Candidate privacy

How we handle your application data

This page is for candidates. It does not expose the hiring dashboard, CVs, reviewer notes, or other applicants’ information.

Who controls your data

What we collect and why

We collect the identity, contact, profile, CV, logistics, and job-related answers you submit. We use them to operate this recruitment process, assess role-relevant evidence, communicate with you, arrange interviews, and maintain a defensible audit record.

Please do not submit confidential employer information, customer data, credentials, or proprietary source code.

AI-assisted evidence organization

An approved system may organize your written answers against predefined job-related criteria and surface passages for a reviewer. It does not make a final hiring decision. Every advance, hold, and rejection decision is made and recorded by a human.

Sensitive interview information

Any accommodation information is used only to make the process accessible and should not be used as a hiring criterion.

Storage, access, and retention

Application records are stored in a managed database and uploaded CVs in private object storage. Access to the hiring area requires sign-in and an explicit operator allowlist. Hosting is prepared in a Cloudflare environment; service locations may involve international processing subject to the provider’s safeguards.

Candidate data is retained only as long as needed for the hiring process and legitimate recordkeeping. The current operational default is deletion 180 days after the role closes, subject to the final legal retention decision and any applicable obligations.

Your choices and rights

You may ask to access, correct, or delete your candidate data, withdraw from the process, or ask questions about how it is used by contacting hello@headlinema.com. Reference checks require separate, reference-specific consent before outreach.