Purpose
The policy lists parsing, matching, transformation and anonymization of submitted CV and job data.
For recruitment, technical and privacy teams
Built for responsible recruitment
Understand the published candidate-data terms and the product information available for reviewing a match. Use this page with the privacy policy and API documentation during procurement.
Who handles candidate data?
The published privacy policy identifies BESTLOG as the provider. It describes CVReaderPro as controller for account and subscription data and as processor for CVs submitted by customers. The customer remains responsible for its recruitment purpose and candidate communications.
Retention and deletion
The policy states a two-year raw-CV retention period and describes modification or deletion through the API. Review the current contractual terms for your workflow.
Hosting and providers
The policy states that servers are in Europe and that subprocessors are subject to contractual GDPR duties. Ask our team for the current provider details.
Review the score before a decision
The documented matching response separates total, skills, experience, education, language, distance, profile, semantic and career trajectory scores. It can also include evidence and an algorithm version. Those fields help a recruiter inspect a result and decide what to verify.
The recruiter chooses relevant job requirements and makes the hiring decision. Do not treat a matching score as an automatic rejection or a guarantee of suitability. We do not publish a blanket claim that personal attributes never affect a score without a verified scoring specification.
See the matching workflowControls available to integration teams
- API key authentication for documented v2 endpoints.
- Documented webhook signatures using HMAC-SHA256.
- API operations for reviewing and deleting owned resume resources.
- Published privacy policy and terms for the data-processing relationship.
These are product and documentation details, not a certification or a blanket statement of EU AI Act compliance. Your team should assess the obligations that apply to its deployment.