/ privacy

Privacy Policy

This policy explains how Recruna collects, uses, shares and protects personal data when you use recruna.com, our career pages and our applicant tracking system.

Last updated: 8 September 2026.

Who we are

Recruna is an applicant tracking system that helps employers publish roles and manage applications. For candidate data submitted to an employer's careers page, the employer is the data controller and Recruna acts as a data processor on their instructions. For our own website, accounts and marketing, Recruna is the data controller. You can reach us at hello@recruna.com.

Information we collect

Account data: name, email address, password credentials handled by our authentication provider, workspace membership and role.

Candidate data: the details you enter in an application, including name, contact details, address, work history, education, cover letter, answers to screening questions, uploaded CV files and any referral details.

Usage data: pages viewed, device and browser type, approximate location derived from IP address, and analytics events where you have consented to analytics cookies.

Communications: messages you send through our contact form and email correspondence with our team.

How we use your information

To create and operate your account and workspaces.

To publish job adverts and receive, store and route applications to the relevant employer.

To generate optional AI assistance such as CV parsing, application summaries and fit scores, which support but never replace human decisions.

To send service emails such as application confirmations, interview invitations and offer notifications.

To keep the service secure, including scanning uploaded files for malicious content and preventing abuse.

To measure and improve the service, and to respond to your enquiries.

Legal bases

Where UK GDPR and EU GDPR apply we rely on: performance of a contract (running your account and processing your application), legitimate interests (security, service improvement, direct business communication), consent (non-essential cookies and optional marketing) and legal obligation (record keeping, responding to lawful requests). You may withdraw consent at any time.

Automated processing

Recruna may produce an AI generated summary and fit score for an application, and may mark an application as disqualified where an employer has set a screening question with a required answer. These outputs assist recruiters; hiring decisions are made by people, and you can ask the employer to review any outcome.

Sharing your information

We share data with the employer whose role you applied to, and with service providers who host, secure and support the platform, including our cloud hosting and database provider, our email delivery provider and our AI processing provider. We may disclose data where required by law or to protect our rights. We do not sell personal data.

International transfers

Some providers process data outside the UK and EEA. Where that happens we rely on adequacy decisions or standard contractual clauses with appropriate safeguards.

Retention

Account data is kept while your account is active. Application data is retained by the employer for as long as they need it for their recruitment and record keeping, typically up to 24 months after a decision, unless they set a shorter period or you ask for deletion. Contact messages are kept for up to 24 months. Backups are cycled out on a rolling basis.

Your rights

Subject to local law you can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. You can also complain to your local supervisory authority, such as the UK Information Commissioner's Office. Contact us at hello@recruna.com and we will respond within one month. Where the request concerns an application, we may need to forward it to the employer who controls that data.

Security

We use encryption in transit, access controls scoped to your account and workspace, row level database security, and automated scanning of uploaded files. No system is perfectly secure, so please use a strong, unique password.

Cookies

We use essential cookies to run the site and, with your consent, analytics cookies to understand usage. You can change your choices at any time through the cookie preferences link in the footer. See our Cookie Policy for details.

Children

Recruna is not intended for people under 16, and we do not knowingly collect their data.

Changes

We may update this policy. Material changes will be highlighted on this page with a new effective date.

Contact

Questions or requests: hello@recruna.com.