Who we are
Faroquest provides recruiting software for agencies and in-house talent teams. This policy explains what personal data we handle when you visit our website or use the product, and why.
We play two roles. For account, billing and website data, we decide how it is used (we are the controller). For the candidate and client data an organisation puts into its workspace, that organisation decides and we process it on its behalf (we are the processor).
If you are a candidate
If a recruiter or employer holds your details in Faroquest, they are responsible for that data. To see, correct or delete it, contact the organisation that holds it. They can export, correct, anonymise or erase your record, and mark you as not to be contacted.
If you can't reach them, write to us at hello@faroquest.com and we will pass your request on and help where we can.
What we collect
- Account details: your name, email address and the organisation you belong to.
- Workspace content: what your team adds, such as jobs, candidate profiles, CVs, notes, interviews, client contacts, placements and invoices.
- Forwarded email: if your workspace turns on receiving CVs by email, the emails forwarded to its address, including sender, subject and attachments.
- Billing: plan and billing contact. Card details are handled by Stripe and never reach our servers.
- Technical data: IP address, browser, and a log of actions in your workspace, used for security and to show your team what changed.
How we use it
- To provide the product and the features you turn on.
- To keep it secure, prevent abuse and fix problems.
- To send service email, such as invitations, notifications and billing receipts.
- To bill paid plans and meet legal and tax obligations.
- To improve the product, using aggregated information that doesn't identify people.
We don't sell personal data, and we don't use it for advertising.
AI features
When AI features are enabled, the text of a CV and the requirements of a job are sent to OpenAI to extract fields and skills and to suggest a match score. Under OpenAI's API terms, this data isn't used to train their models by default.
AI results are suggestions. They show the evidence they rely on, and hiring decisions stay with people.
Who processes data for us
We use a small number of providers to run the service. Each only receives what it needs for its job.
| Provider | What for | Data involved |
|---|---|---|
| Clerk | Sign in, accounts and organisations | Name, email, sign-in and session data |
| Supabase | Database and private file storage | All workspace data, including CVs |
| OpenAI | CV parsing and AI match scoring, when enabled | CV text and job requirements |
| Resend | Sending email and receiving forwarded CVs | Email addresses, message content, attachments |
| Stripe | Payments and invoices for paid plans | Billing contact and payment details |
| Upstash | Rate limiting to protect the service | IP addresses, held briefly |
Our hosting provider also processes data as part of running the website and product. Some providers are located outside your country; where the law requires it, transfers are covered by appropriate safeguards such as standard contractual clauses.
How long we keep it
- Workspace content stays until your team deletes it or the workspace is closed.
- Candidate retention: each workspace can set a retention period, after which candidate records are erased automatically.
- Account data is kept while your account is active and deleted when you ask us to close it, unless the law requires us to keep it longer (for example, billing records).
- Backups are overwritten on a rolling schedule.
Security
Data is encrypted in transit. CVs are kept in private storage and only served to signed-in members of the workspace they belong to. Every workspace is isolated from the others, access depends on role, and changes are recorded in an audit trail.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, and object to or restrict how it is used. Email hello@faroquest.com and we will respond within the time the law allows. You can also complain to your local data protection authority.
Children
Faroquest is a business product and isn't meant for anyone under 16.
Changes and contact
If we change this policy in a meaningful way, we will update the date above and tell workspace administrators. Questions: hello@faroquest.com.