How we handle your data.
A clear, plain-English breakdown of the data we collect, why we collect it, how long we keep it, and the controls you have at every layer of the platform.
Last updated: 21 June 2026
KinectAI ("KinectAI", "we", "us") provides an AI-powered Talent Operating System used by employers, recruiters and job seekers. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the rights you have over it. It applies to the KinectAI website (kinecttalent.com), the KinectAI web application, and any integrated channels such as WhatsApp, email and connected calendars.
1. Who is the data controller
For job seekers using the KinectAI marketplace and resume builder, KinectAI is the data controller. For candidates and employees managed inside a tenant workspace (an employer's CRM and Workforce modules), the employer is the data controller and KinectAI acts as the data processor on their behalf. Employer-specific privacy notices override this document where they conflict.
2. Information we collect
- Account data — name, email, phone number, password hash, role, tenant.
- Profile and resume data — work history, education, skills, voice introductions, profile photo, location.
- Recruitment data — applications, interview transcripts, AI scoring snapshots, recruiter notes, pipeline stage, communications.
- Workforce data — training cohort, readiness assessments, certifications, coaching plans.
- Communications — emails, WhatsApp messages, voice notes and call recordings exchanged through the platform.
- Calendar data — when you connect Google Calendar, we access event metadata required to create, update and sync recruiter reminders. We never read unrelated personal events outside our scope.
- Device and usage data — IP address, browser, device type, pages viewed, feature interactions, error logs.
- Cookies — see our Cookies Policy.
3. How we use your information
- Provide, secure and improve the KinectAI platform.
- Match candidates to jobs, generate AI scoring, conduct AI chat and voice interviews, and produce readiness assessments.
- Send transactional messages (account, interview invites, reminders) and, with consent, product updates.
- Sync recruiter calendars and reminders with connected providers such as Google Calendar.
- Detect, investigate and prevent fraud, abuse and security incidents.
- Comply with legal obligations.
4. Google user data and limited use
KinectAI's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only the Google Calendar scopes needed to create, read and update events on calendars you explicitly connect. We do not sell Google user data, do not use it for advertising, and do not allow humans to read it except where you grant us permission, where required for security or legal reasons, or where data has been aggregated and de-identified. You can disconnect Google Calendar at any time from Settings → Calendar; doing so revokes our access token and stops further sync.
5. Legal bases
Where the GDPR or POPIA applies, we rely on: (a) performance of a contract with you, (b) your consent (which you can withdraw at any time), (c) legitimate interests in operating, securing and improving the platform, and (d) compliance with legal obligations.
6. Sharing and subprocessors
We share data with vetted subprocessors that help us run the platform, including cloud hosting, database and authentication, email delivery, WhatsApp messaging, AI model providers, and analytics. We share recruitment data with the employer whose job you applied to. We do not sell personal data.
7. International transfers
KinectAI operates globally. Where data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses. Enterprise customers can request our DPA at /dpa.
8. Retention
We retain account and profile data for as long as your account is active. Recruitment records are retained per the employer's configured retention policy. You can request deletion of your account and personal data at any time, subject to legal hold requirements.
9. Your rights
Depending on your jurisdiction you have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. Contact us at privacy@kinecttalent.com to exercise these rights.
10. Security
We use encryption in transit and at rest, role-based access control, row-level security for tenant isolation, and audit logging. No system is perfectly secure; report suspected vulnerabilities to security@kinecttalent.com.
11. Children
KinectAI is not directed to children under 16 and we do not knowingly collect their data.
12. Changes
We may update this Policy from time to time. Material changes will be notified via the platform or by email. Continued use after an update constitutes acceptance.
13. Contact
KinectAI — privacy@kinecttalent.com. Postal address available on request.
Ready to see KinectAI in action?
Join our private beta — onboarding takes minutes.