Privacy Policy

1. Who we are

Rectru is an AI-assisted hiring and candidate evaluation platform operated by Mendzys Inc.. In this policy, “Rectru,” “Mendzys,” “we,” “our,” and “us” refer to Mendzys Inc. and the Rectru service.

2. Scope of this policy

This Privacy Policy applies to:

• visitors to Rectru websites and landing pages;
• customers, tenants, and authorised users of the platform;
• candidates who apply to jobs, complete interviews, or otherwise interact with Rectru on behalf of a hiring company;
• people who contact Rectru for support, commercial, legal, or security-related reasons.

3. Our role in data processing

Depending on the context, Mendzys Inc. may act either as a data controller or as a data processor.

We act as a controller when we process personal data for our own business purposes, such as website operations, account administration, billing, fraud prevention, support, service security, and legal compliance.

We act as a processor when a hiring company uses Rectru to collect, review, analyse, or manage candidate information through the platform. In those cases, the hiring company is typically the controller, and Rectru processes personal data on that customer’s behalf and in accordance with the applicable contract and instructions.

4. Information we may process

Depending on how Rectru is used, we may process the following categories of information:

• account, organisation, and subscription information;
• user identity, login, and access-control information;
• candidate application data, including CVs, cover letters, answers, and profile details;
• interview-related data, including recordings, transcripts, responses, summaries, notes, and evaluation outputs;
• support communications and customer correspondence;
• device, usage, log, and security-related information;
• payment and billing-related records where applicable.

5. How we use personal information

We may use personal information to:

• provide, operate, maintain, and secure Rectru;
• enable recruitment workflows such as application handling, interview scheduling, recordings, summaries, and evaluations;
• authenticate users and manage customer accounts;
• provide support and respond to enquiries;
• monitor system performance, detect abuse, prevent fraud, and protect the platform;
• comply with legal, regulatory, and contractual duties;
• improve reliability, performance, and user experience.

6. AI-assisted functionality

Rectru uses AI-assisted tools to support interview workflows, candidate summaries, screening signals, recommendations, and related hiring operations.

Rectru is designed as a decision-support platform. Rectru does not make hiring decisions on behalf of customers. Customers are responsible for ensuring meaningful human review and compliance with applicable law before taking materially significant action relating to a candidate.

7. Legal bases

Where Mendzys Inc. acts as a controller, we rely on one or more lawful bases, including performance of a contract, legitimate interests, compliance with legal obligations, and consent where required.

Where Mendzys Inc. acts as a processor, the relevant hiring company or customer is responsible for identifying the lawful basis for processing candidate or employee personal data through the platform.

8. Data retention

Rectru applies a default retention approach of up to 30 days for certain data stored in Rectru-managed services and containers, unless:

• a different period is configured by the customer;
• a longer period is needed for security or backup purposes;
• retention is required to comply with legal obligations, dispute handling, or lawful preservation requirements;
• the customer instructs us otherwise under our agreement.

Hiring companies acting as controllers remain responsible for their own retention policies for copies, exports, downstream systems, and other environments outside Rectru-managed storage.

9. Data storage and hosting

Rectru is hosted using Microsoft Azure infrastructure. For customer environments designated by Mendzys Inc. for European data hosting, we intend that primary customer content is stored in Azure resources designated for EU hosting.

Some limited operational, metadata, support, or security data may be processed in other locations where reasonably necessary to operate, support, secure, or improve the service, subject to appropriate safeguards and applicable law.

10. International transfers

Personal information may be processed in countries outside the country where an individual is located. Where required by applicable law, Rectru will use appropriate transfer safeguards, including Standard Contractual Clauses or equivalent recognised mechanisms.

11. Subprocessors and service providers

We may use trusted service providers and subprocessors to support hosting, storage, communications, authentication, analytics, security, and support functions. We require these providers to protect personal information appropriately and process it only for authorised purposes.

12. Security

We use reasonable technical and organisational measures designed to protect personal information, including controls relating to authentication, access management, encrypted transmission, logging, monitoring, and infrastructure security.

No platform, network, or storage system can be guaranteed to be completely secure, and Rectru does not guarantee absolute security.

13. Individual rights

Depending on applicable law, individuals may have rights of access, correction, deletion, restriction, portability, objection, and rights relating to automated decision-making.

Where Rectru processes personal information on behalf of a hiring company or other customer, we may direct the request to that customer because it is typically the controller responsible for responding to the request.

14. Children

Rectru is not intended for use by children unless expressly and lawfully configured by a customer for a legitimate use case in compliance with applicable law.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will publish the updated version on this page and update the effective date above.

16. Contact

For privacy-related questions about Rectru as a business or about this Privacy Policy, please contact:

Mendzys Inc. / Rectru
Email: info@rectru.com

If your personal data was processed through Rectru by a hiring company, you may also contact the relevant hiring company, which is typically the controller for that recruitment data.