Privacy Policy

AiQlick is an AI-assisted recruitment platform. Employers and recruitment teams use it to post roles, manage candidates and collaborate; job seekers use it to build a profile, see how they match open roles, and apply.

This policy explains what personal data we process, why, and what you can do about it. For anything covered here, contact us at support@aiqlick.com.

Controller

[to be confirmed]

Registration number

[to be confirmed]

Registered address

[to be confirmed]

Contact

support@aiqlick.com

Data Protection Officer

Not appointed. Privacy questions go to the contact address above.

What we hold depends on how you use the platform. In outline:

Account data

Name, email address, password (stored only as a hash, never in readable form), and optionally a phone number, profile photo and display preferences.

CV and profile data

Any CV you upload and the information our AI extracts from it — work history, education, skills and proficiency, languages, certifications — plus what you add yourself: salary expectations, availability, location and job preferences.

Application data

The roles you apply to, your salary expectation and motivation for each, your stage in the employer's pipeline, match scores, interview records and any notes an employer adds about you.

Employer and CRM data

Company details, team members and their roles and permissions, and business contacts recorded in the CRM, including clients, partners and collaborating recruiters.

Communications

Messages and conversations sent through the platform, notifications, and — where you use the built-in video meetings — meeting records and, if transcription is enabled for that meeting, a transcript.

Billing data

Subscription and plan, credit balance and credit transactions, a log of AI operations for invoicing, and invoices. Card details are entered on Stripe's own checkout and are never sent to or stored by us.

Technical data

Server logs needed to run and secure the service, including IP address, timestamps and error diagnostics.

A CV can contain more about you than the role requires, and sometimes more than you intended — health information, for example, or details that reveal ethnicity or beliefs. We do not ask for special categories of data and we do not use them for matching. Please avoid including them.

To provide the service — performance of a contract

Creating and running your account, parsing CVs you upload, producing match scores, running pipelines and interviews, delivering messages and notifications, and processing payments.

To keep it working and secure — legitimate interests

Diagnosing faults, preventing abuse and fraud, maintaining backups, and improving how the product works. We do not sell personal data, and we do not use your CV to train third-party AI models.

To meet legal obligations

Retaining invoices and accounting records for the periods tax law requires.

With your consent

Optional communications, and any processing we ask you about separately. You can withdraw consent at any time without affecting what was lawful beforehand.

When you apply to a role, or an employer adds you to their talent database, that employer can see your profile, CV and application. Employers using shared talent lists or collaborating with partner recruiters can share your profile onward within the platform. You control profile and CV visibility from your account settings, and you can see and revoke shares you have granted.

Beyond that, we use a small number of processors to run the service. Each is bound by a data processing agreement and may only act on our instructions:

Amazon Web Services — Sweden (eu-north-1)

Application hosting, database, file storage and content delivery for the production platform.

Amazon Bedrock — AI models

The AI models behind CV parsing, job parsing, the assistant and writing help.

Self-hosted infrastructure — Sweden

Our support system and internal observability run on infrastructure we operate in Sweden.

Stripe

Payment processing and card handling. Stripe acts as an independent controller for payment data under its own privacy policy.

Google

Only if you choose to sign in with Google. We request the minimum scopes — your OpenID identifier, email address and basic profile — and nothing else.

Email delivery

An email provider delivers transactional messages such as verification links, password resets, invitations and reminders.

We may also disclose data where the law requires it, or to establish or defend legal claims.

Production runs in AWS's Stockholm region, and our support and observability systems run on infrastructure in Sweden.

If you sign in with Google, Google processes your sign-in under its own terms and transfer mechanisms.

We keep personal data for as long as your account is active and you are using the service. When you delete your account we delete the personal data associated with it, other than records we are legally required to retain — invoices and accounting records in particular, which are kept for the statutory period and then removed.

Data an employer has separately recorded about you — an application you submitted, or notes made during a hiring process — sits in that employer's workspace, and they act as controller for it. If you want it removed, contact them directly; you can also contact us and we will pass the request on.

Backups roll off on their own schedule, so deleted data can persist in a backup for a short period after removal from the live system.

Under the GDPR you have the right to:

• Access the personal data we hold about you, and receive a copy.
• Have inaccurate data corrected, and incomplete data completed.
• Have your data erased. You can do this yourself — deleting your account from your profile settings removes your account and its associated personal data.
• Restrict how we process your data, in the circumstances the GDPR allows.
• Receive your data in a portable, machine-readable format, and have it transmitted to another provider where technically feasible.
• Object to processing carried out on the basis of our legitimate interests.
• Withdraw consent at any time, where consent is the basis we rely on.
• Complain to your national data protection supervisory authority.

To exercise any of these, write to support@aiqlick.com. We will respond within one month, and will tell you if we need longer because the request is complex.

We use AI in two ways: to read documents, and to score matches.

Reading documents means extracting structured information from a CV or job description you upload, so it does not have to be typed in by hand. You can review and correct everything it extracts.

Scoring means comparing a profile against a role across seven factors — skills, work experience, salary, location, languages, job type and availability — weighted according to what the role calls for. The score is not a decision. It ranks and it explains: any match can be opened to see how each factor contributed and how much it counted. Hiring decisions are made by the employer's own people, not by the platform, and no offer, rejection or shortlist is issued automatically on the strength of a score alone.

If you believe an automated score has been applied to you unfairly, contact us and we will explain how it was reached and route your concern to the employer responsible for the decision.

Traffic to the platform is encrypted in transit. Passwords are stored only as hashes and cannot be read back by us or by anyone else. Access inside a workspace is governed by role-based permissions, so colleagues, clients and partner recruiters see only what their role allows. Payment card details never reach our systems.

No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, you.

The platform is intended for people of working age and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

If we change this policy we will update the date at the top of this page. Where a change materially affects how we use your data, we will tell you directly rather than relying on you noticing.