Welcome to QevolveX (Resume AI). This Privacy Policy explains how Quantum Evolution Technologies ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit and use our Resume AI HR Intelligence Platform.
As a B2B human resources platform, we process two distinct categories of data:
- Customer Data: Information about the recruiters, hiring managers, and companies using our platform.
- Candidate Data: Resumes, profiles, and information about job applicants uploaded by our Customers.
In the context of global data protection laws (such as the GDPR, UK GDPR, and CCPA), our Customers are the Data Controllers of Candidate Data, and QevolveX acts solely as the Data Processor. QevolveX is the Data Controller of Customer Data.
1. Information We Collect
A. Information You Provide to Us (Customer Data)
- Account Information: Name, business email address, company name, and password.
- Job Descriptions: Text and parameters outlining the roles you are hiring for.
- Communication Data: Information provided when contacting our support or sales teams.
B. Information You Upload (Candidate Data)
- Resumes and CVs: PDF files, documents, and parsed text containing candidate Personally Identifiable Information (PII) such as names, contact details (phone, email, LinkedIn URLs), work history, education, and certifications.
- Team Collaboration Data: Notes, ratings, and comments left by your team members regarding specific candidates within shared job workspaces.
C. Financial Information
We use Paddle as our Merchant of Record (MoR) and payment processor. When you subscribe to our plans, your payment details (e.g., credit card numbers, billing address) are collected and processed directly by Paddle. QevolveX does not directly collect, process, or store your raw credit card informationand relies on Paddle's PCI-DSS compliant infrastructure.
D. Automatically Collected Information & Cookies
- Usage Data: Metadata regarding how you interact with the platform (e.g., number of analyses performed, login frequency, feature usage).
- Device and Technical Data: IP addresses, browser types, and operating systems collected via standard server logs.
- Cookies and Tracking Technologies: We use essential cookies to maintain your active session and secure your account. We may also use analytics cookies (e.g., Google Analytics, Mixpanel) on our marketing pages to understand user behavior. You can manage cookie preferences through your browser settings.
2. How We Use Your Information & Legal Basis
Under the GDPR, we must have a valid legal basis to process your Customer Data. We process this data based on:
- Performance of a Contract: To provide the platform and manage your account.
- Legitimate Interests: To improve our algorithms, maintain cloud security, and provide customer support.
- Legal Obligations: To comply with tax and accounting laws.
We use the collected information for the following specific purposes:
- Service Delivery: Parsing resumes, evaluating skill gaps, and generating match scores against job descriptions.
- AI Processing: Generating actionable HR insights, identifying risk areas, and providing hiring recommendations.
- Billing and Account Management: Managing subscriptions, upgrades, and handling support requests.
- Platform Improvement: Monitoring system performance and debugging cloud infrastructure.
3. How We Share and Process Information (Our Tech Stack)
To provide our platform, we securely share data with specific third-party service providers (Sub-processors). By using our service, you acknowledge that your data will be processed by the following sub-processors. A full, legally binding list of our Sub-processors is available in our Data Processing Agreement (DPA).
A. Cloud Infrastructure
Our platform utilizes secure cloud hosting providers, primarily Google Cloud Platform (GCP), to host our application and securely store data. We employ enterprise-grade security configurations to ensure your Candidate and Customer Data remains protected both at rest and in transit.
B. Artificial Intelligence Providers (LLM APIs)
To provide our core HR intelligence features, Candidate Data and Job Descriptions are transmitted to secure, enterprise-tier Large Language Model (LLM) APIs (e.g., OpenAI Enterprise API, Anthropic).
- Strict AI Training Prohibition: We utilize enterprise API endpoints with Zero Data Retention (ZDR) or strict privacy agreements. Your Customer Data and Candidate Data are strictly used for generating your specific insights and are NEVER used to train the base AI models of our third-party providers.
C. Payment Processing (Paddle)
Subscription management, invoicing, and payment processing are handled entirely by Paddle. We share your basic account identifier with Paddle to provision your account features.
4. International Data Transfers
As a globally available platform, your data may be transferred to, and processed in, countries other than the country in which you are a resident.
Our primary data centers (via Google Cloud Platform) are located in the United States. When we transfer personal data originating from the European Economic Area (EEA), the UK, or Switzerland to the US or other non-adequate jurisdictions, we rely on legally approved transfer mechanisms, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Compliance with the EU-U.S. Data Privacy Framework (DPF) principles where applicable.
5. Data Security and Retention
Security Measures
We implement robust technical and organizational measures to protect your data, including:
- In Transit: TLS 1.2/1.3 encryption for all data moving between your browser, our servers, and our API Sub-processors.
- At Rest: AES-256 encryption for all data stored in Google Cloud Storage and our databases.
- Access Controls: Principle of least privilege (PoLP) access for our internal engineering and support teams.
Data Retention
- Candidate Data: We retain uploaded resumes and AI analyses only as long as you maintain an active job workspace or until you delete the candidate/job from your dashboard.
- Customer Data: We retain your account information for as long as your account is active. Upon account cancellation, data is deleted in accordance with our 30-day deletion policy, unless legally required for tax/compliance purposes.
6. Your Data Rights
Depending on your location (e.g., under GDPR, UK GDPR, or CCPA), you may have the right to:
- Access, update, or delete your Customer Data.
- Request a portable copy of the data we hold about you.
- Opt-out of certain data processing activities (e.g., marketing communications).
Important Note for Job Candidates: Because QevolveX acts as a Data Processor, candidates seeking to exercise their data rights (such as the Right to Access or the Right to be Forgotten) must contact the Customer (the employer/recruiter) directly. QevolveX cannot delete candidate data directly but provides our Customers with the in-app tools required to fulfill these legal requests immediately.
7. California Privacy Rights (CCPA/CPRA Disclosures)
If you are a resident of California, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.
Do Not Sell or Share My Personal Information
We do not sell your personal information. We also do not share your personal information for cross-context behavioral advertising. Our platform acts primarily as a service provider (data processor) for Candidate Data and uses Customer Data only for platform functionality, billing, and direct communications.
Categories of Personal Information Collected
In the preceding 12 months, we have collected the following categories of personal information:
- Identifiers: such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, or account name.
- Professional or employment-related information: such as current or past job history or performance evaluations (primarily processed on behalf of our Customers).
- Internet or other electronic network activity information: such as browsing history, search history, and information regarding a consumer's interaction with our website or application.
Your CCPA Rights
- Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you over the past 12 months.
- Right to Delete: You can request that we delete personal information we have collected from you, subject to certain legal exceptions.
- Right to Correct: You have the right to request the correction of inaccurate personal information we maintain about you.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights (e.g., by denying you services or providing a different level or quality of services).
To exercise these rights, please contact us at support@qevolvex.com. If you are a job candidate, please note that we process your data on behalf of our Customers (employers). You will need to direct your CCPA requests to the employer directly, and we will assist them in fulfilling your request.
8. Children's Privacy
QevolveX is a B2B enterprise platform designed strictly for adult professionals and employment purposes. We do not knowingly collect, solicit, or process personal data from individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). If we become aware that we have collected personal data from a child, we will delete that information immediately.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our tech stack, AI Sub-processors, or legal requirements. We will notify you of any material changes by posting the updated policy on this page, updating the "Effective Date" at the top, and emailing primary account holders.
10. Contact Us
If you have any questions, concerns, or requests to exercise your data rights regarding this Privacy Policy or our data processing practices, please contact our Privacy Team at: