Privacy Policy

1. Who we are and our role

Jarwel LLC ("Tanyis", "we") provides employers and recruiting agencies ("Customers") with software to publish jobs, receive applications, manage candidates and schedule interviews.

• For Customer account and user (recruiter) data, and for billing data, we act as the data controller.
• For data about candidates who apply to a Customer's jobs, that Customer is the controller; we act as a processor and only process it on the Customer's instructions to provide the service.

If you are a candidate and want to exercise your rights regarding an application, contact the company you applied to first. You can also write to us and we will forward your request.

2. Data we process

• User accounts: name, email, preferred language, organization and role.
• Candidate data submitted through career sites or by Customers: name, email, phone, LinkedIn profile, résumé and other files, form answers, hiring stage, the Customer team's notes and evaluations, and the consent given when applying.
• Interviews: date, time, time zone, participants, video links and instructions.
• Billing: organization details, tax address and subscription status. Card details are processed directly by Stripe; we never see or store them.
• Technical data: access logs, IP address (stored only as an irreversible hash for abuse prevention) and strictly necessary cookies.

3. How we use it

• To provide the service: publishing jobs, receiving and managing applications, scheduling interviews and sending email notifications.
• To manage accounts, subscriptions, trials and plan limits.
• To protect the service: authentication, abuse and spam prevention, security and incident response.
• To meet legal, accounting and tax obligations.

We do not sell personal data, we do not use it for advertising, and we do not train artificial intelligence models on Customer or candidate data.

4. Google and Zoom integrations

A user may choose to connect their Google or Zoom account to create video calls from Tanyis. By connecting it, they authorize us to:

• Google: see their name and email (to identify the connected account) and create, update and cancel events with a Google Meet link in their Google Calendar, only for interviews they schedule in Tanyis (calendar.events scope). We do not read their other events, emails or files.
• Zoom: see their basic profile and create, read and cancel meetings for interviews they schedule in Tanyis.

Access tokens are stored encrypted and used only from our servers for those actions. Users can disconnect an integration at any time under Integrations in Tanyis, or revoke access from their Google or Zoom account settings.

Tanyis's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. In particular, we do not use that information for advertising, we do not sell it, we do not allow humans to read it except with the user's consent, for security purposes or to comply with the law, and we do not use it to train artificial intelligence models.

5. Who we share data with

We use service providers that process data on our behalf under confidentiality and security commitments:

• Supabase: database, authentication and file storage (United States).
• Vercel: application hosting and execution.
• Resend: email delivery.
• Stripe: payments, invoicing and tax.
• Google and Zoom: only if the user connects those integrations.

A Customer's candidate data is visible only to that Customer's users. We may also disclose data when required by law, or in a merger or acquisition, keeping the protections of this policy.

6. International transfers

Our servers and providers are mainly located in the United States. When you use Tanyis from another country, your data is transferred there with appropriate safeguards and, where applicable, contractual clauses.

7. How long we keep it

• While the Customer's account is active, or until the Customer deletes the data.
• Résumés uploaded for applications that are never completed are deleted automatically after 24 hours.
• When an account is closed, we delete Customer data within 90 days, except what we must keep for legal or tax reasons.

8. Security

We use encryption in transit (HTTPS) and at rest, database-level isolation between organizations, encrypted credential storage, time-limited links for résumé access and role-based access controls. No system is infallible; if an incident affects your data, we will notify you as required by applicable law.

9. Your rights

Depending on your country's law (for example the GDPR, Brazil's LGPD, Mexico's data protection law, Colombia's Law 1581, Argentina's Law 25,326 or US state laws such as the CCPA), you can request access, correction, deletion, objection, restriction or portability of your data, and withdraw your consent. Candidates can also view and withdraw their applications from the candidate portal. We respond within the legal time limits.

10. Cookies

We only use necessary cookies: a session cookie to keep you signed in, a language cookie and a temporary security cookie when connecting integrations. We do not use advertising or third-party tracking cookies.

11. Children

Tanyis is not intended for anyone under 16, and we do not knowingly collect their data.

12. Changes and contact

If we change this policy, we will post the new version here with its date and, for significant changes, notify Customers by email.

For privacy questions or requests: privacy@tanyis.com.