Privacy policy

1. Who we are

Verso is an AI first-round interview tool. Companies add it to their careers page. Applicants upload a CV and have a short interview, by voice or text, with an AI interviewer. The company then reviews the results and decides who moves forward.

Verso is operated by POLIGON TECH S.R.L., Orașul Cajvana, nr. 797, județul Suceava, Romania, registered under number J2021001011338, CUI/VAT RO44336321 ("Verso", "we", "us").

2. Who is responsible for your data

Data protection law gives different jobs to different parties. Which one we are depends on whose data it is.

If you applied for a job

The company you applied to (the "employer") is the controller of your application data. It decides why and how your data is used, and it makes the hiring decision. Verso is its processor: we run the tool for the employer and follow its instructions. The employer's own privacy notice also applies to you.

If you want to use your rights, it is usually fastest to contact the employer. You can also write to us and we will pass your request on and help the employer answer it.

If you are a recruiter, a company customer, or on our waitlist

Verso is the controller of your account data, your waitlist details and the data we collect to run our website.

3. What data we handle

Candidates

• Contact details: your name and email. Your phone number and LinkedIn profile link, if you give them.
• Your CV: the PDF you upload, stored in our database, and a structured summary of it that the AI makes (your experience, skills, and the claims and gaps it plans to ask about).
• Your consent record: the date and time you ticked the consent box on the application form.
• Your interview: the full text transcript, the language (English or Romanian) and whether you used voice or text. In voice interviews we keep only the text of what you said. Neither Verso nor ElevenLabs records or stores the audio.
• Integrity signals: for each answer, how many times you left the interview tab or window and for how long, how many times you pasted text into the answer box (text interviews), and how long it took you to start speaking after the microphone opened (voice interviews). The AI notice explains these in full.
• The evaluation: scores for each of the employer's criteria, with short quotes from your answers as evidence, a written summary, strengths, concerns, notes for the recruiter and an overall score.
• The employer's decision: for example, shortlisted or rejected.
• Your feedback, if you give it: a one-question rating of the interview and an optional comment, from your application status page. We use it to improve the interview; it is not shown to the employer.
• Technical data: a secret link that lets you return to your interview, and records of each AI request (model used, size, cost) linked to your application.

Please do not include sensitive information in your CV or answers that the job does not need, such as health details, religion or political views.

Recruiters and company customers

• Your name, email and password. Passwords are stored only in hashed form.
• Sign-in session data: your IP address and browser type.
• Company and job information you enter, your conversation with the AI that helps you define the role, the scoring criteria, and the decisions you record.

Waitlist

• Your work email, name, company, role, expected hires per year, current applicant tracking system, and how you found us if we know it.
• Whether we have invited you to the pilot, and when.

Emails

When we send an email, our email provider processes the recipient address, the message and delivery information (for example, whether it was delivered).

4. Why we use it, and the legal basis

Candidate data (we act for the employer)

We use candidate data only to run the employer's first-round interview: to read the CV, hold the interview, draft an evaluation, show the results to the employer, and send related emails. We do not use it for our own purposes, for advertising, or to train AI models.

The employer is responsible for the legal basis. Usually this is taking steps, at your request, before a possible employment contract (GDPR Article 6(1)(b)), or the employer's legitimate interest in recruiting (Article 6(1)(f)). We also record your agreement on the application form, so there is a clear record that you were told how the process works.

Data we control

• Recruiter accounts: to provide the service you signed up for (contract, Article 6(1)(b)).
• Waitlist: to contact you about the pilot and early access (our legitimate interest in building the product with interested companies, Article 6(1)(f), or steps before a contract).
• Security and abuse prevention: session and technical data to keep accounts and the service safe (legitimate interest, Article 6(1)(f)).
• Legal obligations: to keep records the law requires, such as invoices (Article 6(1)(c)).

5. AI and decisions about you

An AI system asks the interview questions and drafts the evaluation. It does not make hiring decisions. A person at the employer reviews each application and decides. Verso does not reject anyone automatically, so decisions are not based solely on automated processing.

You should know that the employer sees applications ordered by the overall score, so the AI's assessment can affect the order in which a recruiter reads them. You can ask the employer to have a person review your application and the evaluation, to explain it, and to consider your point of view. You can also write to us and we will pass this on.

