Privacy Policy

Last updated: April 2026

1. Data We Collect

When you sign in with Google, we collect your name, email address, and Google profile picture. When you use the Service, we also store the resume files you upload and the job descriptions you create.

2. How We Use Your Data

We use your data to:

• Authenticate your account via Google OAuth
• Process and evaluate resumes using AI (OpenAI)
• Generate candidate screening questions
• Store your hiring data so you can access it across sessions

3. Third-Party Services

ShortlistFlow relies on the following third-party services:

• Google OAuth — for sign-in authentication
• OpenAI — resume parsing and candidate evaluation (resume data is sent to OpenAI's API)
• Amazon S3 — secure storage of uploaded resume files

4. Data Retention

Your data is retained while your account is active. You may request deletion of your account and all associated data at any time by emailing business@imrozsolutions.com. We will process deletion requests within 30 days.

5. Your Rights

You have the right to access, correct, or delete your personal data. To exercise any of these rights, contact us at business@imrozsolutions.com.

6. Security

Resume files are stored privately on Amazon S3 with signed URLs. We use HTTPS for all data in transit. We do not sell your data to third parties.

7. Contact

For privacy questions, email business@imrozsolutions.com.