Privacy Policy

Tallyrecruit is hiring software that employers use to publish job openings, collect applications, and manage their hiring. This policy explains how personal information is handled on the Tallyrecruit website, on the job pages Tallyrecruit hosts, and inside the Tallyrecruit application.

When you apply for a job through a page hosted by Tallyrecruit, the employer you are applying to decides what is collected and why, and Tallyrecruit processes that information on the employer's behalf to provide the service. When you create a Tallyrecruit account as a recruiter, or contact us through this website, Tallyrecruit is responsible for that information.

From candidates: your name, email address, your answers to the application questions the employer chose, and your CV — both the file you upload and the text extracted from it.

From recruiters and employers: your name, email address, and workspace details, handled through our sign-in provider; and, if you connect a Google or Microsoft calendar or a LinkedIn account, an access token for it, stored encrypted. Calendar tokens are used only to check availability and send interview invitations; LinkedIn tokens only to publish the job posts you choose to share.

From visitors: if you request a demo, the name, work email, and company you give us, plus any company size or message you choose to add. The site also uses strictly necessary cookies to keep you signed in and to remember your language; your theme choice is stored locally in your browser. We do not use advertising or cross-site tracking cookies.

We use candidate information for one purpose: letting the employer you applied to receive, review, and respond to your application, including scheduling interviews. We do not sell personal information and we do not use it for advertising.

We use recruiter and visitor information to operate accounts, provide support, secure the service, and follow up on demo requests.

When you submit an application, Zaina — Tallyrecruit's AI assistant — reads your CV and answers and evaluates them against the requirements the employer published for the job. It suggests a score and written notes on strengths and gaps, citing the exact lines of your CV they rest on, and checks that the uploaded file is actually a CV. This helps recruiters read every application, not just the first ones.

If you ask the application form to fill itself in from your CV, Zaina reads the file at that point — before you have submitted anything, and only because you pressed that button. It proposes answers to the form's questions from what your CV states, and each proposed answer is marked as AI-written and can be changed or cleared by you. The text Zaina extracted is kept for up to an hour, so that submitting does not have to read the same file a second time, and is not used after that. If you never submit the form, nothing about that upload reaches the employer.

AI output is a reading aid, not a decision. Every AI-generated score and note is labelled as such inside the product, and a person makes every hiring decision — Tallyrecruit never rejects an application automatically. If you have questions or objections about an AI-assisted assessment, or want a person to re-review your application, contact the employer you applied to; where the law gives you rights over automated processing, you can exercise them the same way.

The evaluation runs on third-party AI infrastructure under contract with us. The content of your application is sent to that provider only to produce the evaluation and to answer the employer's questions about your application inside the product, and Tallyrecruit does not use it for anything else.

Your application is visible to the employer you applied to — the members of their Tallyrecruit workspace. We also rely on a small number of service providers to run Tallyrecruit: cloud hosting and file storage (Cloudflare), database hosting (Neon), sign-in and billing (Clerk), the AI infrastructure for the evaluation described above, and — where an employer connects them — Google or Microsoft calendars for interview scheduling and LinkedIn for publishing job posts. These providers process data only to provide their services to us.

Beyond that, we disclose personal information only where the law requires it, or to protect the rights, safety, or security of Tallyrecruit, our customers, or the public. We do not sell personal information.

Data is stored with the cloud providers named above, which encrypt it in transit and at rest. Tallyrecruit additionally encrypts calendar and LinkedIn access tokens before storing them, and, where the CV file is stored, downloads are limited to signed-in members of the employer's workspace. Our providers may process data in more than one country; where that involves transferring personal information across borders, we rely on the safeguards those providers offer and on applicable legal transfer mechanisms.

Applications are kept for as long as the employer's workspace keeps them, so the employer can maintain an accurate record of its hiring. Recruiter account information is kept while the account is active, and demo-request details only as long as needed to follow up.

To have your data deleted, email privacy@tallyrecruit.com from the address you used with Tallyrecruit — the one you applied with, or the one on your account. The sending address is how we verify the request. We then delete your applications and CV files, the AI evaluations and interview records attached to them, and any account under that address, and confirm by reply within 30 days. The “Delete my data” link in the footer of every page starts this for you.

Depending on where you live — including under Saudi Arabia's Personal Data Protection Law (PDPL) and, where it applies, the EU General Data Protection Regulation (GDPR) — you may have the right to access, correct, or delete your personal information, to object to or restrict how it is used, and to receive a copy of it. For information in a job application, the employer you applied to is responsible for these requests, so you can start there; we support employers in fulfilling them. To exercise these rights with us directly, email privacy@tallyrecruit.com from the address you used with Tallyrecruit — deletion works as described under “How long we keep information”. You can also complain to your data protection authority.

Tallyrecruit is a hiring tool and is not directed at children. We do not knowingly collect personal information from anyone under 16.

If we change this policy, we will post the new version here and update the date at the top. If a change meaningfully reduces your rights, we will take reasonable steps to bring it to your attention.

For anything about a job application — including deletion or re-review requests — the fastest route is the employer you applied to; their name is on the job page. For questions about this policy or about how Tallyrecruit handles personal information, email privacy@tallyrecruit.com and we will route your message to the right place.