Candidate privacy notice and consent
Version of 20 September 2026
Showing the documents for other countries.
I am in Russia or BelarusThe set was chosen by your location and can be wrong behind a VPN.
This is what you agree to when you tick the consent box on an application form at hrmate.app. It is written for the person applying, not for lawyers.
A separate Russian-language consent applies to vacancies from employers in Russia and Belarus.
1. Who receives your data
Your application goes to the employer who published the vacancy. That employer decides what happens next and is the controller of your data. Their name is shown on the vacancy page.
HR Mate provides the software the employer uses to receive and assess applications. We process your data only on that employer's instructions and for no purpose of our own.
2. What you give us
- your name, email address and phone number;
- your CV file and the text in it;
- your answers to the employer's questions;
- the date, time and IP address of your application, which record that you gave this consent.
Giving this data is voluntary, but without it the employer cannot consider your application.
3. What happens to it
- We email you a confirmation code to check that the address is yours. Nothing else happens until you enter it.
- Your CV and answers are sent to artificial-intelligence models, which produce a score and a short written assessment against the vacancy.
- The employer sees your application together with that assessment and decides whether to contact you.
- The assessment is advisory. It is not a decision. A person at the employer decides, and our terms forbid deciding on the automated score alone.
- Your data is not used to train artificial-intelligence models and is never sold.
- Before scoring, your name, contact details, school name and graduation year are removed from what the model sees. How the score is calculated, on which criteria and with which weights, is published at hrmate.app/legal/scoring.
4. Transfer abroad for the AI assessment
As part of this consent, you agree to the transfer of information from your CV and answers — with your full name, phone number, email address, school or university name, graduation year removed first — to AI model providers that process it outside your country, including in countries that are not recognised as providing an adequate level of data protection.
The only purpose is the automated assessment of your application under the published scoring methodology. The providers do not use your data to train their models.
Such countries may offer a lower level of legal protection for personal data, and your ability to enforce your rights there may be limited.
This consent is required to apply through this form, because the employer uses AI assessment and an application cannot be assessed without the transfer. If you do not want to give it, you can send your CV to the employer another way.
Entering the code we email you signs this consent. We store the time you ticked the box, the time you entered the code and the version of this text. Without a signed consent, no data is sent to the models. You can withdraw it as described in section 6; after that nothing more is sent, and the assessment already made is deleted.
5. Where it is stored and for how long
Your application and CV are stored in Ireland (Dublin). The companies that help us run the service are listed in our Privacy Policy.
If you never confirm your email address, your application and CV file are deleted within 24 hours. Otherwise your data is kept until the employer no longer needs it for this vacancy, until you withdraw your consent, or until the employer deletes the vacancy or their account — whichever comes first.
6. Your rights and how to change your mind
You can ask for a copy of your data, ask to have it corrected or deleted, object to it being processed, or withdraw this consent — at any time and without giving a reason.
Write to the employer, or to support@hrmate.app from the address you used to apply. Tell us the vacancy. We act on it, tell the employer, and answer you within thirty days. Withdrawing consent does not affect anything that was lawfully done before you withdrew it.