Privacy Policy

TechGenie Ltd is the data controller for personal data processed through Recruitr. We are subject to the UK GDPR and, where applicable, the EU GDPR. Our lawful bases for processing personal data are: performance of a contract (providing the Service), legitimate interests (improving the Service and preventing fraud), and, where required, your explicit consent.

• Provide the Service — authenticate you, run AI tools, store your saved results, and deliver email communications on your behalf.
• Billing and subscriptions — manage your plan, process payments via Stripe, and send billing notifications.
• Product improvement — analyse aggregated, anonymised usage patterns to improve features and fix bugs. We do not use individual candidate data or CV content for model training.
• Security and fraud prevention — detect and prevent unauthorised access, abuse, and violations of our Terms of Service.
• Communications — send transactional emails (account confirmation, password reset, billing receipts) and, where you have opted in, product updates and announcements. You can unsubscribe from marketing emails at any time.
• Legal compliance — comply with applicable law, respond to lawful requests from authorities, and enforce our agreements.

• Contract performance — processing your account data and running the AI tools is necessary to provide the Service you signed up for.
• Legitimate interests — security monitoring, fraud prevention, and aggregated product analytics, balanced against your privacy rights.
• Legal obligation — retaining billing records and responding to lawful authority requests.
• Consent — marketing emails and any optional integrations where we request your explicit agreement.

We share data with the following sub-processors to deliver the Service:

Where data is transferred outside the UK or EU, we rely on the EU Standard Contractual Clauses (SCCs) or equivalent adequacy mechanisms to ensure appropriate safeguards. Anthropic processes data under their API Data Processing Agreement; inputs and outputs are not used to train their models under our commercial agreement.

We keep your personal data for as long as necessary to provide the Service and meet our legal obligations:

• Account data — retained for the life of your account, plus up to 90 days after account closure for backup and legal purposes, then permanently deleted.
• AI tool run outputs — retained for 7 to 180 days depending on your subscription plan, then automatically deleted.
• CV content — never stored; processed transiently in memory and discarded after the response is returned.
• Billing records — retained for 7 years to comply with financial regulations.
• Server logs — retained for up to 90 days for security and debugging purposes.

Under UK and EU GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your account and associated personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to restrict processing in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email privacy@techgeniehq.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

We implement industry-standard security measures including TLS encryption in transit, encryption at rest for stored data, row-level security on our database, and strict access controls. We conduct regular security reviews and monitor for unusual activity. Despite these measures, no system is perfectly secure; if you become aware of a security issue, please notify us immediately at privacy@techgeniehq.com.

Recruitr is a professional business-to-business tool intended for use by individuals aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or via a prominent notice in the product at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy-related questions or to exercise your rights, contact us at: