隐私政策Privacy Policy
本隐私政策说明 AI Driven Screening（下称「我们」「本平台」）在以下情形如何处理个人信息：
候选人通过租户的招聘站点（例如 orange.aidrivenscreen.com）投递简历时，
以及 用户（HR / 面试官 / 租户管理员）注册账号时。
邀请你投递的招聘公司（下称「租户」）是你的招聘数据的控制者；
我们作为处理者，按租户的指示运营本平台。
1. 我们处理哪些数据
- 账号数据：姓名、电子邮箱、手机号、密码（以哈希存储）、角色。
- 投递数据：简历文件（PDF / Word）、档案字段（学历、经历、技能、履历）， 以及预筛问卷答案。
- 测评数据：笔试答案与分数、AI 生成的英文面试录音转写与评分，以及 AI 评估报告。
- 技术数据：IP 地址、浏览器 / User-Agent、访问时间（安全审计日志）。
2. 目的与法律依据
| 目的 | 法律依据 |
|---|---|
| 为租户进行招聘评估（简历解析、AI 出题、评分、报告） | 同意 / 租户招聘的正当利益 |
| 运营与保护本平台（身份验证、频率限制、审计日志、反滥用） | 正当利益；法律义务 |
| 关于你应聘的沟通（邀约、面试链接、结果） | 履行应聘流程 |
3. 数据存储位置与子处理者
主要存储位于日本东京（阿里云）。可能为提供服务而处理个人信息的子处理者类别：
- 云托管：阿里云，东京区域
- AI 处理：大语言模型服务商（例如 DeepSeek、OpenAI）接收简历与答案文本，用于解析、 出题与评分；音频由所配置的语音转写服务商转写
- 邮件投递：租户所配置的邮件服务
- 支付（平台侧）：PayPal —— 仅处理租户的账单数据，绝不处理候选人数据
4. 保留
招聘数据按租户配置的期限保留（默认：简历、答案与录音各有独立的保留窗口），到期后自动删除。 租户管理员可随时删除某位候选人及其全部关联文件；删除同时会从存储中移除简历文件。
例外：自动删除仅在以下封闭清单情形下不适用（见第 7 条）：(i) 涉嫌违法犯罪行为； (ii) 主管机关的合法要求；(iii) 已存在的争议、投诉或程序，包括为确立或抗辩法律主张所必需者； (iv) 法律、税务或行业规则明确要求的留存。其他一切情形仍适用上述自动删除。
5. 你的权利及如何行使
招聘数据由邀请你投递的租户（控制者）控制，由其决定处理的目的与方式。访问、更正或 删除你数据的请求——以及在法律要求时的数据可携权或反对处理的请求——应向该租户提出。 作为处理者，我们按租户指示协助其履行经核实的请求，不独立处置你的数据。
- 如何联系：请先联系你投递的租户（招聘站点应公布其联系方式）。若无法联系到租户， 或你的请求未得到合理处理，请致信本页顶部的邮箱，我们将协助转达并跟进。
- 举报滥用：对于虚假职位、有偿招聘、涉嫌诈骗或违法职位内容，请致信 [email protected]；我们将核实并依服务条款处理。
- 平台侧数据：涉及账号本身（例如 HR 用户账号）的数据请求，请直接联系我们。
5.1 无论司法辖区我们都遵守的做法
以下是不论某部法律是否适用于你、本平台都统一遵守的做法。若适用法律赋予你更强的权利， 请按第 5 条向控制者（租户）行使，我们将予协助。我们不会以「某部法律不适用」为由降低这些做法。
- 不出售：我们不出售个人信息，也不将其用于跨情境行为广告或定向营销。 这是我们自身的原则，不限于任何司法辖区的要求。
- 访问、更正、撤回同意：通过租户行使；我们协助租户处理经核实的请求。
- 投诉：对招聘公司（控制者）的疑虑，可向该公司所在司法辖区的监管机关提出； 对本平台的疑虑，可向我们或我们主要营业地所在机关提出。
6. 安全
传输加密（TLS）、密码哈希、验证码与频率限制、基于角色的访问控制，以及对敏感操作的审计日志； 简历文件仅可在通过身份验证后访问。
7. 日志、法定留存与执法请求
为保障平台安全、防止滥用并遵守法律义务，本条所述处理优先于第 4、5 条中的自动删除与 删除请求：
- 我们留存什么：运营与访问审计日志——账号标识、IP、User-Agent、时间戳，以及关键 操作的对象（注册与登录、上传投递、查看或导出简历、删除数据、更改配置）——以及上传的文件与 通讯记录。
- 留存多久：安全审计日志的保留期限由本平台配置，不少于 6 个月（作为部署基线 强制），或在法律、税务或行业规则要求时更长。此类数据仅用于安全、反滥用、证据保全与配合调查， 绝不用于商业目的。
- 执法请求：当我们收到来自公安、网信、反诈、检察或司法机关的合法要求时，将在法律 允许的范围内披露上述数据与记录，并协助调查与取证；跨境案件遵循司法协助与数据保护要求。
- 主动报告：我们可向主管机关报告涉嫌违法犯罪行为（例如电信网络诈骗、非法用工或 人口贩运），并依服务条款第 3 条终止相关账号或租户。
- 对你的影响：此类情形下数据可能被保留至超出常规保留期，且当为遵守法律义务或法律 主张所必需时，删除请求无法被履行（参见 GDPR 第 17(3) 条、PIPL 第 13 条及同等规则）。
8. 跨境传输
数据存储于日本。若你从其他地区提交数据，数据将被传输至日本并在日本处理；用于 AI 子处理时， 将传输至服务商的处理地点。我们按适用法律要求采取适当保障措施。
9. 变更
重大变更将在本页公告并标注新的版本日期；生效日后继续使用即构成接受。
