wales (Company Number 17001057), operates the Svayz recruitment platform at svayz.com (“the Platform”).
We are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, how we use it, your rights under UK GDPR and the UK Data Protection Act 2018, and how to contact us with questions or requests.
Data Controller: Svayz Ltd, 124-128 City Road, London, England EC1V 2NX
Contact: infra-admin@svayz.com
| Category | Examples | Legal Basis |
|---|---|---|
| Identity | Name, email address, profile picture | Contract performance |
| Professional | CV/resume, work history, skills, education | Contract performance |
| Application data | Cover letters, answers to screening questions, interview responses | Contract performance |
| Video introduction | Optional video recording (up to 30 seconds) during the application process. Used only for viewing by the hiring team as proof of genuine interest. Not used for facial recognition, emotion detection, voice analysis, or any biometric analysis. Encrypted at rest in Vercel Blob with private access. Accessible only by the candidate and the hiring company. Retained for the duration of the application process and deleted on account deletion or GDPR erasure request. | Consent (GDPR Article 6(1)(a)) |
| LinkedIn profile data | When you optionally connect your LinkedIn profile during application, we access your name, headline, job positions (titles, companies, dates), and skills. This data is used to verify resume claims and is stored securely. You can request deletion of your LinkedIn data at any time. | Consent |
| Usage data | Pages visited, job searches, bookmark lists, time on page, scroll depth, and active engagement time during job applications | Legitimate interests |
| Technical | IP address, device type, browser, session data | Legitimate interests |
| Communications | Messages, support enquiries | Legitimate interests |
| Category | Examples | Legal Basis |
|---|---|---|
| Identity | Name, email address, job title | Contract performance |
| Organisation | Company name, Clerk organisation ID, subscription tier | Contract performance |
| Job postings | Role descriptions, requirements, salary ranges | Contract performance |
| Billing | Subscription tier (payment details held by Stripe, not us) | Contract performance |
| Usage data | Dashboard activity, pipeline actions | Legitimate interests |
| Technical | IP address, device type, browser, session data | Legitimate interests |
Contractual requirement: Identity data (name, email) and professional data (CV, work history) are required to create an account and use the Platform. If you do not provide this data, you will not be able to apply for jobs or use Platform features.
Voluntary: The following data categories are entirely optional and not providing them will not prevent you from using the Platform:
AI interviews: Where an employer requires an AI interview as part of the application process, participation is a contractual requirement for that specific application. You may choose not to apply for roles that require AI interviews.
No data we collect is required by law (statutory requirement). All data collection is either necessary to provide the service you have requested (contractual) or based on your consent.
We collect standard analytics data (pages visited, referrer, device type) and may set functional cookies. No personal identity data is collected from unregistered visitors unless you complete a guest application form. When you apply for a job as a guest and have consented to analytics, we also collect engagement data (time on page, scroll depth, and active engagement time) to help identify automated applications.
When you consent to analytics cookies, we use Microsoft Clarity to record anonymised session replays and generate heatmaps of page interactions. This helps us understand how visitors navigate the Platform so we can improve the user experience.
Clarity may capture page content, mouse movements, clicks, and scroll behaviour. On pages displaying personal data (such as candidate profiles and application details), we apply masking so that names, email addresses, and assessment scores are not visible in recordings.
Session recordings are processed by Microsoft and are subject to the Microsoft Privacy Statement. You can opt out at any time by withdrawing analytics cookie consent via “Cookie Settings” in the site footer.
Svayz uses artificial intelligence to assist with recruitment tasks. This section explains how AI affects your data.
We do not make solely automated decisions that produce legal or similarly significant effects on individuals without human review. Employers are responsible for all hiring decisions. AI outputs are advisory only.
For full details of how AI is used on the Platform, see our AI Transparency Notice.
For certain AI-powered features — specifically AI candidate screening and scoring, and AI-conducted interviews — Svayz and the employer act as joint controllers within the meaning of Article 26 UK GDPR. This means both Svayz and the employer independently determine aspects of how your data is processed through these features.
What this means for you: Both Svayz and the employer are responsible for ensuring your data is processed lawfully. You may exercise your data protection rights against either or both parties, regardless of the internal allocation of responsibilities between them (Article 26(3) UK GDPR).
