Privacy Policy

HRSpeeder (hrspeeder.com) is a recruitment software service published by Raphaël Sellami. This policy explains what data we collect, why we use it, and your rights.

• Account data: name, email address and profile picture, provided at sign-up or through Google sign-in.
• Recruitment data: job offers, applications, resumes, interview notes and email templates.
• Calendar data: with your explicit consent, access to your Google Calendar to create, display and manage interview appointments.
• Usage data: connection logs and in-session actions, for debugging and improving the service.

• Performance of a contract: account and application data are needed to provide the service.
• Consent: Google Calendar access relies on your explicit agreement, and measurement and advertising cookies on the agreement you give in the website banner. You can withdraw either at any time.
• Legitimate interest: usage logs for security and service improvement.

When an Ashby customer connects HRSpeeder, that customer remains the data controller and HRSpeeder acts as its data processor, only for the assessments the customer starts.

• What we read: through the Ashby API and the key provided by the customer, the application, the candidate's name, email and resume, and the job and its posting.
• How the resume is processed: it is analysed in memory using the Google Gemini API and is not stored by HRSpeeder. We use the paid Gemini API, whose terms exclude using submitted content to improve Google's products.
• What we keep: the candidate's name and email, Ashby identifiers and links, the job title, and the score and analysis, which are also sent back to Ashby.
• How long: up to 365 days. Everything is deleted as soon as the customer disconnects Ashby from HRSpeeder.
• Keys: the customer's Ashby API key is stored encrypted (AES-256-GCM); the HRSpeeder partner key is stored only as a hash.
• Human decision: the analysis is decision support. It is instructed never to use age, gender, ethnicity, nationality, religion, disability, family status, photos or addresses, and recruiters make every decision.

Candidates should address requests about their data to the employer that uses Ashby. We assist our customers in answering them.

HRSpeeder uses the Google Calendar API only to create interview events, show your availability to avoid conflicts, and update or delete events when you change or cancel an interview. We do not use events not created by HRSpeeder for any other purpose, and we do not share calendar data with third parties. You can revoke access at any time from your Google account permissions or from your HRSpeeder settings.

We never sell your data. We rely on the following providers, some of which may process data outside the European Union under the safeguards set out in their data processing terms:

• Contabo: Server hosting (Germany)
• Supabase: Database and authentication (European Union, Ireland)
• Google Gemini API: AI resume analysis and AI assistance
• AssemblyAI: Audio transcription during interviews, only while a session is active
• Google APIs: Sign-in with Google and Google Calendar, only with your consent
• Stripe: Subscription payments
• OVHcloud: Sending and receiving email
• Google Analytics, Google Ads and Meta: Measuring website audience and advertising performance, only with your consent

Your data is kept for as long as your account exists. After an account is deleted, data is erased within 30 days, unless the law requires otherwise. Ashby assessment data follows the retention described in section 4.

You have the right to access, port, correct and erase your data, to object to or restrict its processing, and to withdraw your consent at any time. To exercise these rights, contact us at contact@hrspeeder.com.

All communications are encrypted with HTTPS/TLS. Sensitive credentials such as OAuth tokens are stored securely and never exposed to the browser.

HRSpeeder uses cookies needed for authentication (Supabase session), which do not require consent. Only if you accept them in the website banner, Google Analytics, Google Ads conversion tracking and the Meta Pixel measure audience and advertising performance. A self-hosted, cookie-free analytics tool also counts visits. Your choice is kept for 6 months and can be changed at any time: manage cookies.

Cookie-free measurement and visiting companies (since 12 November 2026): we count pages viewed, time spent and a few actions (pricing viewed, tool started, sign-up started, contact click) without storing anything on your device; the IP address is only used to compute a daily code and is never kept. During the visit we also check the public Internet address registries (RIPE) to see whether the network belongs to a company: if so, we keep the company name, pages viewed and time spent, never the IP address or anything that identifies you personally (home, mobile and carrier connections are not identified), and we may present HRSpeeder to that company by e-mail or phone at its business contact details. These actions are only passed to Google and Meta if you accepted their cookies. Legal basis: legitimate interest (business-to-business prospecting); data deleted after 13 months; objections: contact@hrspeeder.com. The “before you go” window keeps on your device the date you closed it (display preference); the address you leave there is used to send you the result you asked for, then 2 follow-up messages at most (one-click unsubscribe).

We may update this policy. Significant changes will be announced by email or in the product. The date of the latest update appears at the top of this page.

Raphaël Sellami
Email: contact@hrspeeder.com