Privacy Notice

1. Who we are

Xperts4Recruit is operated by Global Consultants Group, a company incorporated in Lebanon (the "Company", "we", "us"). We act as the data controller for personal data collected about our account holders (recruiters, admins, and their team members). When our customers use the Service to process candidate data, we act as their data processor.

2. Personal data we collect

• Account data — name, email, login credentials, workspace and role.
• Usage and telemetry — pages visited, actions taken, feature usage, credit consumption, device and browser type, IP address, approximate location.
• Support messages — content of emails or in-app messages you send us.
• Content you upload — CVs, candidate notes, job descriptions, client records, and messages you exchange through the Service.
• Payment metadata — order IDs, plan, subscription status. Card details are collected and stored by Paddle, not by us.

3. Why we use it

• Create and secure your account (contract performance).
• Provide the Service, including AI parsing, matching, chat, and outreach features (contract performance).
• Prevent fraud, abuse, and security incidents (legitimate interests).
• Improve product quality and troubleshoot issues (legitimate interests).
• Send transactional emails such as billing notices, credit alerts, and security notifications (contract performance).
• Send product updates or marketing where you have opted in (consent).
• Comply with legal obligations (legal obligation).

4. AI processing

CV text, job descriptions, and pre-screen chat messages are sent to third-party AI model providers to generate parsed fields, match scores, outreach drafts, and chat responses. Providers process data on our instructions and do not train their foundation models on your content. You are responsible for having a lawful basis to submit candidate data to the Service.

5. Who we share data with

• Hosting and infrastructure — Lovable Cloud (Supabase) for database, authentication, storage, and email delivery.
• Merchant of Record — Paddle.com for payments, subscription management, invoicing, and tax compliance.
• AI providers — Google (Gemini) and other model providers via the Lovable AI Gateway for the AI features described above.
• Professional advisers — legal, accounting, and audit providers where necessary.
• Authorities — where required by law, court order, or to protect rights, property, or safety.

6. International transfers

Personal data may be processed outside your country of residence, including in the European Union and the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards with our subprocessors.

7. Retention

We retain account and content data for as long as your workspace is active. On account closure, workspace content is deleted or anonymized within 90 days, except where longer retention is required by law (e.g. tax records) or for the establishment or defense of legal claims. Payment records held by Paddle follow their own retention schedule.

8. Your rights

Depending on your jurisdiction, you have the right to access, rectify, erase, restrict, or port your personal data, to object to processing based on legitimate interests, to withdraw consent, and to lodge a complaint with your local data protection authority. We respond within one month.

Exercise your rights by emailing [email protected]. If your request concerns candidate data uploaded by one of our customers, we will forward it to that customer, who is the controller of that data.

9. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, role-based access controls, workspace isolation via row-level security, and audit logging. No system is perfectly secure; you should protect your credentials and report suspected incidents to [email protected].

10. Cookies

We use essential cookies to keep you signed in and to secure the Service. We do not use advertising or third-party marketing cookies. If we add analytics cookies in future, we will request your consent where required.

11. Changes

We may update this Notice. Material changes will be notified through the Service or by email.

12. Contact

Global Consultants Group — [email protected].