Privacy policy

Krinoa is a hiring product. An employer (a workspace) uses it to post jobs, review applications, and write to candidates. Krinoa is responsible for team accounts, as their controller.

For applications, the employer is the controller, and Krinoa processes the data on the employer's behalf and on its instructions. If you applied for a job, the employer's own privacy notice applies. Send requests about your application to that employer, or to us and we will pass them on.

Candidates can open a separate account at /me to follow their applications. That account is described in the candidate privacy notice.

• Account details: your name, email address, and, if you set one, a password, which we store only as a hash.
• Workspace content: jobs, team members, messages, notes, and scorecards.
• Candidate information a workspace holds: what candidates submit when they apply, such as contact details, résumé, and answers, plus the messages and interviews that follow.
• Technical information: IP address, browser details, and the pages and errors you encounter, used to keep you signed in and to run and secure the service.
• Billing information: your plan and payment status. Card details go directly to our payment processor. We do not see or store them.

If you sign in with Google or Microsoft, the provider shares your name, email address, profile photo, and whether your email is verified. We store the sign-in tokens the provider issues only so sign-in keeps working. We do not request access to your mail, calendar, files, or contacts.

We use this information to create your account, sign you in, and show your name and photo to your workspace. We do not sell it, use it for advertising, or use it to train models.

Krinoa's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Our use of information from Microsoft follows the Microsoft APIs Terms of Use.

• To create and secure accounts, and to sign you in.
• To run the product: careers pages, the pipeline, email, scheduling, and the command line.
• To draft a read of each application where screening is available. The job and the application, including the candidate's details and the team's notes on it, are sent to a model to produce the read. A read is a draft. People in the workspace decide who moves forward, and no decision about a candidate is made by automated means alone.
• To bill paid plans.
• To answer your requests and improve the service.

We process account and workspace data to provide the service you signed up for, billing records to meet legal obligations, and security, analytics, and error data in our legitimate interest in running a safe, working service. Where we rely on consent, such as for WhatsApp messages, you can withdraw it at any time, as easily as you gave it.

We share information only with service providers that help us run Krinoa, and only for that purpose:

• hosting, database, file storage, and email providers;
• Google Cloud, which runs the screening model;
• Google and Microsoft, when you sign in with them;
• Meta, only when a workspace connects WhatsApp and a candidate opts in;
• product analytics and error monitoring, which may receive your account email and name along with usage events;
• Dodo Payments, which processes payments.

We do not sell personal information. We may disclose information if the law requires it, or to protect the service and its users.

These providers process data in the United States and other countries. Where the law requires it, we rely on safeguards such as standard contractual clauses.

We use cookies to keep you signed in and to remember how you last signed in, so the sign-in page can point you to it. The signed-in product may also use an analytics cookie. Careers pages load no analytics. If you clear your cookies, you will need to sign in again.

We keep account information while the account is open. Candidate information is kept according to the employer's retention settings. What a model was shown is deleted after four years at most.

We use encryption in transit, access control by workspace role, and hashed passwords. No system is perfectly secure. You are responsible for your sign-in and for the people you invite into a workspace.

Email support@krinoa.com to get a copy of your information, correct it, delete it, or close your account. You can also ask us to restrict or object to its use, or to send it to you in a portable format. Candidates can see the status of their applications at /me. To get a copy of what an employer holds, or have it corrected or deleted, ask that employer directly, or email us and we will pass the request on.

You can remove Krinoa's access in your Google or Microsoft security settings. That does not by itself delete your Krinoa account.

If you are not satisfied with our answer, you can complain to your local data protection authority or, in India, to the Data Protection Board of India.

Krinoa is not directed at anyone under 16, and we do not knowingly collect their information.

When this policy changes, the date at the top changes too. The version on this page is the current one.

Privacy questions and requests: support@krinoa.com. We aim to reply within two business days.