Privacy Policy
Last updated: October 20, 2026 · Effective: October 20, 2026
RiseYou LLC ("RiseYou", "we", "us", or "our") operates the RiseYou AI hiring platform. This Privacy Policy explains how we collect, use, share, and protect your information — and the rights you have over it. We are committed to being transparent about our data practices and to handling your data responsibly.
Prefer the short version? See how RiseYou handles trust & privacy in plain language.
We never sell your data
Your personal information is never sold to advertisers or data brokers.
AES-256 encryption
All data at rest and in transit is encrypted using industry-leading standards.
You're in control
Access, correct, export, or delete your data at any time by contacting us.
01
Information We Collect
Information You Provide
When you create an account, post a job, or contact support, you provide us with personal information directly. This includes:
- Identity data: full name, job title, company name
- Contact data: email address, phone number, mailing address
- Account credentials: username and encrypted password
- Billing data: payment card details (processed by Stripe — we never store raw card numbers), billing address, and transaction history
- Profile content: company description, logo, job postings, and hiring preferences
Candidate Data
When candidates use RiseYou to apply for jobs or complete AI interviews, we collect:
- Resumes, CVs, and professional profiles
- Interview recordings (audio and optionally video)
- Transcripts of spoken responses
- AI-generated assessment scores, confidence ratings, and language proficiency evaluations
- Communication history between candidates and employers on our platform
Usage & Technical Data
We automatically collect certain technical data when you use our platform:
- Pages visited, features used, clicks, and session duration
- IP address, browser type, operating system, and device identifiers
- Referral URLs and search terms that brought you to our platform
- Error logs and performance data to help us diagnose issues
Cookies & Tracking Technologies
We use cookies, pixels, and local storage to operate our services, remember your preferences, and analyze usage. You can control these through our cookie preference center or your browser settings. See Section 9 for details.
02
How We Use Your Information
We use the information we collect for the following purposes, always limited to what is necessary and proportionate:
| Purpose | Legal Basis |
|---|---|
| Provide and operate the platform | Contract performance |
| Process payments and send receipts | Contract performance |
| Send account, security, and service notifications | Contract performance |
| Conduct AI-powered candidate screening and interviews | Contract performance / Legitimate interest |
| Generate interview scores and employer reports | Contract performance |
| Analyze usage trends and improve our product | Legitimate interest |
| Detect fraud, abuse, and security threats | Legitimate interest / Legal obligation |
| Comply with legal and regulatory requirements | Legal obligation |
| Send marketing communications | Consent (opt-in only) |
03
AI Processing & Automated Decisions
What Our AI Does
Our AI systems analyze interview responses to produce:
- A match score comparing the candidate's experience and skills against job requirements
- A language proficiency rating based on vocabulary, coherence, and grammar
- A confidence and communication score derived from speech pace, tone, and fluency
- A structured interview summary highlighting key answers and red flags
Human Oversight
AI-generated scores are decision-support tools — not final decisions. All hiring decisions are made by human employers who review AI output alongside the full candidate profile. We comply with GDPR Article 22, which gives individuals the right not to be subject to solely automated decisions that produce significant legal effects. If you believe an AI assessment was inaccurate, you may request human review by contacting the employer or emailing legal@riseyou.ai.
Bias and Fairness
We regularly audit our AI models for demographic bias. Our systems are designed to evaluate communication skills and job-relevant competencies only — not to make inferences about age, gender, ethnicity, or any protected characteristic.
04
Voice, Audio & Interview Data
How We Use Recordings
AI interviews record audio only (your video is never recorded). Audio recordings are used to:
- Generate a written transcript of the interview
- Power our AI scoring and assessment engine
- Allow the hiring employer to replay the interview
- Investigate disputes or complaints about the interview process
Who Can Access Recordings
Recordings are accessible only to:
- The candidate themselves (upon request)
- Authorized users of the employer's RiseYou account for the relevant job posting
- RiseYou staff when required for technical support or legal compliance
- No third parties, including advertisers or data brokers, ever receive access
Camera and Integrity Monitoring
During an AI interview we ask for camera access so our integrity monitoring can check that the candidate stays in view and is the person taking the interview. Face detection runs entirely inside your own browser. We don't upload, record or store video or images of your face, and we don't create or keep a face template or faceprint. We only save short integrity notes with your interview, such as "face not visible" or "another person detected".
Companion Live Video Interviews
If an employer invites you to a Companion live video interview, the call runs through Amazon Chime (part of AWS). The video is not recorded. Your spoken answers are transcribed live, and the transcript, plus a short AI-generated summary for the hiring team, is saved with your application and retained like other interview transcripts.
Your Consent
Before an AI interview starts, we ask you to agree to the audio recording, AI scoring and data retention described in this policy. If you don't agree, the interview doesn't start. Camera access for integrity monitoring is requested by your browser, and you can withdraw it at any time, though the interview may then pause.
Retention of Recordings
Interview recordings and transcripts are retained for 12 months from the interview date. After this period, they are permanently deleted unless the employer has a legal obligation to retain them or the candidate has an active dispute. You may request early deletion by emailing legal@riseyou.ai.
