Privacy & GDPR

Data collected

StaffKit only collects data necessary for the service to function:

• Email address and password (user account)
• Company name (for account personalization)
• Uploaded CV files (raw CVs and reference templates)
• Transformation metadata (date, status, generated initials)

Data isolation and security

Each account has an isolated storage space. No file is shared between clients. One account can never access another account's data.

Files are stored on secure servers and accessible only via valid authentication tokens.

Consultant data

The CVs you upload may contain personal data (name, contact details, experience). StaffKit processes this data solely to perform the requested transformation.

As an IT staffing firm, you are responsible for collecting and processing your consultants' CVs in compliance with GDPR. StaffKit acts as a data processor under GDPR.

Your rights

• Delete your files at any time from your account
• Request complete deletion of your account
• Access data associated with your account
• Correct your information (email, company name)

Retention period

CV files (input and output) are retained as long as you keep them in your account. You can delete them at any time. If the account is deleted, all associated files and data are erased.

Contact

For any questions about the protection of your data or to exercise your rights, contact us at