Privacy & Data Protection Policy

Nexiu AI LLC is a company organized under the laws of Delaware, United States of America, providing recruiting and staffing services.

Privacy contact: privacy@nexiu.ai

This Policy applies to information we collect in the course of our business operations. Your use of our services is conditioned on acceptance of these terms.

This policy also applies to information collected through our mobile apps, websites, and any integrations with third-party platforms, including Meta (Facebook, Instagram).

For our recruiting services, we may request:

We only request documents directly related to the evaluation of candidates for specific positions.

We use your information for the following specific purposes:

We do not use your personal information for third-party advertising or sell it to advertisers. By using our services, you expressly consent to these uses.

To cancel commercial communications:

• →Email privacy@nexiu.ai with subject "CANCEL"
• →Reply "REMOVE" to any communication
• →Use unsubscribe links in emails

Processing time: up to 10 business days.

You may request:

• →Access to personal information we hold about you
• →Correction of inaccurate or outdated data
• →Deletion of your personal data (see Section 6A)
• →Restrictions on the processing of your data

How to request the deletion of your data:

Note: If you were a candidate for an active position, we may retain minimum information necessary to comply with legal or contractual obligations to the employer, which will be communicated at the time of the request.

We implement reasonable security measures including:

• →Encryption of data in transit and at rest
• →Restricted access to personal information (authorized personnel only)
• →Periodic reviews of our security practices

However, no system is completely secure. We will notify you of any security breach affecting you as required by applicable law. We will make all reasonable efforts to respond to and mitigate any security incident.

We may share information with:

• →Our clients (employers) for whom the candidacy is evaluated, with your knowledge
• →Technical service providers under confidentiality agreements
• →Authorities when legally required
• →Third parties in business transactions (mergers, acquisitions), with prior notice

We only share with third parties other than the above when you give explicit consent. We do not sell your personal information to third parties.

When a recruiter connects their Google account to Nexiu, we access the following Google user data, only with that recruiter's explicit consent:

• →The list of their Google calendars (calendar.calendarlist.readonly) — so the recruiter can choose which calendar Nexiu uses.
• →Free/busy time ranges from the selected calendar (calendar.events.freebusy) — to remove real conflicts from the interview slots offered to candidates. This returns time ranges only; we do not receive titles, guests, descriptions or locations of the recruiter's other events.
• →Calendar events (calendar.events) — to create the interview event and its Google Meet link on the selected calendar, and to delete it if the interview is rescheduled or cancelled. We only act on events created by Nexiu, identified by a private property we set on them.
• →Google Meet space settings (meetings.space.settings) — to enable automatic transcription for the interview Nexiu created, and for no other purpose.
• →Google Meet conference transcripts (meetings.space.readonly) — to read the transcript of that interview and generate an interview summary for the recruiter.

How we store and share it. Interview transcripts are stored encrypted in our infrastructure and are accessible only to the recruiting organization that conducted the interview. Transcripts are processed by our AI provider, under contract, for the sole purpose of generating that organization's interview summary. We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models, we do not use it for advertising, and we do not sell it.

Retention and revocation. Transcripts follow the retention periods in Section 7 and can be deleted through the process in Section 6A. A recruiter can disconnect Google from within Nexiu at any time, or revoke Nexiu's access at https://myaccount.google.com/permissions ; either action stops all future access.

Nexiu's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your data may be transferred and processed in any jurisdiction where we operate or have service providers. By using our services, you consent to these transfers. For international transfers, we implement appropriate safeguards in accordance with applicable law.

We do not provide services to minors under 18. If we identify data from minors, we will delete it promptly.

We may modify this policy as needed. For material changes, we will notify users by email at least 15 days before they take effect. Continued use of the services after such period constitutes acceptance.

We respond to all privacy-related emails. For data deletion requests, use the subject "DATA DELETION REQUEST".

Privacy and data deletion: privacy@nexiu.ai

Response time: up to 30 calendar days.