Privacy Policy

1. Introduction

Welcome to IAMDAN. We are committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy applies to all users of our AI call screening service, including job applicants, recruiters, and employers.

By using our service, you acknowledge that you have read and understood this Privacy Policy, including how we collect, use, and share your personal information.

2. Data We Collect

We collect the following types of information:

Personal Information

• Contact Information: Name, email address, phone number
• Professional Information: Resume/CV, job application details, professional experience
• Account Information: Login credentials for recruiters and employers
• Identification Data: When required, information to verify your identity

Call Data

• Audio Recordings: Voice recordings from screening calls
• Transcripts: AI-generated transcriptions of call content
• Analysis Data: AI-generated assessments, scores, and insights

Technical Data

• Usage Data: IP address, browser type, device information
• Cookies and Tracking: Information collected through cookies and similar technologies
• Log Data: Server logs and user activity information
• Location Data: General location information derived from IP address

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we must have a legal basis for processing your personal data. Depending on the specific context, we rely on the following legal bases:

• Consent: We process certain data based on your explicit consent, which you can withdraw at any time.
• Contractual Necessity: Processing necessary for the performance of our contract with you (e.g., providing the service you've signed up for).
• Legitimate Interests: Processing necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms. Examples include:
  • Improving and personalizing our services
  • Ensuring the security of our platform
  • Analyzing user behavior to enhance user experience
  • Marketing our services to potential customers
• Legal Obligation: Processing necessary to comply with our legal obligations.
• Vital Interests: In rare cases, processing necessary to protect someone's vital interests.

4. How We Use Your Data

We use your information for the following purposes:

• To provide our AI call screening services to applicants and recruiters
• To analyze call data and generate insights for recruitment purposes
• To improve and train our AI systems and algorithms
• To communicate with you about our services
• To process payments and manage subscriptions
• To prevent fraud and ensure the security of our platform
• To comply with legal obligations
• To protect our rights, privacy, safety, or property

For each purpose, we ensure that we have an appropriate legal basis for processing as outlined in Section 3.

5. Data Sharing

We may share your information with:

• Recruiters and Employers: If you are a job applicant, we share your call data and analysis with the recruiter or employer to whom you applied
• Service Providers: Third-party vendors who perform services on our behalf (e.g., cloud storage, payment processing)
• AI Analysis Partners: Partners who help us analyze call data and improve our algorithms
• Legal Authorities: When required by law, court order, or governmental regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We have data processing agreements with all third-party processors to ensure they provide adequate protection for your personal data. We do not sell your personal information to third parties.

6. Cookies and Similar Technologies

What are cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide you with a better experience and allow certain features to work.

Types of cookies we use:

• Essential cookies: Necessary for the website to function properly
• Preference cookies: Remember your settings and preferences
• Analytics cookies: Help us understand how visitors interact with our website
• Marketing cookies: Used to track visitors across websites to display relevant advertisements

Cookie management:

You can control cookies through your browser settings. You can:

• Accept all cookies
• Be notified when cookies are set
• Delete cookies after each visit
• Block cookies entirely (though this may affect website functionality)

Our cookie banner allows you to customize your cookie preferences when you first visit our site. You can change these preferences at any time.

For a detailed list of the cookies we use, their purposes, and their expiration dates, please visit our Cookie Policy page.

7. Automated Decision-Making

Our AI call screening service involves automated processing, including profiling, which may produce legal effects concerning you or significantly affect you. Here's what you need to know:

How automated decisions work:

• Our AI system analyzes voice recordings, speech patterns, and responses
• The system evaluates communication skills, relevance of answers, and other job-related factors
• The analysis generates scores and insights used in the recruitment process

Safeguards in place:

• Algorithms are regularly tested for accuracy and bias
• Job applicants are informed before participating in AI screening
• Human review is available for significant decisions
• Recruiters are trained to properly interpret AI-generated insights

Your rights:

Under the GDPR, you have the right to:

• Not be subject to a decision based solely on automated processing
• Obtain human intervention
• Express your point of view
• Contest the decision

To exercise these rights, please contact our Data Protection Officer (see Section 14).

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. Our security measures include:

• Encryption of personal data
• Regular security assessments
• Access controls and authentication procedures
• Staff training on data protection
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Call recordings are stored for 90 days before being automatically deleted
• Transcripts and analysis data are stored for up to 12 months
• Account information is retained for as long as you maintain an active account plus 12 months after account closure
• Financial records are kept for 7 years as required by tax regulations
• Backups are retained for a maximum of 30 days

We review our retention periods regularly and will delete or anonymize your information when it's no longer needed.

10. International Data Transfers

Your personal information may be transferred to, stored, and processed in countries other than the one in which you reside. In particular, our servers and those of our third-party service providers may be located in the United States, Canada, and other countries.

Safeguards for international transfers:

When we transfer personal data outside the European Economic Area (EEA) or the UK, we ensure that adequate protection is in place through one or more of the following mechanisms:

• EU-approved Standard Contractual Clauses (SCCs)
• UK International Data Transfer Agreements (IDTAs)
• Adequacy decisions by the EU Commission or UK government
• Binding Corporate Rules

You can request a copy of the specific safeguards applied to your data transfer by contacting our Data Protection Officer.

11. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to Access: You can request a copy of your personal data and information about how it is processed.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): You can request deletion of your personal data under certain circumstances.
• Right to Restriction of Processing: You can request that we limit the processing of your personal data.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to processing based on legitimate interests, including profiling, and for direct marketing purposes.
• Rights Related to Automated Decision-Making: You can request human intervention for decisions based solely on automated processing.
• Right to Withdraw Consent: You can withdraw previously given consent at any time.

To exercise any of these rights, please contact us at privacy@iamdan.com or through our Data Protection Officer. We will respond to your request within one month, though in complex cases this may be extended by two additional months.

There is generally no fee for exercising your rights, but we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

12. Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through a notice on our website or by email prior to the changes becoming effective. The "Effective Date" at the top of this policy indicates when it was last updated.

We encourage you to review this Privacy Policy periodically to stay informed about our data practices. Your continued use of our service after any changes indicates your acceptance of the updated policy.

14. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our compliance with data protection regulations. You can contact our DPO if you have questions about our data practices, concerns about how we handle your data, or requests to exercise your legal rights.

15. How to Complain

If you are unhappy with how we have used your data or feel we have failed to uphold your data protection rights, you have the right to complain to a data protection supervisory authority.

We would appreciate the chance to address your concerns before you approach a supervisory authority, so please contact us first if possible.

16. Contact Us

View our Terms & Conditions