This Privacy Policy explains how AI Driven Screening ("we", "the Platform") processes personal data when
candidates submit applications through a tenant's recruitment site (e.g. orange.aidrivenscreen.com)
and when users (HR / interviewers / tenant administrators) register for an account.
The recruiting company that invited you ("the Tenant") is the data controller of your recruitment data;
we act as the data processor operating the Platform on the Tenant's instructions.
1. What data we process
- Account data: name, email address, phone number, password (stored as a hash), role.
- Application data: resume files (PDF/Word), profile fields (education, experience, skills, history), and pre-screening questionnaire answers.
- Assessment data: written-test answers and scores, English-interview audio with AI-generated transcripts and scores, and AI evaluation reports.
- Technical data: IP address, browser/User-Agent, access times (security audit logs).
2. Purposes & legal bases
| Purpose | Legal basis |
|---|---|
| Recruitment evaluation for the Tenant (resume parsing, AI question generation, scoring, reports) | Consent / legitimate interest of the Tenant's recruitment |
| Operating and securing the Platform (authentication, rate limiting, audit logs, anti-abuse) | Legitimate interest; legal obligation |
| Communications about your application (invitations, interview links, results) | Performance of the application process |
3. Where data is stored & sub-processors
Primary storage is located in Tokyo, Japan (Alibaba Cloud). Categories of sub-processors that may process personal data to provide the service:
- Cloud hosting: Alibaba Cloud, Tokyo region
- AI processing: large-language-model providers (e.g. DeepSeek, OpenAI) receive resume and answer text for parsing, question generation and scoring; audio is transcribed by the configured speech-to-text provider
- Email delivery: the mail service configured by the Tenant
- Payments (Platform-side): PayPal — processes Tenant billing data only, never candidate data
4. Retention
Recruitment data is retained for the period configured by the Tenant (defaults: resumes, answers and audio each have independent retention windows) and is then automatically deleted. Tenant administrators may delete a candidate and all associated files at any time; deletion also removes the resume file from storage.
