Privacy Policy
Last Updated: July 30, 2026
Recrugate ("Recrugate", "Company", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, disclose, and store your personal information when you access or use our website (www.recrugate.com), AI-powered recruitment services, mobile applications, and related tools (collectively, the "Platform").
As a global AI recruitment platform operating from Türkiye and serving candidates and employers worldwide, Recrugate adheres to the highest data protection standards, including the European Union General Data Protection Regulation (GDPR - Regulation EU 2016/679), the EU AI Act guidelines, and the Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Collection of Personal Information
We collect personal information that you provide directly to us, as well as data generated automatically during your interaction with the Platform:
- Candidate Profile Data: Full name, contact details (email address, phone number), employment history, resumes/CVs, education, skill tags, portfolio links, and preferred job locations.
- Interview & AI Assessment Data: Audio and video recordings, transcriptions, response logs, and evaluation metrics generated during AI-driven phone or video mülakats.
- Employer & Account Data: Company name, corporate email address, job postings, team member credentials, billing/payment preferences, and subscription records.
- Technical & Usage Data: IP address, browser type, device information, operating system, access timestamps, page interaction logs, and referral URLs.
2. Use of Personal Information
We use your personal data for the following purposes:
- To provide, operate, and maintain our AI recruitment and candidate evaluation services.
- To facilitate job matching, resume analysis, and interview scheduling between candidates and employers.
- To generate objective evaluation summaries and match scores under human oversight.
- To manage user accounts, authentication, security, and subscription billing (including payment processing via authorized Merchant of Record partners such as Paddle).
- To comply with legal obligations, enforce our Terms of Service, and protect against security incidents or fraudulent activity.
3. Security & Data Protection
We implement robust technical and organizational measures to safeguard your personal data against unauthorized access, loss, alteration, or disclosure. These measures include TLS/SSL encryption in transit, AES-256 encryption at rest for sensitive candidate files, strict access controls, and regular security audits.
4. Use of Cookies
We use essential, analytical, and functional cookies to enhance your experience, analyze platform performance, and store user preferences. Users residing in the European Economic Area (EEA) or countries with cookie consent requirements can manage or reject non-essential cookies via our Cookie Consent Preference Center at any time.
Section A: Provisions for Users in the European Union (EU/EEA) & Global Markets (GDPR & EU AI Act)
If you reside in or access our services from the European Economic Area (EEA), the United Kingdom, or jurisdictions with similar privacy frameworks, the processing of your personal data is governed by the EU General Data Protection Regulation (GDPR).
Legal Grounds for Processing (GDPR Article 6)
- Contractual Necessity (Art. 6(1)(b)): To execute our Terms of Service, register your account, and deliver job application and assessment services.
- Legitimate Interests (Art. 6(1)(f)): To improve our AI models anonymously, secure our Platform, and prevent fraudulent usage.
- Legal Obligation (Art. 6(1)(c)): To satisfy tax, accounting, and regulatory compliance obligations.
- Consent (Art. 6(1)(a)): For optional promotional communications or specific processing of sensitive candidate data when required.
Automated Decision-Making & AI Profiling (GDPR Article 22 & EU AI Act)
Recrugate utilizes artificial intelligence algorithms to evaluate candidate responses, analyze resume data, and provide suitability scores. In full alignment with GDPR Article 22 and EU AI Act principles:
- Human Oversight ("Human-in-the-loop"): Recrugate's AI outputs serve as advisory decision-support tools for recruiting teams. Final hiring or rejection decisions are always made by human recruiters or hiring managers.
- Right to Human Intervention: Candidates have the right to request human review of their AI assessment scores, express their point of view, and contest automated evaluations.
Your Data Subject Rights under GDPR
- Right to Access (Art. 15): Request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
- Right to Erasure / Unutulma Hakkı (Art. 17):Candidates can delete their account and associated data directly at any time via Candidate Account Settings > Delete Account, or by contacting our Data Protection Officer.
- Right to Data Portability (Art. 20): Request your personal data in a structured, commonly used, and machine-readable format.
- Right to Restrict or Object to Processing (Art. 18 & 21): Object to processing based on legitimate interests or request processing restrictions.
Section B: Specific Provisions for Users Subject to Turkish Legislation (KVKK Law No. 6698)
Türkiye Cumhuriyeti mevzuatına ve 6698 sayılı Kişisel Verilerin Korunması Kanununa ("KVKK") tabi kullanıcılarımız için Recrugate, "Veri Sorumlusu" sıfatıyla hareket etmektedir.
KVKK Madde 11 Kapsamındaki Haklarınız
KVKK'nın 11. maddesi uyarınca, veri sahibi olarak aşağıdaki haklara sahipsiniz:
- Kişisel verilerinizin işlenip işlenmediğini öğrenme, işlenmişse buna ilişkin bilgi talep etme.
- Kişisel verilerin işlenme amacını ve bunların amacına uygun kullanılıp kullanılmadığını öğrenme.
- Yurt içinde veya yurt dışında kişisel verilerin aktarıldığı üçüncü kişileri bilme.
- Kişisel verilerin eksik veya yanlış işlenmiş olması hâlinde bunların düzeltilmesini isteme.
- KVKK 7. maddede öngörülen şartlar çerçevesinde kişisel verilerin silinmesini veya yok edilmesini isteme (Adaylar bu işlemi hesap ayarları üzerinden kendileri de gerçekleştirebilir).
- İşlenen verilerin münhasıran otomatik sistemler vasıtasıyla analiz edilmesi suretiyle kişinin kendisi aleyhine bir sonucun ortaya çıkmasına itiraz etme.
- Kişisel verilerin kanuna aykırı olarak işlenmesi sebebiyle zarara uğraması hâlinde zararın giderilmesini talep etme.
5. International Data Transfers
As an international platform, your personal data may be stored or processed in servers located outside your country of residence (including EU and US data centers). Where cross-border transfers occur, we implement European Commission-approved Standard Contractual Clauses (SCCs) and statutory transfer safeguards under KVKK Art. 9 to guarantee data protection.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, provide user accounts, comply with legal/statutory requirements, or resolve disputes. Upon account deletion, candidate profile data is permanently purged or anonymized in accordance with retention schedules.
7. Data Protection Officer (DPO) & Contact Information
If you have questions, feedback, or wish to exercise any of your data protection rights under GDPR or KVKK, please contact our Data Protection Office:
- Email: privacy@recrugate.com / dpo@recrugate.com
- Website: www.recrugate.com
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect regulatory changes or service enhancements. Any modifications will be effective upon posting the revised policy with an updated "Last Updated" date.