Privacy Policy

Effective Date: 3 July 2025

Last Updated: 23 October 2026 (added the text message section)

1. Scope

This Privacy Policy explains how Giftem collects, uses, discloses, and safeguards personal information when you visit giftem.co or use our recruiting software and related services.

2. Information We Collect

Information You Provide – Account registration details, recruiter or hiring‑manager profiles, candidate resumes, job descriptions, billing information, and communications.
Information We Collect Automatically – Log files, device identifiers, browser type, IP address, usage metrics, and cookies.
Information from Third Parties – Publicly available data (e.g. LinkedIn profiles), job boards, ATS integrations, background‑check providers, and enrichment APIs (e.g. Diffbot).

3. How We Use Information

Deliver, maintain, and improve the Service;
Analyze resumes and generate AI‑powered insights;
Facilitate recruiter‑candidate outreach by voice, SMS, or email;
Provide customer support and troubleshoot issues;
Conduct research and develop new features (using aggregated, de‑identified data);
Detect fraud, spam, or security incidents;
Comply with legal obligations;
Send promotional communications (with opt‑out).

4. Legal Bases (GDPR‑style)

Where GDPR applies, processing is based on contract necessity, legitimate interests (platform security, product improvement), consent (marketing, cookies), or legal obligation (record‑keeping).

5. Sharing of Information

We share personal information only:

With authorized recruiters and hiring organizations you choose to engage;
With vetted service providers (cloud hosting, voice/SMS, analytics, payment processors) under strict confidentiality;
With authorities when required by law or to protect rights, safety, or property;
In connection with a business transfer (merger, acquisition) subject to standard safeguards.

Text messages (SMS). Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt‑in data and consent; this information will not be shared with any third parties. See the recruiting text message terms for how to opt in, opt out (reply STOP) and get help (reply HELP).

6. Candidate Data & Resume Handling

Candidate data uploaded by recruiters remains under the recruiter’s control. Giftem acts as a data processor, hosting and enriching resumes on the recruiter’s behalf. Recruiters must have a lawful basis to collect and process candidate information and must honor data subject requests (access, deletion, restriction, etc.).

7. AI & Automated Decision‑Making

Giftem employs large language models and retrieval‑augmented generation to rank resumes and draft outreach. Automated scoring is intended to assist human judgment, not replace it. Recruiters must verify AI output before making employment decisions.

8. Cookies & Tracking Technologies

We use first‑party and third‑party cookies for authentication, preferences, analytics, and marketing. You can control cookies through your browser settings. Disabling cookies may limit Service functionality.

9. Data Security

We follow industry‑standard controls (encryption in transit/at rest, role‑based access, annual penetration tests) and pursue SOC 2 Type II certification. No Internet transmission is 100% secure; we cannot guarantee absolute security.

10. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, or enforce agreements. Recruiters may request deletion of Candidate Data at any time via the dashboard or by contacting support.

11. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data; to opt out of certain processing; and to non‑discrimination. Submit requests to privacy@giftem.co. We will verify your identity and respond within 45 days.

12. International Transfers

We store data in the United States. If you access the Service from outside the U.S., you consent to transferring your information to the U.S. and to any other country in which we or our service providers operate, subject to appropriate safeguards (e.g. SCCs).

13. Children’s Privacy

Giftem is not directed to children under 16. We do not knowingly collect personal information from minors. If you believe a minor has provided data, please contact us for deletion.

14. Changes to This Policy

We may update this Policy periodically. Material changes will be communicated via the Service or email. Your continued use after the effective date signifies acceptance.

15. Contact Us

For privacy questions, data subject requests, or complaints, email privacy@giftem.co or mail the address above.