Privacy policy

1. Who we are

Verso is an AI first-round interview tool. Companies add it to their careers page. Applicants upload a CV and have a short interview, by voice or text, with an AI interviewer. The company then reviews the results and decides who moves forward.

Verso is operated by [Legal entity name], [Registered address], registered under number [Trade register number], CUI/VAT [CUI / VAT number] ("Verso", "we", "us").

2. Who is responsible for your data

Data protection law gives different jobs to different parties. Which one we are depends on whose data it is.

If you applied for a job

The company you applied to (the "employer") is the controller of your application data. It decides why and how your data is used, and it makes the hiring decision. Verso is its processor: we run the tool for the employer and follow its instructions. The employer's own privacy notice also applies to you.

If you want to use your rights, it is usually fastest to contact the employer. You can also write to us and we will pass your request on and help the employer answer it.

If you are a recruiter, a company customer, or on our waitlist

Verso is the controller of your account data, your waitlist details and the data we collect to run our website.

3. What data we handle

Candidates

• Contact details: your name and email. Your phone number and LinkedIn profile link, if you give them.
• Your CV: the PDF you upload, stored in our database, and a structured summary of it that the AI makes (your experience, skills, and the claims and gaps it plans to ask about).
• Your consent record: the date and time you ticked the consent box on the application form.
• Your interview: the full text transcript, the language (English or Romanian) and whether you used voice or text. In voice interviews we receive only the text of what you said. Verso does not record or store audio.
• Integrity signals: for each answer, how many times you left the interview tab or window and for how long, how many times you pasted text into the answer box (text interviews), and how long it took you to start speaking after the microphone opened (voice interviews). The AI notice explains these in full.
• The evaluation: scores for each of the employer's criteria, with short quotes from your answers as evidence, a written summary, strengths, concerns, notes for the recruiter and an overall score.
• The employer's decision: for example, shortlisted or rejected.
• Your feedback, if you give it: a one-question rating of the interview and an optional comment, from your application status page. We use it to improve the interview; it is not shown to the employer.
• Technical data: a secret link that lets you return to your interview, and records of each AI request (model used, size, cost) linked to your application.

Please do not include sensitive information in your CV or answers that the job does not need, such as health details, religion or political views.

Recruiters and company customers

• Your name, email and password. Passwords are stored only in hashed form.
• Sign-in session data: your IP address and browser type.
• Company and job information you enter, your conversation with the AI that helps you define the role, the scoring criteria, and the decisions you record.

Waitlist

• Your work email, name, company, role, expected hires per year, current applicant tracking system, and how you found us if we know it.
• Whether we have invited you to the pilot, and when.

Emails

When we send an email, our email provider processes the recipient address, the message and delivery information (for example, whether it was delivered).

4. Why we use it, and the legal basis

Candidate data (we act for the employer)

We use candidate data only to run the employer's first-round interview: to read the CV, hold the interview, draft an evaluation, show the results to the employer, and send related emails. We do not use it for our own purposes, for advertising, or to train AI models.

The employer is responsible for the legal basis. Usually this is taking steps, at your request, before a possible employment contract (GDPR Article 6(1)(b)), or the employer's legitimate interest in recruiting (Article 6(1)(f)). We also record your agreement on the application form, so there is a clear record that you were told how the process works.

Data we control

• Recruiter accounts: to provide the service you signed up for (contract, Article 6(1)(b)).
• Waitlist: to contact you about the pilot and early access (our legitimate interest in building the product with interested companies, Article 6(1)(f), or steps before a contract).
• Security and abuse prevention: session and technical data to keep accounts and the service safe (legitimate interest, Article 6(1)(f)).
• Legal obligations: to keep records the law requires, such as invoices (Article 6(1)(c)).

5. AI and decisions about you

An AI system asks the interview questions and drafts the evaluation. It does not make hiring decisions. A person at the employer reviews each application and decides. Verso does not reject anyone automatically, so decisions are not based solely on automated processing.

You should know that the employer sees applications ordered by the overall score, so the AI's assessment can affect the order in which a recruiter reads them. You can ask the employer to have a person review your application and the evaluation, to explain it, and to consider your point of view. You can also write to us and we will pass this on.

The AI notice for candidates explains in plain language what the AI does, what it does not do, and how scores are made.

6. Who we share it with

Candidate data is shared with the employer you applied to. We do not sell personal data or share it with advertisers. We use these service providers to run Verso:

About voice interviews. Speech recognition and the interviewer's voice are provided by your browser, not by Verso. Depending on the browser, its provider may process your audio on its own servers (for example, Chrome sends audio to Google for recognition). That processing follows the browser provider's own privacy terms. Verso receives only the resulting text. If you prefer that no audio leaves your device, choose the text interview.

We may also disclose data if the law requires it, or to protect our rights or someone's safety. If Verso is sold or merged, data may pass to the new owner under the same protections.

7. Transfers outside the EU

Anthropic and Resend are US companies, so data sent to them may be processed in the United States. Where applicable, these transfers rely on the EU-US Data Privacy Framework (if the provider is certified) or on the European Commission's Standard Contractual Clauses, with additional safeguards where needed. You can ask us for more information about these safeguards.

8. How long we keep it

• Candidate data: deleted 12 months after the job closes, unless the employer sets a shorter period or asks us to delete it sooner. If the law requires the employer to keep something longer, the employer is responsible for that copy.
• Waitlist data: kept until 24 months after our last contact with you, or deleted sooner if you ask.
• Recruiter accounts: kept while the account is open, and deleted within 90 days after it is closed, except records the law requires us to keep (such as invoices).

Deletion is currently done by our team on request or on schedule, not through a self-service button. Our hosting and email providers may keep backups and logs for a limited time after deletion.

9. Your rights

Under the GDPR you have the right to:

• Access your data and get a copy.
• Correct data that is wrong or incomplete.
• Delete your data ("right to be forgotten").
• Restrict how your data is used, for example while a complaint is checked.
• Object to processing based on legitimate interests.
• Data portability: receive data you gave us in a common, machine-readable format.
• Human review: ask for a person to review an assessment made with AI, give your view, and contest the outcome.
• Withdraw consent at any time, where processing is based on consent.

How to ask. Candidates: contact the employer, or email us at [privacy@your-domain] and we will forward your request and help the employer respond. Everyone else: email us at the same address. We may need to confirm your identity. We answer within one month, or tell you if we need more time.

Complaints. You can complain to a data protection authority. In Romania this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, Romania, www.dataprotection.ro. You can also complain to the authority in the EU country where you live or work.

10. Security

We use HTTPS for data in transit. Recruiters can only see their own company's jobs and candidates. Passwords are hashed. Access to production systems is limited to the people who need it. Our providers are bound by contract to protect the data they handle for us.

Your interview link contains a secret code. Anyone who has the link can open your interview, so please do not share it. No system is completely secure. If we learn of a breach that affects you, we will tell the employer (for candidate data) or you, as the law requires.

11. Cookies

We use only cookies that are strictly necessary, such as the cookie that keeps recruiters signed in. We do not use advertising cookies or third-party analytics cookies.

12. Changes to this policy

We will update this page when our practices change and show the date at the top. If a change matters, we will also tell recruiters and waitlist members by email.

13. Contact us

[Legal entity name]
[Registered address]
Privacy requests: [privacy@your-domain]