Privacy Policy

GoSkilling Ltd. is the data controller for the personal data described in this policy. We are an AI-powered hiring platform that provides candidate screening and shortlisting services to companies.

At this stage, GoSkilling collects a small and specific set of personal data. We do not collect anything beyond what is listed here.

We use personal data only for the purposes stated at the point of collection. Specifically:

• ✓Waitlist emails are used to send early-access invitations and product updates. We will not add you to any other mailing list without your explicit consent.
• ✓Candidate data submitted as part of a screening engagement is used to generate a scored shortlist for the hiring company. It is not used for any other purpose.
• ✓Hiring company contact details are used to deliver the engagement output and handle any follow-up queries.
• ✓We do not sell, rent, or share personal data with third parties for marketing purposes — ever.
• ✓We do not use candidate data to train AI models without explicit written consent from both the hiring company and, where required, the candidate.

GoSkilling uses large language models (specifically Anthropic's Claude API) to analyse candidate data against a job-specific rubric and generate screening scores and rationale.

• ✓AI-generated scores are clearly labelled as such in every shortlist.
• ✓Each score includes a human-readable rationale that can be reviewed and challenged.
• ✓The hiring company retains full decision-making authority.
• ✓Candidate data sent to the Claude API is processed under Anthropic's data processing terms. Data is not used by Anthropic to train models by default.

At Week 1, we share personal data with a minimal set of processors, all under appropriate data processing agreements:

We do not share data with any other third parties. As the product scales (e.g. adding cloud storage, analytics, or ATS integrations), this section will be updated.

Under GDPR and UK GDPR, you have the following rights regarding your personal data. We take these seriously and will respond to all requests within one calendar month.

• ✓Right of access — You can ask us what personal data we hold about you and receive a copy.
• ✓Right to rectification — You can ask us to correct inaccurate data we hold about you.
• ✓Right to erasure — You can ask us to delete your personal data where we have no legal obligation to retain it.
• ✓Right to restriction — You can ask us to pause processing your data while a dispute is resolved.
• ✓Right to data portability — You can ask for your data in a machine-readable format.
• ✓Right to object — You can object to processing based on legitimate interest, including any direct marketing.
• ✓Right not to be subject to automated decisions — As described above, our AI output is always reviewed by a human before any decision is made.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with your supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk). In the EU, contact the supervisory authority in your member state.

Anthropic, Inc. is a US-based company. When candidate data is sent to the Claude API for processing, it may be transferred to servers in the United States.

This transfer is covered by Anthropic's standard contractual clauses and data processing agreement, which provide appropriate safeguards under GDPR Article 46 and UK GDPR.

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. At this stage this includes:

• ✓Candidate data is shared with GoSkilling via encrypted email or secure file transfer only.
• ✓Shortlist outputs are delivered via encrypted channels.
• ✓Access to any personal data is restricted to GoSkilling founding team members who need it to perform the service.
• ✓No personal data is stored in unsecured spreadsheets or shared drives.

As the platform scales to include a database and candidate portal, we will publish a more detailed security posture here.

We will update this policy as GoSkilling grows and as our data practices change. When we make material changes, we will notify affected individuals by email where we hold a contact address.

The version number and last-updated date at the top of this page reflect the current state of the policy.