Privacy Policy

Effective date: 1 March 2026

CandidReel Pty Ltd ("CandidReel", "we", "us", "our") operates the CandidReel platform at candidreel.com. This policy explains what personal information we collect, why we collect it, and your rights regarding that information.

1. Information we collect

Account information

When you create an account, we collect your name, email address, and organisation name. If you sign up via a third-party provider (e.g. Google), we receive your basic profile information from that provider.

Interview recordings and content

When candidates complete video interviews, we store the video recordings, AI-generated transcripts, scores, and any notes or ratings added by your team. Candidates provide their name and email address when starting an interview.

Usage data

We automatically collect information about how you interact with CandidReel, including pages visited, features used, browser type, device information, and IP address. This data helps us improve the product and diagnose issues.

Payment information

Payment details (credit card numbers, billing addresses) are collected and processed by Stripe. We do not store your full payment card details on our servers. We receive limited information from Stripe such as the last four digits of your card and billing status.

2. How we use your information

We use personal information to:

• Provide and operate the CandidReel platform, including video recording, playback, and sharing
• Process interview recordings through AI for transcription, scoring, and insights
• Send transactional communications (interview invitations, account notifications, billing receipts)
• Analyse usage patterns to improve features and fix bugs
• Process payments and manage subscriptions
• Respond to support requests and communicate with you about your account
• Comply with legal obligations

We do not sell your personal information. We do not use interview recordings or transcripts to train AI models.

3. Data retention

Interview recordings are stored until you or your organisation deletes them, or until your account is closed. You can delete individual recordings at any time from your dashboard.

Account data is retained for as long as your account is active. When you close your account, we delete your personal data within 30 days, except where we are required to retain it for legal or compliance reasons (e.g. billing records may be retained for up to 7 years under Australian tax law).

Usage and analytics data is retained in an aggregated, de-identified form and is not linked back to individual users after account deletion.

4. Third-party services

We use the following third-party services to operate CandidReel. Each service processes data in accordance with their own privacy policies:

• Supabase — database hosting, authentication, and file storage
• Mux — video processing, encoding, and delivery
• OpenAI — AI-powered transcription, scoring, and interview insights
• Stripe — payment processing and subscription management
• Vercel — application hosting and content delivery
• Resend — transactional email delivery
• Sentry — error monitoring and performance tracking

Data shared with AI providers (OpenAI) is used solely to generate transcriptions and scores for your interviews. It is not used to train their models, and is processed and discarded according to their data processing agreements.

5. Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data, subject to legal retention requirements
• Export — request your data in a portable, machine-readable format
• Objection — object to certain types of processing, including direct marketing
• Restriction — request that we limit how we use your data while a complaint is resolved

These rights are provided under the Australian Privacy Act 1988 and, where applicable, the EU General Data Protection Regulation (GDPR). To exercise any of these rights, contact us at privacy@candidreel.com. We will respond within 30 days.

6. Cookies and tracking

CandidReel uses essential cookies to maintain your session and remember your preferences (e.g. theme selection). These cookies are strictly necessary for the platform to function and cannot be disabled.

We may use analytics cookies to understand how visitors interact with our marketing pages. These are only set with your consent where required by law. We do not use advertising cookies or third-party tracking pixels.

7. Data security

We implement industry-standard security measures to protect your data, including encryption at rest (AES-256) and in transit (TLS 1.3), row-level database security, and regular security audits. For more details on our security practices, see our security page.

8. International data transfers

CandidReel is based in Australia. Some of our third-party service providers may process data in other jurisdictions (primarily the United States). Where data is transferred internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements that meet GDPR requirements.

9. Children's privacy

CandidReel is not directed at individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.

10. Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the platform. The "effective date" at the top of this policy indicates when it was last updated.

11. Contact us

If you have questions about this privacy policy or how we handle your data, contact us at:

CandidReel Pty Ltd
Email: privacy@candidreel.com
General enquiries: hello@candidreel.com

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.