What User Data We Collect & How It's Protected
SOLLERT is committed to radical transparency. Here is an exhaustive, plain-language inventory of every piece of data processed across our autonomous technical assessment platform.
What SOLLERT Explicitly NEVER Collects
We never capture facial recognition geometry, iris scans, or webcam video footage.
We never request, store, or infer candidate race, religion, gender, disability, or marital status.
All payment processing is handled exclusively by Stripe (PCI-DSS Level 1 certified).
We never sell, rent, or syndicate candidate resumes or scores to data brokers or advertisers.
Data Processing & Purpose Mapping Matrix
Pursuant to GDPR Articles 13 & 14 and California CPRA regulations:
| Data Category | Specific Elements | Operational Purpose | Retention |
|---|---|---|---|
| Candidate Identity & Contact | Full Name, Work/Personal Email, Phone Number, LinkedIn URL, GitHub Profile | Verifying candidate application identity and delivering interview scheduling links and score dossiers. Legal Basis: Performance of Contract / Consent | Default 12 months (or Employer Defined Policy) |
| Resume & Work Credentials | PDF/Doc resume text, past employer names, education, technical skill tags | Calibrating interview question difficulty and tailoring dynamic architecture scenarios. Legal Basis: Candidate Consent / Legitimate Interest | Default 12 months |
| Interview Audio & Transcripts | Verbatim spoken dialogue text, audio waveform streams (browser Web Speech API) | Scoring technical answers against 100-point rubric, generating interview review dossiers. Legal Basis: Explicit Candidate Consent | Default 12 months |
| Code Sandbox Submissions | Author code snippets, test case execution output, syntax error counts, algorithmic runtime | Evaluating software engineering competencies and code quality benchmarks. Legal Basis: Performance of Assessment | Default 12 months |
| Anti-Cheat Telemetry | Browser window tab-blur events, focus loss duration, compilation frequency | Detecting automated script solvers and proxy cheating to ensure fair, authentic evaluations. Legal Basis: Legitimate Interest (Integrity Protection) | Session duration + 30 days |
| Recruiter Account Credentials | Name, corporate email, bcrypt password hash, organization workspace affiliation | Multi-tenant authentication and role-based access control (RBAC). Legal Basis: Performance of Contract | Duration of Active Subscription |
| Technical & System Logs | IP address, browser user-agent, API request timestamps, error traces (PII scrubbed) | Defending against DDoS attacks, diagnosing audio latency, ensuring platform reliability. Legal Basis: Legitimate Interest (Security & Reliability) | 90 days rolling log cycle |
How Data Is Encrypted & Isolated
Candidate dossiers and scores are protected with AES-256 bit encryption at rest in dedicated PostgreSQL databases. All communications during live AI interviews operate strictly over TLS 1.3. Multi-tenant workspace data is partitioned to ensure no organization can view another team's applicants.
How to Request Deletion (Right to Be Forgotten)
Candidates can submit a self-service request to delete their entire interview dossier, resume, and score data at any time. Simply email privacy@sollert.io with your candidate email address. Deletions are processed and confirmed within thirty (30) days.