Privacy

You upload a file of job applicants, which is personal data about people who are not our customers. Here is exactly what happens to it.

The file

• The file is sent to our server over HTTPS, scored in memory, and discarded when the response is sent. It is not written to disk, a database, a queue or a log.
• Our server logs record the number of rows, the export format detected and timings. Never a name, email, phone number or any other column.
• Your browser keeps the file in its own storage so that, after you pay, it can send the same file again to fetch the scored version. That copy stays on your computer and is deleted when the scored file downloads. You can clear it any time by clearing site data for applysift.com.

What we keep

• A SHA-256 hash of each uploaded file, with its row count, for one hour, so that checkout can be tied to the file you uploaded. A hash cannot be turned back into the file.
• For paid runs, the same hash and the Polar order id, for 30 days, so you can download the scored file again by uploading the same file.
• Payment details are handled by Polar; we receive your email address and the order, not your card.
• Visit counts through Google Analytics, with IP anonymisation, so we can see whether anyone reads the guides.

The phone check

Phone numbers are matched against the public numbering-block assignment records published daily by the North American Numbering Plan Administrator. The check runs on our server against a copy of those records. No number is sent to a third party.

Your role and ours

You decide what to upload and what to do with the result; under GDPR and similar laws you are the controller and ApplySift is a processor for the duration of the request. ApplySift never makes a hiring decision and never tells you to reject anyone: it tells you where to look first.

Questions: hello@applysift.com.