1. Who we are
AsyncView provides async video interviews for hiring teams around the world. The service is operated by AsyncView. This policy explains what personal data we handle, why, who helps us process it, how long we keep it, and the rights you have wherever you live. Our privacy contact is info@asyncview.com.
For the data of people who use AsyncView (hiring teams) and visitors to this website, we are the controller. For candidate data, the company that invited the candidate is the controller and we process that data on its behalf, under its instructions.
2. Data we collect
- Account data for people who use the app: name, work email, company, role, time zone and date format preferences, and an optional profile picture.
- Candidate data provided by our customers: name, email, the video answers a candidate records, and an optional rating and comment about the interview experience.
- Review data written by hiring teams: star ratings, recommendations and notes about a candidate’s answers.
- Security data: the time of each user’s last sign-in, and the email address and IP address of sign-in and password-reset attempts, used to limit repeated attempts.
- Messages sent through this website’s contact form: your name, email, company, rough hiring volume and message. Your IP address is held briefly in memory to limit spam.
- Billing data when you buy a paid plan: Paddle, our merchant of record, collects your name, email, billing address, tax number if you give one, and payment details. We never see full card numbers. We receive the plan bought, the amount, the billing country, the transaction and subscription status, and a reference to your Paddle customer record.
- Visits to this website: anonymous page view counts, such as which pages are viewed, the referring site, and the browser, device type and country. These are collected without cookies and are not linked to you.
3. How we use it, and why
We use personal data to run interviews, let hiring teams review answers, send invites, reminders and notifications, reply to messages, and keep the service secure. We don’t sell or share personal data for advertising, and we don’t use it to train AI models.
Where data protection laws such as the GDPR ask for a legal basis, we rely on:
- contract: to provide the service to our customers and their users;
- legitimate interests: to keep the service secure, prevent abuse, and reply to enquiries;
- legal obligation: where a law requires us to keep or disclose data; and
- the customer’s instructions: for candidate data, the company that invited the candidate decides the legal basis.
4. Candidate recordings
Recordings belong to the company that invited the candidate. Only users in that company can view them. Recordings are stored in a private cloud storage bucket that is never public, and they are played back through links that expire after one hour.
The camera, microphone and connection check that candidates run before recording happens entirely in their browser. Nothing from it is sent to us.
5. No automated decisions
AsyncView does not score, rank or reject candidates automatically, and doesn’t analyse faces, voices or emotions. People on the hiring team watch the answers and make every decision.
6. Service providers
We use a small number of providers to run the service. They process data only on our instructions and are bound to protect it:
- Agora — captures the video answers candidates record.
- Amazon Web Services (S3) — stores recordings and uploaded images in private storage.
- Supabase — hosts the database that holds account, interview and review data.
- Vercel — hosts this website and the app.
- Cloudflare — provides our domain’s DNS and counts visits to this website (Cloudflare Web Analytics).
- Ahrefs — counts visits to this website (Ahrefs Web Analytics), so we can see which pages people find through search.
- Paddle — our merchant of record and payment processor; runs checkout, collects payment and tax, issues invoices and handles payment queries. Paddle acts as a controller for the payment data it collects, under its own privacy policy (paddle.com/privacy).
- Our email provider — sends invites, reminders, notifications and replies.
- Professional advisers such as accountants or lawyers, and public authorities where the law requires us to disclose data.
7. International transfers
Our customers and providers are in many countries, so your data may be stored and processed outside the country where you live, including in the United States. Where the law requires it, for example for data from the European Economic Area, the United Kingdom or Switzerland, we rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses.
8. How long we keep data
- Interviews, recordings and review data are kept for 6 months on the Free plan and 12 months on the Starter and Business plans, counted from the date each interview is created, so the company’s team can refer back to them. After that they are deleted automatically. The company can ask us to delete them sooner at any time.
- When an account is closed, we delete its data within 30 days of the request. Copies in backups are removed as those backups expire.
- In-app notifications are deleted after 90 days.
- Records of sign-in and password-reset attempts are deleted after an hour.
- Contact form messages are delivered to our inbox by email and are not stored in a database.
- Billing and invoice records are kept for as long as tax and accounting law requires, typically seven years, even after an account is closed.
10. Security
Data is sent over encrypted connections (HTTPS). Passwords are stored as one-way hashes, password-reset links work once and expire after an hour, and repeated failed sign-ins are rate limited. Every candidate link carries its own long random token. No system is perfectly secure, but if a breach affects your data we’ll tell you and the relevant authorities as the law requires.
11. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy of it;
- correct data that’s wrong, or have it deleted;
- object to or restrict how we use it, or withdraw consent where we rely on it;
- receive your data in a portable format; and
- complain to your data protection authority, for example in the EU or UK, or to the Data Protection Board of India.
12. How to use your rights
Email info@asyncview.com. We’ll reply within 30 days, and may need to confirm your identity first. Using your rights is free, and we’ll never treat you differently for doing so.
If you’re a candidate, your data is controlled by the company that invited you, so please contact them first. If you contact us, we’ll pass your request to them and help them respond.
California residents: we don’t sell or share personal information as defined by the CCPA/CPRA. India: our grievance contact for the Digital Personal Data Protection Act is info@asyncview.com.
13. Children
AsyncView is a tool for businesses and is not directed at children under 16. We don’t knowingly collect their data; if you think we have, email info@asyncview.com and we’ll delete it.
14. Changes to this policy
We’ll update this policy when the service changes how it handles data, and change the date at the top. If a change is significant, we’ll also tell customers by email or in the app before it takes effect.
15. Contact
Questions about privacy? Email info@asyncview.com.
Questions about this policy?
Email info@asyncview.com or use the contact page.