Legal

Privacy Policy

Last updated: January 2026. This policy describes how MND Systems collects, uses, and protects your information.

01.Information We Collect

We collect information you provide directly to us, including name, email address, company information, and any messages you send through our contact forms. For candidates processed through our platform, we collect resume data, interview recordings (with explicit consent), and assessment scores. All data collection is disclosed at the point of collection.

02.How We Use Your Information

We use collected information to provide our AI-powered recruitment services, including resume analysis, candidate scoring, and interview processing. We also use information to communicate with you, improve our services, and comply with legal obligations. We never sell personal data to third parties.

03.Data Storage & Security

All data is stored with enterprise-grade encryption. We use time-limited access tokens (SAS) for file transfers, JWT authentication with OAuth 2.0 support, and HTTPS for all communications. Data is isolated per organization in a multi-tenant architecture with complete organizational data separation.

04.GDPR Compliance

We are fully GDPR compliant. Consent is recorded with timestamp and IP address for every candidate interaction. Candidates have the right to access, correct, and delete their data. We maintain a 54-dimension audit trail tracking every data change across the platform.

05.Candidate Data Rights

Candidates whose data is processed through our platform have the right to: access all data we hold about them, request correction of inaccurate data, request deletion of their data, object to processing, and receive their data in a portable format. Requests are processed within 30 days.

06.Data Retention

We retain candidate data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Clients can configure retention policies through our platform. Deleted data is permanently removed from all systems within 30 days.

07.Third-Party Services

We use select third-party services for infrastructure and AI processing. All third-party providers are vetted for security compliance and bound by data processing agreements. No candidate data is shared between clients.

08.Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the effective date. We encourage you to review this policy periodically.

Questions about our privacy practices?

Contact us at privacy@mndsystems.com