Who is responsible
For candidate information submitted to a customer workspace, that customer generally determines why and how the information is used. RH360 processes it to provide the service under the customer's instructions. RH360 remains responsible for information it uses for its own account, security and public-site operations.
Information we process
Depending on how you use RH360, we may process:
- Account information, such as your name, work email, organization and authentication details.
- Recruitment information entered or uploaded by customers, including applications, CVs, interview notes, messages and evaluation criteria.
- Technical and security information, such as IP address, browser, device, timestamps, logs and consent choices.
- Product usage information needed to operate, secure and improve the service. Optional analytics are used only after consent where required.
Why we use information
We use personal information to:
- Provide applicant tracking, document handling, collaboration, interview scheduling and AI-assisted evaluation features.
- Authenticate users, prevent abuse, investigate incidents and keep an auditable record of important actions.
- Send service, security and account communications and respond to support requests.
- Understand aggregate product usage and improve RH360 when analytics consent has been given.
Legal bases
We process information as needed to provide the service and perform our agreements, protect the service and our legitimate interests, comply with legal obligations, and rely on consent when the law requires it, including for optional analytics.
AI-assisted processing and human decisions
RH360 can help recruiters organize and evaluate applications. Automated results are recommendations with supporting evidence; the customer remains responsible for reviewing them and for every employment decision.
Sharing and service providers
Information may be available to authorized members of the relevant customer organization and to providers that support hosting, storage, email, analytics, payments or AI features. We may also disclose information when legally required or to protect users and the service. We do not sell personal information.
International transfers
Service providers may process information outside your country. Where required, RH360 and its customers must use appropriate contractual or legal safeguards for those transfers.
Retention and deletion
We keep information only for as long as needed for the purposes above, contractual requirements and applicable law. Customer administrators can configure candidate-retention periods and request export or deletion, subject to legal holds and required security records.
Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, and may withdraw consent. Candidates should normally contact the organization to which they applied; we will help that organization respond when required.
Security
We use access controls, tenant separation, private document storage, encryption in transit, security logging and other organizational and technical measures. No online service can guarantee absolute security.
Cookies and analytics
Essential storage supports sessions, security and language preferences. Optional analytics are controlled by the consent banner. You can decline analytics without losing access to the service's essential functions.
Changes to this policy
We may update this policy when the service or legal requirements change. The date above identifies the current version. Material changes will be communicated through an appropriate channel.
Contact and requests
For a privacy question or to exercise your rights, contact us. We may need to verify your identity before responding.
digitalthinking360@gmail.com