Legal
Privacy Policy
Effective October 11, 2026
1. Information we process
We process account and workspace information such as names, email addresses, authentication records, organization membership, subscription details, support messages, and service usage.
The Resume Screener processes information supplied by a customer or candidate, including resumes, contact details, job requirements, scoring criteria, candidate-provided links, evaluation results, and public information retrieved from those links. Google Drive content is accessed only when an authorized workspace user connects an account and selects a folder.
We also receive technical information such as IP address, device/browser data, authentication cookies, page visits, referrer information, and campaign parameters. Payment card details are handled by our payment provider rather than stored directly by Agents Kart.
2. How we use information
We use information to provide and secure the service, authenticate users, isolate workspace data, process requested agent workflows, generate reports, manage subscriptions, send requested communications, troubleshoot problems, measure product usage, prevent abuse, and comply with legal obligations. We do not sell or rent personal data.
3. Candidate data and hiring decisions
For candidate information submitted by a customer, the customer determines why and how that information is used, and Agents Kart processes it to provide the requested service. Customers are responsible for providing required notices, obtaining an appropriate legal basis or consent, and complying with employment, privacy, anti-discrimination, and automated-decision laws.
Resume Screener scores, rankings, and evidence summaries are decision-support outputs. They may be incomplete or inaccurate and must not be used as the sole basis for an employment decision. A qualified human recruiter must review relevant context and make the final decision.
4. Service providers and disclosures
We disclose data only as needed to operate the service, comply with law, protect users, or complete a business transaction. Provider categories include cloud hosting and storage, database and queue infrastructure, AI model processing, analytics, email delivery, payment processing, security services, and customer-authorized integrations such as Google Drive.
Resume content and job criteria may be sent to our configured AI model provider to generate the requested evaluation. Public GitHub, portfolio, and website information may be retrieved when those capabilities are enabled. Providers process information under their applicable contractual and security commitments.
5. Storage, security, and isolation
Resume files are stored in Cloudflare R2 using organization-scoped object paths. Structured workspace, job, candidate, and result information is stored in our application database. Traffic is protected in transit using HTTPS where supported by the service environment. OAuth access and refresh tokens are encrypted at the application level using AES-256-GCM before database storage.
Access is controlled through authenticated workspace membership and role-based permissions. No online service can guarantee absolute security, so customers should avoid uploading information that is not needed for the workflow.
6. Retention and deletion
Candidate files and detailed evaluation data remain available while a resume-screening job is active. When a job is closed, that data is scheduled for purge after 90 days. The purge removes stored resume objects and detailed candidate and evaluation records while retaining a non-candidate aggregate snapshot, such as applicant totals and score distribution.
Account, workspace, billing, and other agent data is retained while needed to provide the service and meet legitimate operational or legal requirements. Backup copies may remain for a limited period under provider backup cycles. To request access, correction, deletion, or account closure, contact us at the address below. We may need to verify the requester and may retain information where legally required.
7. Cookies and analytics
We use essential cookies for authentication and workspace sessions. We use Vercel Analytics and Speed Insights to understand page visits, performance, funnel events, and referral campaign parameters. You can use our developer analytics opt-out where applicable, and browser controls may limit non-essential storage.
8. International processing and children
Our providers may process information in countries other than the user’s location. Customers must ensure that their use and transfers are permitted in their jurisdiction. Agents Kart is a business service and is not directed to children. Do not submit a child’s personal data unless legally authorized and necessary.
9. Changes and contact
We may update this policy as the service changes. Material updates will be posted here with a revised effective date. Questions or privacy requests can be sent to hello@agents-kart.com.