← Back to SahiScreenEffective date: June 8, 2026 · Applies to SahiScreen platform and services
SahiScreen ("we", "us", "our") operates an AI-powered CV screening platform. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our service. By using SahiScreen, you agree to the practices described here.
SahiScreen processes CV data on behalf of hiring companies. We act as a data processor — the company using our platform is the data controller responsible for how candidate data is used.
01
Information We Collect
Account Information:
- Full name and company name provided at registration
- Work email address and encrypted password
- Billing information (processed securely — we do not store card numbers)
- Plan tier and subscription status
Usage Data:
- Pages visited and features used within the dashboard
- Number of CVs uploaded and screened
- Job postings created and their status
- Browser type, device type, and IP address (for security)
Candidate CV Data (processed on your behalf):
- CV files uploaded by you or submitted via your public apply link
- Extracted text from CVs for AI analysis
- Candidate name, email, and phone number if provided
02
How We Use Your Information
- To provide, operate, and improve the SahiScreen platform
- To process CV screening using AI models (Claude, Gemini)
- To send transactional emails (account verification, screening results)
- To process billing and manage your subscription
- To detect and prevent fraud or abuse
- To respond to your support requests
- To send product updates and newsletters (opt-out available)
We do not use candidate CV data to train our AI models. CV content is processed in real-time and is never used to improve or retrain any underlying AI system.
03
Data Sharing
We do not sell your data. We share data only with:
- Supabase — database and file storage (hosted in EU region)
- Anthropic (Claude) — AI screening for Premium plan users
- Google (Gemini) — AI screening for Essential plan users
- Resend — transactional email delivery
- Payment processor — billing only, we never see full card details
All third-party providers are contractually bound to process data only as instructed and maintain appropriate security measures.
04
Data Storage & Security
- All data is encrypted at rest and in transit (TLS 1.3)
- CV files are stored in private Supabase Storage buckets
- Passwords are hashed — we cannot see them
- Access controls ensure only your company sees your data
- We retain account data for 90 days after account deletion
- CV data is retained for 12 months from upload date
05
Candidate Data
If you are a job candidate who submitted a CV via a company's SahiScreen apply link, your CV was processed by our AI screening system on behalf of that company.
- Your CV is stored securely and visible only to the hiring company
- SahiScreen staff do not read individual CVs
- To request deletion of your CV data, contact the company directly or email us at privacy@sahiscreen.com with the company name
- We will process deletion requests within 30 days
06
Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data in your account settings
- Request deletion of your account and associated data
- Export your data in a machine-readable format
- Opt out of marketing emails at any time
- Withdraw consent for data processing (this will terminate your account)
To exercise these rights, email privacy@sahiscreen.com.
07
Cookies
- Session cookies — required for authentication, expire on logout
- Preference cookies — remember your dashboard settings
- We do not use advertising or third-party tracking cookies
- You can disable cookies in your browser but this will break authentication