Effective Date: July 22, 2026
ChatSieve provides a software-as-a-service platform that enables recruitment agencies and staffing companies ("Customers", "Agencies", or "you", where you are a business user) to screen job candidates through automated conversations delivered over WhatsApp, alongside a web-based Portal and an API integration mode. This Policy applies to two categories of people whose data we process: (a) Customers and their authorised users (recruiters, agency staff) who register for and operate the Service, and (b) Candidates who interact with the Service via WhatsApp on behalf of, and at the direction of, a Customer. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. Where you are a Customer, you also confirm that you have the necessary rights and legal basis to share Candidate data with us for processing on your behalf, as described in "Candidate Data & Customer Responsibilities" in our Terms of Service.
From Customers, we collect account information (name, work email address, phone number, job title, and a salted password hash), agency or company information (business name, address, and tax or registration details where relevant for billing), billing information processed by our payment processor Paddle (we do not store full card numbers), configuration data (screening templates, question flows, job/role definitions, branding preferences, and team member permissions), and any support requests or correspondence you send us. From Candidates interacting via WhatsApp, we collect the Candidate's WhatsApp phone number and profile display name; message content exchanged during a screening conversation, including responses to screening questions, uploaded documents (e.g. CVs), and any voice notes or media the Candidate chooses to send; delivery, read-status, and timestamp metadata made available to us by the WhatsApp Business Platform; and screening outcomes generated by our systems, including structured summaries, scoring, and flags derived from a Candidate's responses. We also collect usage data (pages visited, features used, session duration, and interaction patterns within the Portal), device and log data (IP address, browser type, operating system, and referring URLs), and cookies and similar technologies as described in "Cookies & Tracking" below.
We use the information we collect to provide, operate, and maintain the Service, including delivering and receiving WhatsApp messages on a Customer's behalf; to generate screening summaries, scores, and shortlists for Customers based on Candidate responses; to process payments and manage subscriptions through Paddle; to provide customer support and respond to inquiries; to monitor, secure, and improve the Service, including diagnosing technical issues and preventing abuse or fraud; to send Customers service-related communications, including billing notices, security alerts, and updates to this Policy or our Terms; and to comply with legal obligations and enforce our Terms of Service. We do not use Candidate WhatsApp data to train third-party foundation models beyond what is strictly necessary to generate the screening summary requested by the Customer for that conversation, and we do not sell Candidate data.
The Service is built on the WhatsApp Business Platform, operated by Meta Platforms, Inc. ("Meta"). When a Candidate messages a Customer's WhatsApp number connected to ChatSieve, that message is transmitted through Meta's infrastructure before reaching our systems. Meta's own privacy policy and WhatsApp Business terms govern Meta's handling of message transmission metadata. ChatSieve acts as a technology provider to the Customer and processes the resulting message content to power the screening flow, generate summaries, and make this information available to the Customer through the Portal or API. Candidates should be aware that standard WhatsApp message notices (such as the "This business uses a secure service from Meta to manage this chat" notice) may appear in their conversation, consistent with Meta's requirements for the WhatsApp Business Platform.
Where the UK or EU General Data Protection Regulation ("GDPR") applies — for example, where a Customer or Candidate is located in the European Economic Area, the United Kingdom, or Switzerland — we rely on performance of a contract (to provide the Service and carry out screening conversations Candidates have been invited to participate in), legitimate interests (to secure and improve the Service, prevent fraud, and communicate with Customers, balanced against the individual's rights), consent (where required, such as for certain cookies or optional communications, which can be withdrawn at any time), and legal obligation (where processing is necessary to comply with applicable law). Where a Customer is based in the EU or UK and directs us to process Candidate personal data on its behalf, the Customer acts as the data controller and ChatSieve acts as a data processor. A separate Data Processing Agreement ("DPA") is available on request and, where executed, forms part of the contract between ChatSieve and that Customer, incorporating the EU Standard Contractual Clauses for any relevant international transfer.
We share a Candidate's responses and generated summaries with the Customer who initiated the screening. We also share information with service providers who process data on our behalf, including hosting/infrastructure providers, Meta (as the WhatsApp Business Platform operator), and Paddle (for payment processing) — each bound by contractual confidentiality and data protection obligations. We may disclose information for legal reasons, if required to comply with a valid legal process, protect our rights, or protect the safety of any person, and in connection with a business transfer such as a merger, acquisition, or sale of assets, subject to standard confidentiality arrangements. We do not sell personal information to third parties for their own marketing purposes.
ChatSieve is based in Lahore, Pakistan, and our infrastructure providers and sub-processors (including Meta and Paddle) may process data in other countries, including the United States and the European Union. Where we transfer personal data originating from the EEA, UK, or Switzerland to a country that has not been deemed to provide an adequate level of protection, we rely on appropriate safeguards, such as Standard Contractual Clauses, to protect that data.
Account data is retained for as long as the Customer's account remains active, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution obligations. Candidate screening conversations and generated summaries are retained for the period configured by the Customer, or, absent a specific configuration, for up to 24 months from the date of the conversation, after which they are deleted or anonymised. Billing records are retained as required by applicable tax and accounting law. Customers may request earlier deletion of specific Candidate records by contacting us or using deletion tools available in the Portal, subject to any legal retention requirements.
Depending on your location, you may have the right to access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; request a portable copy of your data; and withdraw consent where processing is based on consent. Candidates wishing to exercise these rights should generally contact the Agency that invited them to a screening conversation, as that Agency is typically the data controller; alternatively, Candidates and Customers may contact us directly at info@chatsieve.com and we will route the request appropriately or respond directly where we act as controller. If you are located in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.
We use administrative, technical, and physical safeguards designed to protect information against unauthorised access, alteration, disclosure, or destruction, including encryption of data in transit, access controls, and regular review of our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Our website and Portal use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling certain cookies may affect the functionality of the Service.
The Service is intended for use by adults in a professional recruitment context. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected such data, we will take steps to delete it.
We may update this Privacy Policy from time to time. If we make material changes, we will notify Customers by email or through the Portal before the changes take effect. The "Effective Date" at the top of this page indicates when it was last revised.
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at info@chatsieve.com, or by post at ChatSieve, operating from Lahore, Punjab, Pakistan.
KI-gestütztes Kandidaten-Screening über WhatsApp, entwickelt für Personalvermittlungen.