Privacy Policy

Last updated: November 13, 2026

Gaugely (Gaugely) provides agentic AI screening for recruiters. This policy explains what we collect, why, and the choices you have. Questions? Email support@gaugely.io.

What we collect

  • Recruiters: name, work email, organization, and billing details (handled by Polar — we never see full card numbers).
  • Candidates: name and email, the interview audio/video recording and its transcript, AI-generated scores and feedback, integrity signals (e.g. tab-switch counts, on-device face-presence checks), and — only if a job requires it — identity-verification results from Didit.

How we use it

To run and score interviews and share results with the hiring team. A human reviews results before any decision — there is no automated rejection. We do not sell personal data and do not use it to train public AI models.

Consent

Candidates explicitly consent to recording and AI analysis before any recording begins, and can request a human alternative at any time.

AI usage & data

Free AI usage is tracked by Gaugely and AI providers for service operation, security and usage limits. Inputs are sent to the AI services needed to answer your request.

For public tools, we store submitted text, uploaded files where supported, generated results, errors, processing time and IP address for support, debugging and abuse prevention. Do not submit secrets or personal data you are not authorized to share.

We select AI services based on your plan, the task and availability. The services handling a request may change, including when a fallback is needed. Paid usage is also subject to operational logging.

AI providers record usage metadata such as token counts and response times. Their retention and abuse-monitoring practices vary; some may retain inputs and outputs for security or service operation.

Usage tracking is not the same as model training. We do not use your personal data to train public AI models. We select AI services and request settings that restrict use of your inputs for model training; this does not guarantee zero retention for security or service operation.

For details about the AI services currently processing your data and their retention practices, contact us.

Marketing analytics

On public marketing and recruiter sign-up pages we measure visits with Google Analytics. In the EEA, the UK and Switzerland it runs without analytics cookies until you choose Allow; elsewhere it sets them from your first visit, and choosing “No thanks” turns them off. Advertising features are off. With your Allow we also send anonymous page and conversion events to PostHog (US). We do not use session replay, and we never send candidate data, form values, transcripts, or recordings to either. Google Analytics never runs on sign-in, interview, meeting or app pages.

Connected AI apps (Claude, ChatGPT and other MCP clients)

A recruiter can connect Gaugely to an AI assistant such as Claude or ChatGPT, either by signing in and approving it on our consent screen or with a workspace API key. An app connected by sign-in acts as that recruiter with the permission they chose: read only, or read and make changes. An API key acts for the whole workspace with full access.

What we receive: only the requests the app sends, such as a job description to turn into an interview or the names and email addresses of candidates to invite. We store these exactly as if they had been entered in Gaugely. What we send: the results of the tools the recruiter's assistant calls, which can include job details, candidate names, email addresses and LinkedIn links, scores, CV match results, scorecard evidence including interview quotes and integrity flags, and contacts from the opted-in talent pool. We use this only to carry out the request. What we store about the connection: which app is connected, the permissions granted and the tokens that keep it signed in. We do not receive or store the conversation. The assistant's provider is not our subprocessor and handles your chats under your own agreement with them. Controls and retention: recruiters can disconnect any app at any time in Settings, API & integrations (or revoke an API key there), which ends its access immediately and deletes the stored permission. Revoked token records are kept as a security record until the account is deleted; connection records are otherwise kept until you disconnect or the account is deleted.

Retention

If a candidate does not opt into the talent pool, their interview data is deleted within 12 months. If they opt in, their talent-pool profile — name, contact details and score, but never the company that interviewed them — is kept while they remain opted in, and they can withdraw at any time. Anyone can request deletion of their data by emailing us.

Who we share it with (subprocessors)

  • LiveKit — Real-time audio/video transport for the live interview.
  • AI service providers — Language generation, interview scoring, speech recognition and speech synthesis. Services are selected according to the task, plan and availability.
  • Neon — Managed Postgres database (interview records, transcripts, scores).
  • Cloudflare R2 — Encrypted storage for interview recordings.
  • Resend — Transactional email (invites, results, feedback).
  • Polar — Merchant of Record for billing and tax (recruiters only).
  • Didit — Optional candidate identity verification (only when a job enables it).
  • PostHog (US) — Consent-based, anonymous marketing page and conversion measurement on public recruiter-acquisition pages.
  • Google Analytics — Visit measurement on public marketing pages; analytics cookies only with consent in the EEA, UK and Switzerland.

Your rights

You can request access to, correction of, or deletion of your data, withdraw consent, or ask for a human alternative — email support@gaugely.io.

This policy may be updated; material changes will be reflected by the date above.