Privacy Policy

Last updated: October 2026

Who we are

BKK Staff provides a hiring assistant that screens job applications for employers. The employer decides why and how applicant data is used for their job. We process applicant data on the employer's behalf to run screening.

What data we collect

  • Employer information: name, email, company name, country, and timezone
  • Candidate information: name, email, phone (optional), country, and CV/resume content
  • Application data: cover notes, CV files, quiz answers, follow-up replies, and application metadata

How we use it

We use candidate data only to screen applicants for the employer's job, to send follow-up questions and decline emails, and to keep the employer's applicant list for their future openings. We do not sell candidate data, and we do not share it with other employers.

Automated screening and human oversight

Applications are checked against job-related criteria set with the employer, such as skills, experience, qualifications, availability, and location. Screening does not use gender, religion, or ethnicity. Software helps with screening, and our team can review results. The employer makes every hiring decision. An applicant can ask for a person to review how their application was handled by emailing us.

Service providers

We use trusted providers for cloud hosting, file storage, and email delivery. They process data only on our instructions and only to run the service.

Data retention

CV files are stored securely and deleted 30 days after job expiry, unless the candidate has opted in to future job notifications. Application records are retained for platform operation and, where the employer chooses, for future openings in their applicant pool.

Applicant and employer rights

  • One-click unsubscribe in every email
  • Ask for a copy of your data
  • Ask us to correct or delete your data
  • Ask for a person to review a screening result
  • Withdraw consent at any time

Data storage

Data is stored on secure cloud infrastructure. CV files are stored in encrypted object storage (S3-compatible).

Contact

For privacy requests, email [email protected].