Privacy Policy

1. Who we are

Konductus (“Konductus”, “we”, “us”) provides AI voice-screening software to in-house recruitment (Talent Acquisition) teams. For the screening data processed on behalf of a hiring company, that company is the data controller and Konductus acts as a data processor. For our own account and marketing data, Konductus is the controller.

Operated by Konductus; the contracting entity and its registered details are confirmed at the point of any commercial engagement. Privacy contact: privacy@konductus.com.

2. Who this applies to

• Recruiters / customers — people who create a Konductus account to screen candidates.
• Candidates — people invited to, or applying through, a voice screening.
• Website visitors.

3. Data we collect

Recruiters: name, work email, password (hashed), agency/company name, billing details (via Stripe), and product-usage data.

Candidates:

• Contact details (name, email, optionally phone) and the CV you upload.
• The voice interview: audio recording and its transcript.
• The Konductus Score and assessment we generate (authenticity, competency, language, soft skills, CV-consistency), red flags, and a recommendation.
• If you choose to “Sign in with LinkedIn”: your name, email, and profile photo, returned by LinkedIn with your consent (via OpenID Connect). This is optional and used to confirm you are a real person and to personalise your record.
• Consent records (what you agreed to, and when).

4. Why we use it, and our legal basis

• To provide the screening service to the hiring company — performance of a contract / the controller’s legitimate interests in assessing applicants.
• Voice recording, transcription and scoring — on the basis of your consent, captured before the interview begins; you can decline.
• LinkedIn sign-in / photo — your consent, which you can withdraw.
• Account, billing, security, and product improvement — contract and our legitimate interests.
• Legal compliance (incl. EU AI Act record-keeping).

5. Automated processing & human oversight

Konductus uses AI to transcribe and score interviews. The score is decision support: a human recruiter reviews it and makes the hiring decision. We do not make solely-automated decisions that produce legal or similarly significant effects without human involvement, and our system requires explicit human confirmation before any AI-suggested rejection is finalised. You have the right to obtain human review, to express your view, and to contest an outcome.

6. Who we share data with (subprocessors)

We share data only with vetted service providers that help us run the product:

• Supabase (database/storage, hosted in the EU) — application data.
• ElevenLabs — voice conversation.
• Anthropic (Claude) — CV parsing & scoring. Not used to train their models.
• Vercel — application hosting.
• Resend — transactional email.
• Stripe — billing (recruiters only).
• LinkedIn — only if you choose to sign in with it.

We do not sell personal data. The hiring company that invited a candidate also receives that candidate’s screening results.

7. International transfers

Application data is stored in the EU (eu-west-2). Some subprocessors operate outside the EEA; where they do, transfers are protected by Standard Contractual Clauses or an equivalent safeguard.

8. How long we keep it

Retention is configurable by the hiring company. Audio recordings and transcripts are kept only as long as needed for the screening and any agreed retention window, then deleted; consent records are kept as an audit trail. Account data is kept while the account is active.

9. Your rights

Subject to applicable law (incl. the GDPR), you can request to:

• access, correct, or delete your personal data;
• restrict or object to processing, and withdraw consent at any time;
• receive a portable copy of your data;
• obtain human review of an automated assessment; and
• lodge a complaint with your local data protection authority.

As a candidate, the hiring company is your primary contact; we will assist them. To exercise any right, contact privacy@konductus.com.

10. Cookies

We use only essential cookies needed to sign you in and keep your session secure. No advertising trackers.

11. Security

Data is encrypted in transit and at rest, access is role-restricted, and we follow least-privilege practices. No system is perfectly secure, but we work to protect your data.

12. Children

Konductus is for professional recruitment and is not directed to anyone under 16.

13. Changes

We may update this policy; we’ll change the “last updated” date above and, for material changes, notify customers.

14. Contact

Konductus — privacy@konductus.com. (The contracting legal entity and its registered address are confirmed at the point of any commercial engagement.)