Svayz is your primary contact point. For any questions, complaints, or rights requests relating to AI screening, scoring, or AI-conducted interviews, contact us at infra-admin@svayz.com. You do not need to determine which party is responsible — we will handle your request.
The full details of the joint controller arrangement, including the respective responsibilities of Svayz and the employer, are set out in our AI Transparency Notice and the Data Processing Agreement between Svayz and each employer.
We share personal data only where necessary:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Employers (for candidates) | To process applications | Svayz Terms of Service binding employers |
| Candidates (for employers) | Basic employer profile visible on job postings | Minimal necessary data |
| Clerk (Auth) | Identity and authentication management, including LinkedIn OAuth for optional profile verification | DPA in place, UK-adequate data transfers |
| Neon / PostgreSQL | Database hosting | DPA in place, EU region |
| Stripe | Payment processing | DPA in place, PCI-DSS compliant |
| Resend | Transactional email delivery | DPA in place |
| Sentry | Error monitoring (no PII in error reports) | DPA in place |
| Vercel | Platform hosting and edge delivery | DPA in place |
| Upstash / Redis | Session caching and rate limiting | DPA in place |
| Google LLC (Gemini API) | AI model inference for candidate screening, scoring, interviews, and content generation | DPA in place, EU SCCs |
| Google LLC (Calendar API) | Calendar integration for interview scheduling (OAuth) | DPA in place, EU SCCs |
| Qdrant | Vector database for candidate matching and semantic search | DPA in place, EU processing |
| Inngest Inc. | Background job processing for application screening and notifications | DPA in place, EU SCCs |
| Microsoft Corporation (Graph API) | Outlook calendar integration for interview scheduling (OAuth) | DPA in place, EU SCCs |
| Vercel Inc. (Speed Insights) | Web performance analytics (consent-gated — only active when you accept analytics cookies) | DPA in place, EU SCCs |
| Microsoft Corporation (Clarity) | Session recording and heatmap analytics (consent-gated — only active when you accept analytics cookies; PII masked in recordings) | DPA in place, EU SCCs |
We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.
Svayz operates from the United Kingdom. Some of our service providers are located in or process data through the United States and EU. For all international transfers, we rely on:
A list of current data processors and their locations is available on request at infra-admin@svayz.com.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | Duration of account + 30 days | Service provision |
| Closed candidate accounts | 90 days after deletion request | Fraud prevention window |
| Closed employer accounts | 12 months after closure | Legal/billing obligations |
| Application records | 12 months after role closes | Recruitment compliance |
| Interview recordings/transcripts | 12 months | Dispute resolution |
| System logs | 12 months | Security and fraud detection |
| AI decision audit logs | 5 years (personal identifiers anonymised on erasure request; anonymised records retained) | EU AI Act record-keeping (Article 12) and regulatory compliance |
| Anonymised analytics | Indefinite (no personal data) | Product improvement |
Under UK GDPR, you have the following rights:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Request deletion of your personal data (“right to be forgotten”) |
| Restriction | Ask us to limit processing of your data in certain circumstances |
| Data portability | Receive your data in a machine-readable format |
| Objection | Object to processing based on legitimate interests |
| Automated decisions | Request human review of any automated decision affecting you significantly |
| Withdraw consent | Where processing is consent-based, withdraw consent at any time |
You can request deletion of your video intro, LinkedIn data, or any other personal data at any time.
To exercise your rights: Email infra-admin@svayz.com with your name, email address, and the specific right you are exercising. We will respond within 30 days.
We use cookies and similar technologies as described in our Cookie Policy.
We implement industry-standard security measures including:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.
The Platform is intended for use by adults aged 18 and over. We do not knowingly collect personal data from persons under 18 years of age. The Platform's AI-assisted recruitment features, including automated profiling and interview analysis, are designed for adult job seekers only. If you believe a person under 18 has provided us with personal data, contact infra-admin@svayz.com and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users and by a notice on the Platform. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
If you are unhappy with how we have handled your personal data, you may lodge a complaint with the UK Information Commissioner's Office (ICO):
We would, however, appreciate the opportunity to address your concerns before you approach the ICO. Please contact us first at infra-admin@svayz.com.
Data Controller: Svayz Ltd
Email: infra-admin@svayz.com
Address: 124-128 City Road, London, England EC1V 2NX
For general enquiries: infra-admin@svayz.com