05
Information Sharing
We do not sell, rent, or trade your personal information. Period. We share your data only in these limited circumstances:
Service Providers
We work with carefully vetted third-party vendors who process data on our behalf under strict data processing agreements. These include:
- Cloud infrastructure: Amazon Web Services (AWS) — US East region
- Payment processing: Stripe Inc. (PCI-DSS Level 1 certified)
- AI and speech processing: Amazon Nova Sonic / AWS AI services
- Live video interviews (Companion): Amazon Chime SDK (AWS)
- Email delivery: Amazon SES
- Error monitoring and analytics: internal tooling only
Employers (for Candidate Data)
When a candidate applies for a job and completes an AI interview, their profile, interview recording, transcript, and scores are shared with the employer who posted that job. Candidates acknowledge this sharing by accepting our Terms of Service before starting an interview. In addition, if "Open to work" is turned on in your profile (it is on by default, and you can turn it off at any time in Settings → Job Preferences), employers using RiseYou's candidate search and RiseTalent AI Chat can see your profile, résumé and screening score and invite you to apply, even if you haven't applied to their roles.
Business Transfers
If RiseYou is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and prominent notice on our platform before your data is transferred and becomes subject to a different privacy policy.
Legal Requirements
We may disclose your information if we believe in good faith that disclosure is necessary to comply with a law, regulation, court order, or lawful request from a government authority; to protect the rights or safety of RiseYou, our users, or others; or to investigate fraud or security incidents.
06
Data Retention
We keep your data only as long as necessary for the purposes described in this policy, or as required by law.
| Data Type | Retention Period |
|---|---|
| Account & profile data | Duration of account + 30 days after deletion request |
| Job postings | Duration of account + 12 months |
| Interview recordings | 12 months from interview date |
| Interview transcripts & scores | 12 months from interview date |
| Candidate applications | 24 months from application date |
| Payment & billing records | 7 years (financial regulation requirement) |
| Communication / support logs | 3 years |
| Server access logs | 90 days |
| Cookie & analytics data | 13 months (analytics) / session (essential) |
You may request deletion of your personal data at any time by emailing legal@riseyou.ai. We will action your request within 30 days, subject to legal retention requirements.
07
Your Rights
Depending on your location, you have the following rights over your personal data. We will respond to all valid requests within 30 days.
Right to Access
Request a copy of all personal data we hold about you (Data Subject Access Request).
Right to Rectification
Ask us to correct inaccurate or incomplete information.
Right to Erasure
Request deletion of your personal data ('right to be forgotten'), subject to legal retention obligations.
Right to Portability
Receive your data in a structured, commonly used, machine-readable format (e.g. JSON or CSV).
Right to Object
Object to processing based on legitimate interests, including profiling for direct marketing.
Right to Restrict Processing
Ask us to pause processing while a dispute is resolved.
Right to Human Review
Request that a human reviews any automated decision that significantly affects you (GDPR Art. 22).
Right to Withdraw Consent
Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
California Residents (CCPA / CPRA)
You have the right to know what personal information is collected, sold, or disclosed; the right to delete; the right to correct; the right to opt-out of the sale or sharing of personal information; and the right to non-discrimination for exercising your rights. We do not sell personal information as defined by CCPA.
How to Exercise Your Rights
Email us at legal@riseyou.ai with the subject line 'Privacy Request' and describe your request. We may ask you to verify your identity before processing. There is no charge for making a request.
08
Data Security
We implement multiple layers of security controls to protect your information against unauthorized access, alteration, or destruction.
- All data in transit is encrypted using TLS 1.3
- All data at rest is encrypted using AES-256
- Access to production systems requires multi-factor authentication (MFA)
- Role-based access controls ensure staff only access data they need
- Regular internal security reviews and vulnerability assessments
- Automated intrusion detection and alerting on our AWS infrastructure
- Stripe handles all payment card data under PCI-DSS Level 1 certification — we never store raw card numbers
No method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by law within 72 hours of becoming aware.
10
International Data Transfers
Where We Process Data
RiseYou LLC is headquartered in Longview, Texas, USA. Our primary infrastructure runs on Amazon Web Services in the US East (N. Virginia) region. If you are located outside the United States — including the European Economic Area (EEA), United Kingdom, or elsewhere — your data will be transferred to and processed in the United States.
Safeguards for EEA / UK Users
For transfers of personal data from the EEA or UK to the USA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, which contractually obligate our data processors and sub-processors to protect your data to EEA standards. A copy of the applicable SCCs is available upon request.
Other Jurisdictions
For users in other jurisdictions, we apply equivalent appropriate safeguards as required by applicable local law. We do not transfer data to countries that do not provide an adequate level of protection without implementing appropriate contractual or technical safeguards.
11
Children's Privacy
Age Restriction
Our platform is intended for use by businesses and professionals aged 18 and over. We do not knowingly collect, store, or process personal information from individuals under the age of 16 (or the applicable minimum age in your jurisdiction). Our services are not directed at children.
If We Become Aware
If we discover that a child under 16 has provided us with personal information without verifiable parental consent, we will delete that information immediately. If you believe a child has submitted data to our platform, please contact us at legal@riseyou.ai so we can take prompt action.
12
Changes to This Policy
How We Notify You
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Post the updated policy on this page with a new 'Last Updated' date
- Send an email notification to all registered account holders at least 14 days before the changes take effect
- Display a prominent notice within the platform dashboard
Your Continued Use
Your continued use of RiseYou after the effective date of the revised policy constitutes your acceptance of the changes. If you do not agree with any changes, you should stop using our services and may request account deletion.
13
Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out:
For GDPR-related inquiries or to lodge a complaint, you may also contact your local supervisory authority. EEA residents can find their national authority at edpb.europa.eu.
© 2026 RiseYou LLC · Privacy Policy · Version 2.0 · Longview, Texas, USA