Privacy Policy

LevelHire, Inc. is an AI-powered candidate evaluation platform that helps early-stage startups assess candidates through structured, real-world challenges. We operate at levelhire.ai.

Data Controller / Responsable: LevelHire, Inc.
Email: privacy@levelhire.ai

LevelHire acts as a data processor on behalf of hiring companies (our customers) with respect to candidate data, and as a data controller for employer and platform user data.

From employer users (company accounts):

• Name, work email address, and job title.
• Company name and billing information (processed via Stripe; we do not store full card numbers).
• Usage data: pages visited, features used, session logs.

From candidates (assessment participants):

• Name and email address (provided by the hiring company that invited you).
• Written responses, code, and other content submitted during challenges.
• Audio/voice transcript from Cora AI screening sessions (if applicable).
• Behavioral signals: typing cadence, time-on-task, and layer progression.
• Integrity signals: tab-switch events, window focus/blur events, and optional camera preview. Camera data is processed locally in your browser and is never uploaded or stored on our servers.
• Session metadata: timestamps, challenge ID, session duration, device type, and browser type.

Sensitive data / Datos Sensibles: We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers. Camera data is used solely as a local integrity preview and is not uploaded, stored, or analyzed by our servers. If you believe we have inadvertently collected sensitive data, contact us immediately.

Children: LevelHire is not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted data, contact privacy@levelhire.ai and we will delete it promptly.

Primary purposes / Finalidades primarias:

• Delivering and operating the LevelHire platform and services.
• Generating AI-powered challenge assessments and prediction reports for the hiring company.
• Processing payments and managing subscriptions.
• Authenticating users and preventing unauthorized access.
• Communicating about your account, service updates, and security notices.

Secondary purposes / Finalidades secundarias:

• Improving and developing new platform features (aggregated, anonymized data).
• Sending product news and marketing communications (employer users only; you may opt out at any time).
• Analytics and performance monitoring.

AI decision-making: LevelHire uses AI to generate structured assessments, but no automated decision with legal or similarly significant effects is made solely by AI. A human reviewer at the hiring company reviews all reports before any employment decision is made.

Employment law notice: LevelHire is not a consumer reporting agency under the FCRA. Employers are responsible for compliance with applicable employment discrimination law, including Title VII of the Civil Rights Act, the ADA, the ADEA, and equivalent Mexican labor law (Ley Federal del Trabajo).

United States: LevelHire processes data based on: (a) contractual necessity — to provide the services you requested; (b) legitimate interests — platform security, fraud prevention, and product improvement; and (c) consent — where required (e.g., optional marketing communications).

México (LFPDPPP): El tratamiento de sus datos personales se realiza con base en: (a) la ejecución de un contrato — para prestarle el servicio solicitado; (b) el interés legítimo — seguridad de la plataforma y mejora del servicio; y (c) consentimiento — donde así se requiera. Al continuar usando LevelHire tras la presentación de este Aviso de Privacidad, usted otorga su consentimiento para el tratamiento de sus datos con las finalidades primarias indicadas. Para oponerse a las finalidades secundarias, contáctenos dentro de los 5 días hábiles siguientes en privacy@levelhire.ai.

We share personal data only as described below and never sell it to third parties.

• Hiring companies: Candidate assessment reports and responses are shared with the employer that initiated the assessment. The employer is independently responsible for handling this data in compliance with applicable law.
• Anthropic (AI processing): Candidate responses are transmitted to Anthropic's API to generate assessments. Anthropic processes this data as a subprocessor and does not use it to train its models without consent.
• Infrastructure providers: Supabase (database, U.S.), Vercel (hosting, U.S.), and Stripe (payments). Each maintains appropriate data processing agreements.
• Legal compliance: We may disclose data to comply with a legal obligation or protect the rights, property, or safety of LevelHire or others.

Transferencias internacionales (México): LevelHire tiene su sede en los Estados Unidos. Si usted accede desde México, sus datos personales serán transferidos y procesados en los Estados Unidos. Garantizamos que dichas transferencias cumplen con la LFPDPPP mediante cláusulas contractuales que otorgan protecciones equivalentes a las exigidas por la ley mexicana (Art. 36–37 LFPDPPP). Al utilizar nuestros servicios, usted consiente dichas transferencias.

• Candidate assessment data (responses, behavioral signals, prediction reports): retained for 12 months after the assessment is completed, then permanently deleted.
• Employer account data: retained for the duration of the account plus 12 months following deletion, or as required by applicable law.
• Billing records: retained for 7 years as required by U.S. tax regulations and Mexican fiscal law (SAT requirements).
• Cora screening transcripts: retained for 12 months after the session.

California residents have the right to:

• Know what personal information we collect, use, and disclose.
• Delete personal information we hold about you, subject to certain exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
• Limit use of sensitive personal information.
• Non-discrimination — we will not discriminate against you for exercising your privacy rights.

To submit a CCPA request, email privacy@levelhire.ai with the subject "CCPA Request". We will respond within 45 days. Other U.S. state residents may have similar rights — contact us to exercise them.

Conforme a la LFPDPPP, usted tiene derecho a:

• Acceso (A): Conocer qué datos personales tenemos sobre usted y cómo los usamos.
• Rectificación (R): Corregir sus datos personales si son inexactos o incompletos.
• Cancelación (C): Solicitar la eliminación de sus datos personales cuando ya no sean necesarios para la finalidad de su recabación.
• Oposición (O): Oponerse al tratamiento de sus datos personales para finalidades específicas.

Envíe su solicitud ARCO a privacy@levelhire.ai con asunto "Solicitud ARCO", incluyendo: (1) nombre completo, (2) correo electrónico registrado, (3) descripción del derecho a ejercer, y (4) copia de identificación oficial. Responderemos en 20 días hábiles.

Si considera vulnerados sus derechos, puede acudir al INAI: home.inai.org.mx.

We use essential cookies and similar technologies to operate the platform (authentication sessions, security tokens). We do not use third-party advertising trackers or cross-site behavioral tracking. Analytics data is collected in aggregate and anonymized form.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, row-level security on our database, and strict access controls. See our Security page for details. In the event of a data breach, we will notify affected users and regulatory authorities (including INAI for Mexican residents) within legally required timeframes.

We may update this Privacy Policy periodically. Material changes will be communicated via a notice on this page and — for employer users — by email. Your continued use of LevelHire after the effective date constitutes acceptance of the updated policy.