Privacy Policy

This Privacy Policy explains how RezRank (“RezRank,” “we,” “us”) collects, uses, and protects information when you use our platform (“Service”).

1. Who We Are

RezRank is a B2B talent intelligence platform used by recruiting teams to rank candidates against job descriptions. Our customers are companies; the people who use the Service are typically their recruiters, hiring managers, and admins.

2. Information We Collect

From accounts

• Account email, name, role, and company affiliation (via Auth0).
• Onboarding answers (team size, plan interest) collected at signup.
• Billing details processed by Stripe (we never see card numbers).

From your use of the Service

• Job descriptions and resumes you upload (“Customer Data”).
• Rankings, notes, and reports you generate.
• Usage metrics (rankings run, seats used) for billing and capacity.
• Standard log data (IP address, user agent, timestamps) for security and operations.

From candidates

We do not collect data directly from candidates. We process candidate resumes that our customers upload on the basis that the customer has lawful authority to do so (e.g., the candidate applied to a role they are evaluating).

3. How We Use Information

• To provide the Service — running AI rankings, sending notifications, supporting your team.
• To bill — calculating subscription usage, processing payments via Stripe.
• To secure — detecting abuse, enforcing rate limits, investigating incidents.
• To improve — aggregated, de-identified analytics on feature usage. We never train foundation models on your Customer Data.
• To comply — meeting legal obligations and responding to lawful requests.

4. Sub-Processors

We use the following sub-processors to operate the Service:

• Auth0 (Okta) — identity & authentication
• Vercel — application hosting
• Railway — database hosting (MySQL)
• Stripe — payments and billing
• Google (Gemini API) — AI inference for ranking

Each sub-processor processes data on our behalf under written agreements. We do not sell or share personal information for advertising purposes.

5. Data Retention

• Customer Data: retained while your account is active, deleted within 30 days after account closure unless you request earlier deletion.
• Billing records: retained 7 years for tax compliance.
• Security logs: retained 90 days.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete personal information we hold about you. You may also object to certain processing and withdraw consent where applicable.

Account admins can export or delete their company’s data from within the app, or by emailing privacy@rezrank.io. We respond to verifiable requests within 30 days.

7. Security

• Data encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Multi-tenant isolation enforced via tenant_id on every database query.
• Role-based access controls (admin, recruiter, hiring manager, viewer).
• Audit logs of sensitive actions retained 90 days.
• Annual security review and dependency scanning.

8. International Transfers

We are based in the United States and process data in the US. If you access the Service from outside the US, you consent to data transfer to and processing in the US.

9. Children

The Service is not directed at individuals under 18. We do not knowingly collect information from children.

10. Cookies & Tracking

We use strictly-necessary cookies for authentication (Auth0 session). We use minimal first-party analytics (Plausible) for traffic measurement, which does not set cookies and does not track individuals across sites.

11. Changes

We may update this policy. Material changes will be notified by email or in-app at least 14 days before they take effect.

12. Contact

Privacy questions: privacy@rezrank.io. General contact: info@rezrank.io.