Privacy Policy

Rondo helps companies manage job applications, candidate queues, interview rounds, notifications, and live interview scheduling. We collect only the information needed to operate that workflow and keep participants informed.

We may collect account details such as name, email address, role, company membership, OAuth identity information from Google or LinkedIn, application details, CV links or uploads, work sample answers, interview slot activity, notification preferences, and basic product analytics. If a hiring manager connects Google Calendar for round planning, we may read calendar free/busy information for the selected planning window.

We use this information to authenticate users, show relevant applications and roles, support hiring workflows, send transactional notifications, generate calendar invites, maintain security, debug the service, improve product quality, and comply with legal obligations. Google Calendar data is used only to show busy times and suggest available interview slots during round creation. Rondo does not use Google Calendar data for advertising, profiling, model training, or unrelated product analytics.

Rondo protects sensitive information using access controls, least-privilege service credentials, Supabase Row Level Security policies, authenticated dashboard routes, and server-side checks for company membership before company users can view candidate data. Candidate CVs, applications, work samples, interview links, and calendar-derived availability are only shown to the candidate, authorized company members, or service providers needed to operate the workflow.

Data is transmitted over HTTPS. Production hosting, database, file storage, email, video, and payment processing are handled by infrastructure providers that provide encryption in transit and at rest. Secrets and privileged API keys are stored in protected server environment variables and are not exposed in the browser.

Calendar access is limited to availability checks for the round planning window selected by the hiring manager. Rondo does not store Google Calendar event contents or refresh tokens for this feature. If calendar access fails or is disconnected, the round can still be created manually without calendar data.

Interviews take place in a Rondo call room hosted by our video provider. Access is limited to the candidate and the hiring team for that interview: joining requires a signed-in Rondo account, and the room cannot be entered with a shared link alone.

Rondo records the fact that a call took place — who joined, when, and for how long — and uses it to mark the interview attended or missed. Audio or video is recorded only when everyone on the call has agreed at the start of that call. Declining does not affect the interview or the application, and either party can decline. Where a recording exists, it is available to the hiring company for that role and is used to write up interview notes.

Candidate application information is shared with the hiring company for the role they apply to. We use service providers such as Supabase, Cloudflare, Resend, Daily, Stripe, Google, LinkedIn, and related infrastructure providers to operate the service. We do not sell personal information.

We keep information while accounts, applications, or company records remain active, and as needed for audit, security, or legal purposes. Users can update notification preferences in Rondo. For access, correction, or deletion requests, contact us.

For privacy questions or requests, contact contact@rondo-interview.live.