Privacy policy

1. Data controller

Appit AS operates Worktube and is the data controller for the personal data processed through the service.

Company no.: 933 898 210
Address: Kokstadveien 41, 5257 Kokstad, Norway
Email: trond@worktube.com
Phone: +47 56 32 00 00

2. What personal data we process

For candidates

• Account: email address (when logging in with a one-time link). You can also start anonymously without an email.
• Profile: name, title, location, summary, work experience, education, skills, languages and seniority, taken from the CV or LinkedIn profile you paste in yourself.
• Video profile: any video you record, stored encrypted.
• Conversations: messages to and from your agent (stored as memory so the agent remembers you) and answers you give in async interviews.

For companies (recruiters)

• Account: email address and company name.
• Usage data: scorecards, jobs, conversations with the recruiter agent and interviews you run.
• Payment: handled by Stripe. We do not store card details.

Technical

• IP address, device and log data generated when you use the service.

3. Purpose and legal basis

• Delivering the service (building profile, agent, interviews): performance of a contract, GDPR art. 6(1)(b).
• Showing you anonymously to employers: consent, GDPR art. 6(1)(a). You control this yourself with "Open to inquiries", and can withdraw consent at any time.
• Operations, security and improvement: legitimate interest, GDPR art. 6(1)(f).
• Payment and invoicing (companies): performance of a contract.

We never ask for, and do not process, special categories (health, ethnicity, religion, politics, trade union, orientation) or your current salary.

4. Use of artificial intelligence and automated decisions

Worktube uses AI models (Anthropic Claude, via OpenRouter) to structure CVs, run the candidate agent, conduct agent-to-agent interviews and estimate market salary (based on public Statistics Norway data).

No decision is made solely by a machine. An employer (a human) always makes the final hiring decision. You have the right to human review, to express your view and to contest an assessment, cf. GDPR art. 22.

5. Sharing and processors

With employers, only anonymised summaries are shared (role, region, seniority, skills), never name or contact info, and only for candidates who have turned on "Open to inquiries". Your identity is shared only if you choose to respond to an inquiry yourself.

We use the following data processors to deliver the service:

• Supabase: database, login and file storage.
• Vercel: operations and hosting.
• Anthropic / OpenRouter: AI processing.
• Twilio SendGrid: sending email.
• Stripe: payment (companies only).
• Telegram: if you connect the agent to Telegram yourself.

Transfer outside the EEA: some processors are in the US (incl. Anthropic/OpenRouter, SendGrid, Stripe). The transfer is based on the EU Commission's Standard Contractual Clauses (SCC).

We never sell personal data.

6. Retention

• Profile and account data is stored as long as you have an active account. You can delete your profile and data at any time.
• Logs of AI assessments are kept for at least 6 months for traceability and compliance, then deleted or anonymised.
• If you delete your account, personal data is removed within reasonable time, unless law requires longer retention.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and to object to processing, as well as to withdraw consent. Contact us at trond@worktube.com.

You can also complain to the Norwegian Data Protection Authority (datatilsynet.no).

8. Security

We use encryption, row-level access control and anonymisation toward employers to protect your data. Access is limited to what is necessary to deliver the service.

9. Changes

We may update this policy. Material changes are notified in the service or by email. The current version is always available here.