Roles of the Parties
The employer conducting the interview is the controller (or “business”) of candidate personal information. The employer decides who is interviewed, what is collected within the limits the platform allows, how long it is kept, and whether to hire.
Capifiq Inc is a processor (or “service provider”) acting on the employer's documented instructions. Capifiq produces no candidate score, ranking, recommendation or automated rejection, and does not use candidate information to train models.
Scope and Subject Matter
This addendum covers personal information processed when an interview is scheduled, conducted and reviewed on the Capifiq platform: identity and contact details supplied by the employer, meeting audio and video, screen content the participant chooses to share, captions and transcripts, device and network information collected for interview integrity, and the records of consent and notices described in the candidate agreements.
Subprocessors
Capifiq engages the following subprocessors. Each is bound by written terms no less protective than this addendum, and each receives only the data its function requires.
| Subprocessor | Function | Data received |
|---|---|---|
| LiveKit, Inc. | Real-time meeting transport | Meeting audio, video and screen content in transit |
| Reality Defender, Inc. | Media authenticity check | A short portion of interview video, processed on a delete-on-ingest basis |
| Backblaze, Inc. | Object storage of recordings, evidence and sealed records | Meeting media, screen captures, sealed consent and report records |
| Infobip Ltd. | Transactional email | Recipient name and address, interview details, notices and consent links |
| WorkOS, Inc. | Authentication for employer users | Employer user identity. No candidate data. |
| OpenAI, L.L.C. | Interview question generation, and speech-to-text where enabled | Role and question content; meeting audio where transcription is enabled |
| SSL.com | RFC-3161 trusted timestamping of sealed records | A cryptographic hash only. No personal information. |
| IPLocate | Approximate geolocation of a connection | IP address |
| Hetzner Online GmbH | Infrastructure hosting | All platform data at rest and in transit within the hosting environment |
Capifiq does not sell or share candidate personal information, and no subprocessor is permitted to use it for its own purposes.
Processing Instructions
Capifiq processes candidate personal information only to provide the interview platform to the employer and as otherwise required by law. What is observed during an interview is governed by the scope the employer has provisioned; the candidate is told what that scope is before the interview and again in their consent document.
Security
Data is encrypted in transit and at rest. Evidence and sealed records are written to storage under object lock with credentials that carry no delete permission, so the application itself cannot erase them. Access to candidate content is limited to the employer's authorised users and to Capifiq personnel who require it to operate or support the service.
Retention and Deletion
The employer sets retention periods. Capifiq publishes no default period for interview media or biometric information; an employer that has not chosen one cannot schedule an interview. Where a state sets a maximum, Capifiq applies that maximum even if the employer's setting is longer. The periods that applied to a particular interview are stated in that candidate's own consent document and cannot be changed afterwards.
See the Biometric Data Retention and Destruction Policy for how destruction happens and when it is paused.
International Transfers
Candidate personal information is processed in the United States. Where a subprocessor processes data outside the country in which it was collected, that transfer is covered by an appropriate transfer mechanism in the terms between Capifiq and that subprocessor.
Assistance to the Employer
Capifiq assists the employer in responding to candidate requests for access, correction, deletion and objection, and in meeting its own notice obligations. A candidate request made to Capifiq is directed to the employer, who decides it. Capifiq does not decide a request on the employer's behalf.
Changes to Subprocessors
This page is the current list. Capifiq updates it before a new subprocessor begins processing candidate personal information, and employers may object through their agreement with Capifiq.
Contact
Capifiq Inc, 8 The Green #6485, Dover, DE 19901, United States. privacy@capifiq.ai.
Candidates: your employer decides what happens to your interview information. Contact the person who arranged your interview, or see Candidate Rights.