Security and Candidate Data

Where Uploaded CVs Are Stored

Uploaded CVs are stored on encrypted cloud infrastructure dedicated to CV Shortlister. They are kept separate from publicly accessible systems and are only ever retrieved through authenticated, permissioned requests from the account that uploaded them.

How Long Data Is Retained

CVs and the information extracted from them are retained only for as long as needed to provide the shortlisting service for the job they were submitted against, or for as long as your account remains active. We do not keep candidate data indefinitely once it is no longer needed to deliver results.

Whether CVs Are Used to Train AI

Candidate CVs are used only to generate shortlisting results for the account that uploaded them. They are not used to train, fine-tune, or otherwise improve any underlying AI model, and are never shared with third parties for model training purposes.

How Users Can Delete Uploaded Data

Account owners can remove uploaded CVs from within the job they were submitted to, or request full deletion of their account's candidate data by contacting our support team. Deletion requests are actioned promptly once the requester's identity and account ownership are confirmed.

Who Can Access Candidate Information

Candidate information is only accessible to the recruiter or company account that uploaded it. Search O Pal personnel do not access candidate data except where necessary to provide technical support, investigate a security issue, or comply with a legal obligation, and access in those cases is logged and restricted to authorized staff.

Encryption and Account Security

Data is encrypted in transit between your browser and our servers, and CVs are stored on encrypted infrastructure at rest. Account access is protected by authenticated sign-in, and we recommend using a unique, strong password for your CV Shortlister account.

Supported File Types and Size Limits