Template — to be reviewed by counsel before launch.

Privacy policy

Last updated 26 October 2026

This policy explains how Nucleotto (“we”) handles personal information when you use AI Connector for JobAdder (the “Service”), a connector between JobAdder and AI apps such as Claude and ChatGPT.

Our role

Your organization controls the recruitment data held in JobAdder, including information about candidates and contacts. When the Service reads or changes that data at your request, we act as your organization's service provider (processor). For the account information described below, we decide how it is used.

Information we collect

• Account information: your JobAdder user id, name, email address, account name, time zone and administrator status, received from JobAdder when you sign in.
• Credentials: tokens issued by JobAdder and by us to your AI apps. JobAdder tokens are encrypted; tokens we issue are stored only as hashes.
• Automation settings: automations you create and their destinations (email addresses and Slack webhook URLs, stored encrypted).
• Website CV intake settings: if your organization connects its website's CV form, the intake's settings and encrypted secret, which JobAdder user it acts as, and, if AI summaries of CVs are on, the name of the person at your organization who approved them and the date.
• Operational records: audit and usage records (which tool or setting was used, when and with what outcome, record ids and names of changed fields), automation run records and short report previews.
• Technical data: IP addresses in hashed form for rate limiting and security, and standard request logs kept by our hosting provider.
• Website analytics: page-view counts from Vercel Web Analytics, which sets no cookies and records the page's address without its query string, the referring site, and the browser, operating system, device type and country. It does not identify you.

We do not store the contents of your JobAdder records, resumes, notes or your conversations with AI apps. Record data passes through the Service to the AI app you connected, or to your automation destinations, when you or your automations request it. If your organization connects its website's CV form, each CV and the details sent with it pass through the Service to your JobAdder account. For 30 days we keep each CV's outcome: the candidate's name as entered on the form, JobAdder record ids, the steps completed and any error codes. We never keep the CV, its text, the candidate's email address or phone number, or an AI summary of it.

Waitlist

If you join the waitlist on our website, we keep your name and email address and, if you give them, your company, role, team size and AI assistant. We use them only to decide when to invite you and to contact you about access to the Service. We delete them 12 months after your last sign-up, or sooner if you ask at support@example.com. We do not share them or use them for advertising.

How we use information

• to provide the Service: sign-in, calling JobAdder on your behalf, running automations;
• to keep it secure: authentication, rate limiting, abuse prevention and audit;
• to support you and to tell you about changes to the Service;
• to meet legal obligations.

We do not sell personal information and do not use your JobAdder data to train AI models.

AI apps and AI summaries

Information returned to Claude, ChatGPT or another AI app is handled by that app's provider under your agreement with them. If AI summaries are enabled for an automation, the report content is sent to Anthropic to write the summary. Summaries of website CVs are off by default: only our operators can turn them on for a website, and only after your organization has approved it in writing and confirmed that the privacy notice on its CV form covers it. Only CVs sent after the candidate agreed to that notice, for a candidate found or added in JobAdder, are summarised: each is sent once to Anthropic to extract an advisory summary of what the CV states, which is added to JobAdder as a note labelled as AI-extracted; it never scores or ranks candidates. Your organization's JobAdder administrator can also turn AI summaries off for the whole account.

Sharing

We share information only with the service providers listed on our subprocessors page, with JobAdder (to perform your requests), with destinations you configure, and where required by law.

Retention

Report previews and webhook event ids are kept for 7 days, website CV outcomes (including the candidate's name as entered on the form) and error records (failed tool calls, sign-ins and website CVs; ids and codes only) for 30 days, automation run records for 90 days and audit records for 12 months; audit and error records remain after you delete your data until those periods end. Account information, credentials and automation settings are kept until you delete them. See data handling for details.

Your choices and rights

You can delete your data at any time from the dashboard (Account > Disconnect and delete my data). Depending on where you live, you may have rights to access, correct, delete or object to the use of your personal information. Candidates and contacts whose details are held in JobAdder should contact the recruitment organization that holds their data. To exercise your rights or ask a question, email support@example.com.

International transfers

The Service is hosted in Australia. Some providers may process information in other countries; where they do, we rely on appropriate safeguards.

Changes

We will post changes to this policy on this page and update the date above.

Contact

Nucleotto, support@example.com.