Legal · Privacy

Privacy Policy

Last updated: 13 April 2026  ·  Effective: 13 April 2026

Questions? privacy@recrofy.com

Summary: Recrofy is a B2B SaaS tool. We collect data needed to operate the platform, we never sell personal data to third parties, and we give you full control over your data. Read on for the full details.
Table of Contents
  1. Who We Are
  2. Information We Collect
  3. How We Use Your Information
  4. How We Share Information
  5. Candidate Data & AI Processing
  6. Cookies & Tracking
  7. Data Retention
  8. Your Rights
  9. Data Security
  10. International Transfers
  11. Children's Privacy
  12. Changes to This Policy
  13. Contact Us
01

Who We Are

Recrofy ("we", "our", "us") is an AI-powered recruitment platform that helps talent teams screen resumes, manage candidate pipelines, schedule interviews, and generate offer letters. We are the data controller for information provided by our customers (recruiters and hiring managers) and the data processor for candidate information uploaded to our platform on behalf of those customers.

Our registered office and primary place of business is in India. By using Recrofy, you agree to the practices described in this Privacy Policy.

02

Information We Collect

Account Information: When you register, we collect your name, email address, company name, and a hashed password. Super admins may also provide a company logo, about description, and billing details.

Usage Data: We automatically log actions taken within the platform (jobs created, resumes uploaded, emails sent, credits consumed) to power analytics, billing, and product improvement.

Candidate Data (uploaded by you): Recruiters upload résumés and enter candidate details including name, email, phone, employment history, and education. This data belongs to you — we process it only to provide the service.

Communications: If you contact our support team or send emails through the platform, we retain those communications to resolve your request.

Payment Information: Payment details are processed by our third-party payment provider (Stripe). We do not store full card numbers on our servers.

03

How We Use Your Information

We use the information we collect to:

We do not use candidate data to train AI models or build advertising profiles.

04

How We Share Information

We do not sell your personal data. We share data only in the following limited circumstances:

05

Candidate Data & AI Processing

Important for recruiters: You are responsible for ensuring that you have a lawful basis to process candidate personal data and to use AI screening tools on their applications. This typically means your job postings should disclose that AI is used in screening.

When you upload a résumé, we extract the text and send it — along with your job description — to the Anthropic Claude API to produce a fit score, summary, strengths, and concerns. This is done on your behalf as a data processor.

AI-generated scores and recommendations are assistive tools only. Final hiring decisions must always be made by a human. Recrofy does not make autonomous employment decisions.

Candidate data is retained for as long as your account is active, or until you delete the candidate record, whichever is sooner. Candidates whose data was uploaded have the right to request erasure — please contact us and we will coordinate with you to fulfil such requests.

06

Cookies & Tracking

We use the following categories of cookies and similar technologies:

We do not use third-party advertising or tracking cookies. You can configure your browser to block or delete cookies, though this may affect platform functionality.

07

Data Retention

We retain data for the following periods:

You can request deletion of your account and all associated data at any time by contacting privacy@recrofy.com. We will complete deletion within 30 days.

08

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, email privacy@recrofy.com. We will respond within 30 days. We may ask you to verify your identity before fulfilling the request.

09

Data Security

We take security seriously and implement appropriate technical and organisational measures including:

No system is 100% secure. In the event of a data breach that affects your personal data, we will notify you and relevant authorities as required by applicable law within 72 hours of becoming aware.

10

International Transfers

Recrofy operates primarily in India. When we use third-party sub-processors such as Anthropic (USA) or Stripe (USA), data may be transferred internationally. We ensure such transfers are covered by appropriate safeguards including standard contractual clauses (SCCs) or equivalent legal mechanisms where applicable.

11

Children's Privacy

Recrofy is a professional B2B recruitment tool intended for use by adults (18+) in a business context. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

12

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by posting a prominent notice within the platform at least 14 days before the changes take effect.

The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this policy periodically.

13

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:

We are committed to resolving complaints promptly and fairly. If you are unsatisfied with our response, you have the right to lodge a complaint with your applicable data protection authority.