Privacy Policy

ReqFort ("we," "our," or "us") operates a collaborative, modern applicant tracking platform designed to help companies manage their hiring pipelines, resumes, scorecards, and candidates.

This Privacy Policy explains how we collect, protect, share, and retain customer data and candidate applications. As a B2B SaaS platform, we act as a Data Processor for the candidate data uploaded by our customers, who serve as the Data Controllers.

We collect data under two main categories:

• Account Information: Name, professional email, billing details, and company names provided by company administrators when registering accounts.
• Hiring & Candidate Data: Resumes, CV documents, work histories, custom structured interview responses, scorecards, and email communication transcripts uploaded or generated by team users.
• System Operations Log: IP addresses, browser configurations, access timestamps, and usage behavior tracked solely for security auditing and performance tuning.

We process data to deliver the core hiring platform and maintain audit trails, including:

• Operating applicant pipelines, candidate search engines, and structured evaluations.
• Running automated AI screening filters and scores on candidate resumes to assess criteria match (only when configured by account users).
• Performing active security checks, SOC 2 compliance verification, and server uptime monitoring.

Security is built into our core database design. We implement advanced safety standards including:

• Multi-Tenant Isolation: Virtual boundaries separating database storage for each company workspace.
• Data Encryption: All data is encrypted in transit using TLS 1.3 and at rest via AES-256 keys.
• Access Logs: Comprehensive, unalterable auditing logs of user activities to meet strict compliance standards.

We comply with global privacy rules (GDPR, CCPA). Since candidate records are controlled by hiring teams, candidates should contact the respective company to exercise rights:

• Requesting access or exporting records.
• Rectifying errors or incomplete logs.
• Demanding permanent erasure ("Right to be Forgotten") from the customer applicant records.

If you have questions about candidate data management, security measures, or subprocessors, contact our Data Protection Officer at:

Email: security@reqfort.com