Privacy Policy

Last updated: January 2026

1. Introduction

This Privacy Policy explains how your personal data is collected, used, and protected when you participate in an AI-powered interview conducted through Scrine. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian data protection laws.

2. Data Controller and Processor

The hiring organization that invited you to this interview acts as the data controller. Scrine acts as a data processor on behalf of the hiring organization. For questions about how your data is used in the hiring process, please contact the hiring organization directly.

3. Data We Collect

During the interview process, we collect and process:

  • Identity information: your name and email address
  • CV/resume data: if you choose to upload your CV
  • Voice recordings: audio captured during the interview
  • Transcripts: text transcriptions of your interview responses
  • AI-generated evaluations: assessment reports based on your responses
  • Technical data: browser type, device information, and connection quality

4. Legal Basis for Processing

We process your data based on:

  • Consent: you explicitly consent to the interview recording and AI evaluation before starting
  • Legitimate interest: the hiring organization has a legitimate interest in evaluating candidates for open positions
  • Pre-contractual measures: processing is necessary for steps taken at your request prior to entering into an employment contract

5. How We Use Your Data

Your data is used exclusively for:

  • Conducting and recording the AI-powered interview
  • Generating evaluation reports for the hiring organization
  • Sending you confirmation and status emails about your interview
  • Improving the quality and fairness of our AI evaluation system

6. Third-Party Processors

Your data may be processed by the following third-party services:

  • OpenAI: for voice processing, transcription, and AI-assisted evaluation
  • Cloud hosting providers: for secure data storage and service delivery
  • Email delivery services: for sending interview confirmations and notifications

All third-party processors are bound by data processing agreements that ensure GDPR compliance.

7. Data Retention

Your interview data is retained for the duration of the hiring process and up to 12 months after its conclusion, after which it is anonymized or deleted. You may request earlier deletion at any time. Voice recordings are deleted within 30 days of the interview completion; only transcripts and evaluations are retained for the full period.

8. Your Rights

Under GDPR, you have the right to:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate or incomplete data
  • Erasure: request deletion of your data
  • Restrict processing: limit how your data is used
  • Data portability: receive your data in a structured, machine-readable format
  • Object: object to processing based on legitimate interest
  • Withdraw consent: withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected].

9. Data Security

We implement appropriate technical and organizational security measures, including encryption in transit and at rest, access controls, and regular security assessments, to protect your personal data against unauthorized access, alteration, or destruction.

10. Website Analytics

We collect anonymous usage statistics to understand how visitors interact with our website. This includes:

  • Pages visited and referring website domain
  • Country (derived from your IP address, which is immediately discarded)
  • Browser family, operating system, and device type
  • Screen size category and language preference
  • UTM campaign parameters from URLs

Each visit is associated with an anonymous daily identifier that rotates every 24 hours and cannot be linked to you after this period. We store no IP addresses, no cookies, no raw browser fingerprints, and no persistent identifiers. We do not track you across websites or sessions.

We respect the Do Not Track (DNT) and Global Privacy Control (GPC) signals. If your browser sends either signal, no analytics data is collected from your visit.

This processing is based on our legitimate interest (GDPR Art. 6(1)(f)) in understanding website usage to improve our service. All data is stored on our own servers and is not shared with third parties.

11. Contact

For privacy inquiries or to exercise your rights, contact our Data Protection Officer at [email protected]. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données).