The AI notice for candidates explains in plain language what the AI does, what it does not do, and how scores are made.

6. Who we share it with

Candidate data is shared with the employer you applied to. We do not sell personal data or share it with advertisers. We use these service providers to run Verso:

About voice interviews. Speech recognition and the interviewer's voice are provided by ElevenLabs. Your audio is streamed to ElevenLabs during the call to turn it into text, and is not recorded. ElevenLabs keeps the call's text and technical details for up to 30 days, then deletes them. Where an employer uses the browser-based voice mode instead, your browser's provider does the speech recognition (for example, Chrome sends audio to Google) under its own privacy terms. If you prefer that no audio leaves your device, choose the text interview.

About payments. When a company buys interview credits, the payment is made on Revolut's checkout page. Revolut processes the card details as an independent controller under its own privacy policy; we never see full card numbers. We keep the order and the invoice details (company name, tax ID, address and billing email) to issue the invoice and keep the accounting records the law requires.

We may also disclose data if the law requires it, or to protect our rights or someone's safety. If Verso is sold or merged, data may pass to the new owner under the same protections.

7. Transfers outside the EU

Anthropic, Resend and ElevenLabs are US companies, so data sent to them may be processed in the United States. Where applicable, these transfers rely on the EU-US Data Privacy Framework (if the provider is certified) or on the European Commission's Standard Contractual Clauses, with additional safeguards where needed. You can ask us for more information about these safeguards.

8. How long we keep it

• Candidate data: deleted 12 months after the job closes, or 18 months after you applied if the job is still open, whichever comes first. The employer can delete it sooner, and you can withdraw at any time (see below). If the law requires the employer to keep something longer, the employer is responsible for that copy.
• Waitlist data: kept until 24 months after our last contact with you, or deleted sooner if you ask.
• Recruiter accounts: kept while the account is open, and deleted within 90 days after it is closed, except records the law requires us to keep (such as invoices).

Deletion runs automatically every day. Candidates can withdraw an application and delete their data from the private status link in their confirmation email, or ask for new links at /my-data. Recruiters can delete a candidate, a job or their whole account from the dashboard.

Anonymous statistics. When we delete candidate data, we keep a few anonymous data points so we can measure and improve Verso, for example the scores per criterion, whether the interview was completed, how long it took, the month of the application and the job title. We remove everything that identifies you: your name, contact details, CV, transcript, quotes and written assessments. What remains cannot be linked back to you, so it is no longer personal data. Our hosting and email providers may keep backups and logs for a limited time after deletion.

9. Your rights

Under the GDPR you have the right to:

• Access your data and get a copy.
• Correct data that is wrong or incomplete.
• Delete your data ("right to be forgotten").
• Restrict how your data is used, for example while a complaint is checked.
• Object to processing based on legitimate interests.
• Data portability: receive data you gave us in a common, machine-readable format.
• Human review: ask for a person to review an assessment made with AI, give your view, and contest the outcome.
• Withdraw consent at any time, where processing is based on consent.

How to ask. Candidates: contact the employer, or email us at [privacy@your-domain] and we will forward your request and help the employer respond. Everyone else: email us at the same address. We may need to confirm your identity. We answer within one month, or tell you if we need more time.

Complaints. You can complain to a data protection authority. In Romania this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, Romania, www.dataprotection.ro. You can also complain to the authority in the EU country where you live or work.

10. Security

We use HTTPS for data in transit. Recruiters can only see their own company's jobs and candidates. Passwords are hashed. Access to production systems is limited to the people who need it. Our providers are bound by contract to protect the data they handle for us.

Your interview link contains a secret code. Anyone who has the link can open your interview, so please do not share it. No system is completely secure. If we learn of a breach that affects you, we will tell the employer (for candidate data) or you, as the law requires.

11. Cookies

We use only cookies that are strictly necessary, such as the cookie that keeps recruiters signed in. We do not use advertising cookies or third-party analytics cookies.

12. Changes to this policy

We will update this page when our practices change and show the date at the top. If a change matters, we will also tell recruiters and waitlist members by email.

13. Contact us

POLIGON TECH S.R.L.
Orașul Cajvana, nr. 797, județul Suceava, Romania
Privacy requests: [privacy@your-domain]