Exceptions: automatic deletion does not apply only in the following closed list of cases (see section 7): (i) suspected criminal conduct; (ii) a lawful request from a competent authority; (iii) existing disputes, complaints or proceedings, including where necessary to establish or defend legal claims; (iv) retention expressly required by law, tax or sector rules. In all other cases the automatic deletion above still applies.
5. Your rights and how to exercise them
Recruitment data is controlled by the Tenant that invited your application (the controller), which determines the purposes and means of processing. Requests to access, correct or delete your data — and, where the law so requires, to data portability or to object to processing — should be directed to that Tenant. As the processor, we assist the Tenant in fulfilling verified requests on its instructions and do not dispose of your data independently.
- How to contact: contact the Tenant you applied to first (recruitment sites should publish their contact details). If the Tenant cannot be reached, or your request is not reasonably handled, write to the address at the top of this page and we will help relay and follow up.
- Abuse reports: for fake roles, paid recruitment, suspected fraud or unlawful job content, write to [email protected]; we will verify and act under the Terms of Service.
- Platform-side data: for data requests concerning an account itself (e.g. an HR user account), contact us directly.
5.1 Practices we apply regardless of jurisdiction
The following are Platform-wide policies applied regardless of whether a given law applies to you. Where applicable law grants you stronger rights, exercise them against the controller (the Tenant) as described in section 5, and we will assist. We do not lower these practices on the ground that a particular law does not apply.
- No sale: we do not sell personal information or use it for cross-context behavioural advertising or targeted marketing. This is our policy in itself, not limited to any jurisdiction's requirements.
- Access, correction, withdrawal of consent: exercised through the Tenant; we assist the Tenant with verified requests.
- Complaints: concerns about a recruiting company (the controller) may be raised with the supervisory authority of that company's jurisdiction; concerns about the Platform may be raised with us or with the authority of our principal place of business.
6. Security
Encryption in transit (TLS), password hashing, captchas and rate limiting, role-based access control and audit logging of sensitive operations; resume files are accessible only after authentication.
7. Logs, legal retention and law-enforcement requests
To keep the Platform secure, prevent abuse and comply with legal obligations, the processing described in this section prevails over the automatic deletion and erasure requests in sections 4 and 5:
- What we retain: operation and access audit logs — the account identifier, IP, user-agent, timestamp and subject of key operations (registration and login, application uploads, viewing or exporting resumes, deleting data, changing configuration) — as well as uploaded files and communications.
- How long: the retention period for security audit logs is configured by the Platform and is no less than 6 months (enforced as a deployment baseline), or longer where law, tax or sector rules so require. Such data is used solely for security, anti-abuse, evidence preservation and cooperation with investigations, never for commercial purposes.
- Law-enforcement requests: where we receive a lawful request from police, cyberspace, anti-fraud, prosecution or judicial authorities, we will disclose the data and records above to the extent permitted by law and assist with investigation and evidence collection; cross-border cases follow mutual legal assistance and data-protection requirements.
- Proactive reporting: we may report suspected criminal conduct (such as telecom/online fraud, illegal labour or human trafficking) to the competent authorities and, under section 3 of the Terms of Service, terminate the accounts or tenants involved.
- Impact on you: in such cases the data may be kept beyond the ordinary retention period and erasure requests cannot be fulfilled where this is necessary for compliance with a legal obligation or for legal claims (cf. GDPR Art. 17(3), PIPL Art. 13 and equivalent rules).
8. International transfers
Data is stored in Japan. If you submit data from another region, it will be transferred to and processed in Japan and, for AI sub-processing, to the provider's processing locations. Appropriate safeguards are applied as required by applicable law.
9. Changes
Material changes will be notified on this page with a new version date; continued use after the effective date constitutes acceptance.
本文档不构成法律意见。This document does not constitute legal advice.