Privacy policy
Recruitr scores developers from public evidence. This page explains exactly what we collect and what we do with it.
Last updated 5 October 2026
What we collect
- Account details: your name, email, role (candidate, recruiter or organiser) and profile fields you choose to add.
- GitHub: when you connect GitHub we read your public profile, repositories, commit history and a sample of source files to compute your score. We store a derived score, summaries and short evidence excerpts, not full copies of your repositories.
- LeetCode: the public solve counts and contest rating for the username you provide.
- Code walkthroughs: your typed answers and typing timing, used to produce a signal for reviewers. It is a signal only and never an automatic rejection.
- Recruiter activity: searches, shortlists and private notes. Notes are private to the recruiter’s team and are never used to lower a candidate’s score.
- Messages you send us through the contact form, plus a salted hash of your IP address used only to limit abuse.
Your GitHub login token
Connecting GitHub gives us a read-only access token. It is stored server-side only, encrypted, never sent to your browser and never shown to recruiters. Unlinking GitHub deletes it.
Who processes your data
- Supabase for authentication and the database.
- Neo4j Aura for the skill and evidence graph.
- Google Gemini to review code excerpts and write feedback. Excerpts are sent for analysis only.
- GitHub and LeetCode as the sources of public data.
- Our hosting provider, which serves the website.
We do not sell personal data and do not run advertising trackers.
Who can see your profile
Recruiters on the platform can see your score, evidence and public profile fields. A public badge page exists only if you switch it on in Settings. Colleges and clubs see only what you share with them when you join through their invite link.
Your rights and controls
- Download all your data as JSON from Settings.
- Unlink GitHub or LeetCode at any time; your score is recalculated immediately.
- Delete your account from Settings. Your profile, graph data and stored tokens are removed.
- Ask us anything or request a correction through the contact page.
Retention and security
We keep your data while your account exists. Contact messages are kept for up to 12 months. All traffic uses HTTPS, database access is restricted by row-level security, and sensitive tokens are encrypted. No system is perfectly secure; report any issue through the contact page.
Changes
If we change this policy in a meaningful way we will update the date above and notify account holders by email.