Privacy Policy
Last updated: 27 July 2026
1. Controller
Divil d.o.o., Glinškova ulica 9, 2000 Maribor, Slovenia, VAT SI81162065. Contact: login@workerproof.com.
2. What we process
Account data (email, organisation name), billing data (via Stripe — we never see card numbers), and CV documents you upload for analysis, including the personal data they contain (name, contact details, qualifications).
3. Why and on what basis
To provide the service (contract): AI analysis of CVs, storing candidate records for your organisation, sending login links. Billing and accounting (legal obligation). Service emails (legitimate interest).
4. AI processing
Uploaded CVs are processed by Anthropic (Claude API) to produce the assessment. Content sent via the API is not used to train models. Results are stored in your organisation's private workspace.
5. Processors
Vercel (hosting, EU/US SCC), Supabase (database, Frankfurt EU), Anthropic (AI analysis), Stripe (payments), Resend (email). Each processes data under a data-processing agreement.
6. Your responsibilities
You confirm you have a lawful basis (e.g. candidate consent or legitimate interest as a recruiter) to process the CVs you upload.
7. Retention
Candidate records remain until you delete them or close your account. Backups are rotated within 30 days.
8. Your rights
Access, rectification, erasure, restriction, portability, objection — email us. You may lodge a complaint with your supervisory authority (in Slovenia: IP RS).
9. Cookies
Only functional cookies: session (login), language, referral attribution (90 days). No advertising trackers.