Privacy Policy

The Qualifinds Platform (“the Platform”) is an authenticated recruiting application operated by Qualifinds. It is used by recruiters (“jewelers”), subject-matter experts (“SMEs”), and internal administrators to manage hiring pipelines, screenings, and interviews. Access is restricted to registered users; there is no open sign-up.

We collect only what is needed to run the recruiting workflow, in these categories:

• Account data: your name, email address, role (recruiter, SME, client user or administrator) and account status.
• Recruiting data: the positions and candidates you work with, uploaded résumés (CVs), screening notes, evaluations and ratings, interview scheduling details, and payment and guarantee records for completed hires.
• Google Calendar data: if you connect your calendar, the Google account email you connected, the calendar identifier, the permissions you granted, your busy/free times at the moment we compute availability, and the interview events the Platform creates. See “Google user data” below.
• Interview recordings: SME technical interviews booked in the Platform are recorded automatically by Google Meet and stored in Qualifinds’ own Google Workspace. Candidates are told in the calendar invitation that the interview will be recorded. See “Sharing” below.
• Technical data: the session information needed to keep you signed in, and standard server logs (such as IP address, browser type and the pages requested) used for security and troubleshooting.

Candidates’ information is provided by the candidates themselves or by the recruiters who submit them. We do not sell your personal information.

When an SME chooses to connect their Google Calendar, the Platform requests two narrowly-scoped Google permissions:

• See your busy/free times (calendar.freebusy) — read only your busy/free blocks so we never offer an interview time that conflicts with your existing schedule. We do not read the contents of your events.
• Create and manage interview events (calendar.events) — create, update, and cancel the single interview event the Platform books on your behalf, including a Google Meet link and the invitees (the SME, the candidate, and the recruiter). We act only on events our application creates.

Interviewers from our client companies can also connect their Google Calendar, from the client portal or through a link their company shares. For them the Platform requests only See your busy/free times (calendar.freebusy) and the email of the Google account they connect. We use it only to suggest interview times when everyone involved is free: we never store busy blocks, never read event contents and never create events in their calendar. The refresh token is encrypted at rest and is deleted when they disconnect (from the portal or from the link’s status page), when their company removes them, or when their portal account is deactivated.

Separately, a single Qualifinds-owned account (interview@qualifinds.com, not a personal account of any SME or candidate) authorizes one additional permission, Create Google Meet meeting spaces (meetings.space.created). It is used only to create the Meet space for a booked interview with automatic recording enabled, and only for meeting spaces our application creates. SMEs are never asked for this permission.

The same Qualifinds-owned account also authorizes See, edit, create and delete Google Drive files (drive). We use it only on that account’s own Drive and only for two actions: finding the recording file that Google Meet saved for an interview our application booked, and setting its access to “anyone with the link can view” (not discoverable in search) so the hiring company can watch it. We never read the contents of other files, never change any other file, and never use this permission for any other purpose. SMEs and candidates are never asked for it.

To perform these actions we store one encrypted Google refresh token (encrypted at rest). We do not access any Google data beyond what is described in this section, and we do not use Google data for advertising. You can disconnect at any time from your profile, which revokes our access and deletes the stored token.

Qualifinds Platform’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use your information solely to operate the recruiting workflow: authenticating you, showing your assigned positions and candidates, computing availability, booking interviews, sending calendar invitations, and showing the hiring company the expert’s evaluation of a candidate together with the interview recording. We do not use it for advertising or profiling.

We do not sell or rent personal information. Interview details are shared only with the parties to that interview (the SME, the candidate, and the recruiter, plus the Qualifinds staff coordinating it) through the Google Calendar invitation you book.

The recording of an SME technical interview is shared with the hiring company evaluating the candidate for that position, through its authorized users in the client portal, once the expert has submitted an evaluation. The recording lives in a Google Drive file whose link works for anyone who has it; for that reason the Platform shows the link only to authorized users, and every time a recording is opened it is logged.

We do not transfer Google user data to third parties except as necessary to provide the service (for example, sending the calendar invitation through Google’s own APIs), to comply with applicable law, or as part of a merger or acquisition with equivalent protections. We never transfer or sell Google user data for advertising, marketing, or any purpose unrelated to the interview-scheduling feature. We use vetted infrastructure providers (hosting and database) solely to operate the service, under confidentiality obligations.

All traffic to the Platform is encrypted in transit (HTTPS/TLS). The Google refresh token used to access your calendar is encrypted at rest (AES-256-GCM) and is only ever used to perform the free/busy read and the interview-event actions described above. Access to production systems is restricted to authorized personnel.

We use a small number of vetted providers to operate the Platform, each only for the purpose described and under confidentiality obligations:

• Clerk — sign-in and identity. The same Clerk instance is shared with Qualifinds’ talent-acquisition (ATS) application.
• Vercel — application hosting.
• Railway — managed PostgreSQL database and a résumé-formatting service.
• S3-compatible object storage — uploaded résumés and documents.
• Email delivery (SMTP) — notifications and invitations sent to you.
• Google — Calendar and Meet, only when you or Qualifinds connect a calendar.

None of these providers receives Google user data for its own purposes, and none may use it for advertising.

The Platform uses only the cookies and similar storage that are strictly necessary to sign you in and keep your session secure. We do not use advertising cookies or third-party tracking.

We keep your account data while your account is active or as needed to provide the service and meet legal obligations. The stored Google refresh token is retained only while your calendar is connected: an SME may disconnect at any time from their profile, which immediately revokes our access and deletes the stored token. If an administrator deactivates an SME’s account, the stored token is also revoked and deleted at that moment. Cancelling an interview deletes the corresponding Google Calendar event. Interview recordings stay in Qualifinds’ Google Workspace; a request to delete one, sent to the address below, is handled by disabling its link or deleting the file.

To request access to, correction of, or deletion of your personal data (including any Google user data we hold), email us at the address below. We will respond within 30 days.

You may ask us to access, correct, export or delete your personal data, and you may withdraw Google access at any time, either from your profile in the Platform or from your Google Account’s third-party access settings (myaccount.google.com/permissions). Send requests to the contact address below; we respond within 30 days.

The Platform is a professional tool and is not directed to anyone under 18. We do not knowingly collect their information.

We may update this policy as the Platform evolves. The “Last updated” date above shows the latest version, and we will not use Google user data for new purposes without asking for your consent again.

Questions about this policy or your data? Email chava@qualifinds.com.