Candidate AI & Privacy Notice
Effective: May 1, 2026
This notice explains, in plain language, how RelyOnAI LLP uses AI in your hiring journey, what data we hold about you, how long we keep it, and what you can ask us to do. It is a summary written for you — the full detail is in the Privacy Policy and the Terms of Service, which govern if the two ever differ.
1. Who holds your data
RelyOnAI LLP operates the IQMela platform. Two organisations hold data about you and they have different roles:
- The organisation you applied to decides who to hire. Your application belongs to them. They are the data controller for their hiring decisions.
- RelyOnAI LLP runs the software they use. We process your data on their instructions, and on our own account for the candidate profile you keep with us.
If you want your application withdrawn from a specific company, ask them. If you want your IQMela account and everything in it deleted, ask us — see §6.
2. How AI is used in your evaluation
We use AI to help screen applications, to conduct AI interviews, and to summarise and score interview responses against the role's requirements.
AI never makes the final hiring decision on its own. A human reviewer sees the AI's output and makes the call, and can override it. If no AI provider is able to score your interview, it is sent for human review rather than given an invented score.
Where the law requires a bias audit — for example New York City's Local Law 144 for automated employment decision tools — the hiring organisation can generate that audit from the platform. Impact ratios can only be computed where an organisation has enabled voluntary demographic self-identification; where it has not, the audit reports that gap rather than a number.
We do not claim our models are free of bias. We claim that a person decides, that you can ask for that person to look again, and that the tooling to measure disparity exists and is used where an organisation turns it on.
3. What we collect during an interview
If you take an interview on the platform, we collect:
- Video and audio of the whole session, including the questions you are asked. Recordings are stored by Cloudflare R2 in the USA. The hiring team can watch them.
- A transcript, produced by your browser's built-in speech recognition — which means your audio is also sent to your browser vendor (Google for Chrome, Microsoft for Edge).
- Head direction, estimated from facial landmarks computed inside your browser. Those frames are never uploaded. This measures head position, not eye direction.
- One still image per question, sent to Google (Gemini), to check whether you are looking at your screen and whether another person or device is visible.
- The room scan, if you complete the optional environment check — stored and analysed the same way.
- Browser signals: tab switches, window focus and fullscreen changes, paste attempts and clipboard activity, the identifiers of installed browser extensions, and the names of your audio devices.
We cannot see anything outside the interview tab: not your files, not your other applications, not your other tabs' contents. We cannot detect your device type or whether a second monitor is attached, though we ask you to use a single screen.
You are shown this list again, on screen, before any interview begins, and nothing is recorded until you accept it.
4. Why we are allowed to process it
| What | Basis |
|---|---|
| Running your application | The hiring organisation's legitimate interest in recruiting, and your submission of the application |
| Recording and analysing an interview | Your explicit consent, asked for immediately before the session |
| Keeping your candidate profile | Your account with us |
| Meeting legal record-keeping duties | Legal obligation |
Consent to an interview recording can be refused. Refusing means that interview cannot go ahead in this format; it does not delete your application.
5. How long we keep it
| Data | Kept for |
|---|---|
| Interview recordings | 90 days, then deleted |
| Transcripts and interview reports | 12 months |
| Uploaded resumes from unsuccessful applications | Purged on a schedule |
| Abandoned part-finished applications | Purged on a schedule |
| Standard applications | 24 months from submission |
| Talent Network membership | Until you ask us to delete it or close your account |
| Consent records | 7 years, so we can always show what you agreed to |
Once a hiring organisation promotes you into their own pipeline, their retention policy applies to their copy of your data as well as ours.
6. What you can ask for
- Access — a copy of the data we hold about you.
- Correction — update your profile at any time, or ask us to correct anything else.
- Erasure — deletion of your personal data, subject to records we are legally required to keep.
- Human review — ask that a person review any AI-assisted decision about you.
- Withdrawal of consent — for interview recording and analysis, at any time, without affecting what was lawful before you withdrew it.
To exercise any of these, email privacy@iqmela.com from the address on your account. We respond within 30 days, as GDPR Article 12(3) requires, and we apply that same 30-day promise to everyone regardless of where they live.
7. Who else sees your data
| Who | What for |
|---|---|
| The hiring organisation you applied to | Your application, interview recording, transcript and scores |
| Google (Gemini) | AI scoring, question generation, attention and environment analysis |
| Cloudflare R2 | Storage of recordings and uploaded documents |
| Your browser vendor | Speech recognition, if your browser performs it |
| OpenAI, DeepSeek | Scoring, only as a fallback when Gemini is unavailable |
The complete, current list — every sub-processor, what it receives and where it runs — is in the Privacy Policy. We do not sell your data, and we do not use it to train anyone's models.
8. Security
Documents are encrypted in storage, and access is limited to the hiring team for the role you applied to. Recordings cannot be downloaded from the platform; they are played back through it.
9. Contact
Questions about this notice, or about anything above: privacy@iqmela.com.
This notice summarises our practices for candidates. It does not replace the Privacy Policy or the Terms of Service.