Every promise here comes with a receipt.

RecruitAuto ("RecruitAuto", "we", "us", or "our") is a resume-screening service operated by Quantum Labs AI. We help recruiters and hiring teams screen candidate CVs against a job description and receive an evidence-backed shortlist by email.

This Privacy Policy explains how we handle personal information when you visit recruitauto.quantumlabsai.com.pk, request access to the private beta, or submit a screening. It applies to our website and the screening service (together, the "Service"). It does not cover third-party websites we link to.

If you do not agree with this policy, please do not use the Service. Where we act on behalf of a recruiter, the recruiter's own privacy notice may also apply to candidates.

Because RecruitAuto handles two very different kinds of data, our legal role changes depending on the data in question. This distinction matters under laws like the GDPR.

In short: you remain responsible for the candidate data you upload, and we only process it to give you the screening you asked for.

Information you provide directly

• Contact details. The email address your beta invite was sent to, and any message you send us.
• Job details. The job description you paste in for each screening.
• Candidate CVs. The resume files you upload — up to 20 per screening during beta. These often contain third-party personal data such as names, contact details, work history, and education.

Information collected automatically

• Technical data. IP address, browser type, device information, and pages viewed, used to keep the Service secure and working.
• Usage & cookie data. Limited data from essential and (where enabled) analytics cookies — see Section 06.

We use the information above only for clearly defined purposes:

• To deliver your screening — reading each CV, scoring it against your job description, and emailing you a report with quoted evidence, watch-outs, and interview questions.
• To operate and secure the Service — authenticating your invited email, preventing abuse, and diagnosing technical issues.
• To communicate with you — sending your report, service updates, and responses to your questions.
• To improve the Service — using aggregated, non-identifying usage trends. We do not read your CVs to build features.
• To meet legal obligations — where we are required to retain or disclose information by law.

Legal bases (where GDPR applies). We rely on performance of a contract (to deliver screenings you request), our legitimate interests (to secure and improve the Service), your consent (for non-essential cookies), and compliance with legal obligations.

RecruitAuto uses automated language models to read CVs and match them to your role. Two commitments govern how that works:

• Your job descriptions and candidate CVs are used only to produce your report. They are not used to train, fine-tune, or improve any AI model — ours or a provider's.
• Scores are evidence-based, not final decisions. Every verdict is backed by a quote from the CV so a human can verify it. RecruitAuto supports your judgment; it does not replace it, and it should not be the sole basis for a hiring decision.

Where the law gives individuals rights regarding automated decision-making, a human recruiter reviews the shortlist before any hiring action is taken.

We keep cookies to a minimum.

• Essential cookies keep the Service secure and remember your session while you submit a screening. These are always on because the Service can't work without them.
• Analytics cookies (if enabled) help us understand which pages are used, so we can improve them. If you use Google Analytics, keep this line; otherwise remove it.

If we use Google Analytics or Google advertising products, these third parties may set cookies and process data under their own terms. You can learn how Google uses data at google.com/policies, and opt out of Google Analytics with the Google Analytics Opt-out add-on. You can also control cookies through your browser settings.

We do not sell your data, and we never share candidate CVs with anyone outside the people who help us run the Service. We share information only in these limited cases:

• Service providers (subprocessors). Trusted vendors for cloud hosting, email delivery, and AI processing act on our behalf under confidentiality and data-processing terms, and are contractually barred from using your data for their own purposes or training. List your key subprocessors here (e.g. hosting, AI, email provider).
• Legal & safety. Where required by law, court order, or to protect the rights, safety, and security of users and the Service.
• Business transfers. If Quantum Labs AI is involved in a merger, acquisition, or asset sale, data may transfer under this same policy, and we'll notify you of any change.

We keep data only as long as it's useful to you or required by law.

• Candidate CVs and job descriptions are retained only as long as needed to deliver your report and respond to any follow-up questions. We are rolling out an automated deletion schedule for this data; until it is fully in place, you can request deletion of any screening's CVs and job description at any time and we will action it promptly.
• Your contact details are kept while your beta access is active and for a reasonable period afterward to answer support questions and meet legal duties.
• Aggregated, non-identifying usage data may be kept longer to understand trends.

You can ask us to delete your data sooner at any time — see Section 11.

Candidate files are processed securely and never shared beyond the vendors that help us run the Service. We use industry-standard safeguards including encryption in transit, access controls that limit who can view data, and deletion on request as described above.

No method of transmission or storage is ever completely secure, so while we work hard to protect your information, we cannot guarantee absolute security. If a breach ever affects your data, we will notify you and any regulator as required by law.

Quantum Labs AI operates from [country/jurisdiction], and our service providers may process data in other countries. Where personal data crosses borders, we take steps to ensure it stays protected — for example through recognized safeguards such as standard contractual clauses. By using the Service, you understand your information may be processed outside your home country.

Depending on where you live, you may have some or all of these rights over your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to erase your data.
• Restriction & objection — limit or object to certain processing.
• Portability — receive your data in a portable format.
• Withdraw consent — where we rely on consent, withdraw it at any time.

To exercise any right, email us at recruitauto@quantumlabsai.com.pk. We'll respond within the timeframe required by law. If you're in the EEA or UK and feel we haven't resolved your concern, you may lodge a complaint with your local data protection authority.

If your CV was screened through RecruitAuto, it was uploaded by a recruiter who decided to use our Service. That recruiter is the controller of your data; we only process it on their instructions.

Your contact details are masked by default in any report generated from your CV. If you want to access, correct, or delete your data, please contact the recruiter or organisation you applied to first. You can also reach us at recruitauto@quantumlabsai.com.pk and we'll help route your request, including deleting your CV on request.

The Service is built for recruiters and hiring teams and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child's data has reached us, contact us and we will delete it promptly.

We may update this policy as the Service evolves or the law changes. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you by email. Your continued use of the Service after an update means you accept the revised policy.

Questions about this policy or your data? We'd like to hear from you.