Privacy Policy

This Privacy Policy explains how Trufa ("Trufa", "we", "our", "us") collects, uses, shares andprotects personal information when you use our website and our AI-assisted recruitingplatform (the "Service").
Last updated: October 8, 2026. If you do not agree with thisPolicy, please do not use the Service.

1. Our role

Trufa processes personal information mainly on behalf of our customers, who use theService to manage their own recruiting processes. For candidate and interview data, our customers act as the "data controllers" (or "businesses" under the California ConsumerPrivacy Act), and Trufa acts as their "data processor" (or "service provider"), processing information on their instructions. To learn how a customer uses your information, read the privacy policy of the organization that contacted you or to which you applied.
For information about visitors to our site, prospective customers and account holders, Trufa acts as the data controller.

2. Information we collect

Job candidates. When a customer adds you to a search, invites you to an interview or you take part in one, we may collect:

Your name, email address, phone number, location and links to professional profiles(for example, LinkedIn).
Your resume or CV, job history, education and other information that you or the customer provide.
Recordings of interviews (video and audio), transcripts generated from them, and derived content such as summaries, scores, strengths, risks and suggested follow-up questions.
Limited meeting metadata, such as date, time and participant display names.
Messages and responses you send through the Service.

Customers and account holders. When someone requests a demonstration, registers or communicates with us, we collect name, company name, work email, phone number and information about their use of the Service.

Third-party data. We may receive professional information about candidates from dataproviders that operate on publicly available sources, and from integrations that youauthorize, such as Google Calendar and Google Drive. We use it only to provide thesourcing and scheduling features of the Service.

Automatic data. When you visit our site or use the Service, we collect technicalinformation such as IP address, device and browser type, language settings, pages viewedand log data, and we use cookies (see section 6).

Voice and expression signals. As part of interview analysis, the Service processesinterview audio and video to estimate communication signals such as clarity, languagefluency and emotional tone. These signals are contextual indicators. They do not decideanything on their own.

Sensitive data. We do not ask for sensitive data, such as health information or politicalopinions. If a customer adds it, the customer is responsible for having the individual'sconsent, and we protect it like all other data.

3. How we use information

We use personal information to:

Source candidates: help customers identify and contact potential candidates.
Generate interview rubrics: create questions and evaluation criteria from a job description.
Run and record interviews: host interviews in the Service, or process interview videos that customers upload.
Analyze and report: transcribe, evaluate and summarize interviews, compare what a candidate said with their CV and public professional profiles, and produce scores, strengths, risks and follow-up questions.
Compare candidates and regenerate reports.
Schedule interviews by syncing with calendars, when the user enables it.
Provide support and demonstrations.
Improve and secure the Service, including during the beta.
Comply with legal obligations.

We do not use candidate personal information for marketing, and we do not sell it. We may use aggregated or de-identified information to understand and improve the Service.

4. Recording and consent

Interviews in the Service are recorded. The user who conducts an interview must tell the candidate, before it starts, that the session is recorded and analyzed with artificial intelligence, and must obtain the candidate's consent. The Service shows a recording indicator during the session.

Interview invitations and session notices may be sent from meet@gotrufa.com.

Candidates can decline or withdraw consent by telling the interviewer or by writing to usat the address in section 15. Withdrawal does not affect processing that already took place. Access to the beta Service requires accepting a confidentiality agreement and these terms.

5. Artificial intelligence and automated decisions

Interviews in the Service are recorded. The user who conducts an interview must tell the candidate, before it starts, that the session is recorded and analyzed with artificial intelligence, and must obtain the candidate's consent. The Service shows a recording indicator during the session.
Interview invitations and session notices may be sent from meet@gotrufa.com.
Candidates can decline or withdraw consent by telling the interviewer or by writing to usat the address in section 15. Withdrawal does not affect processing that already took place. Access to the beta Service requires accepting a confidentiality agreement and these terms.

6. Cookies

Cookies are small files that a site places on your device so that it can recognize your browser and remember information.

Public website: hosted on Wix, it may use cookies for its operation and for analytics.

Platform: essential session cookies. We do not use advertising cookies or profile candidates for marketing.
You can accept, block or delete cookies in your browser settings. Disabling some of the may affect how the Service works.

7. How we share information

We share information only as needed to provide the Service. We do not sell personal information, and we do not share it with third parties for their own direct marketing.
We work with service providers in these categories:

Calendar and files

Cloud infrastructure

Video

AI models

Voice and expression analysis

Professional data

Purpose

Hosting the platform and databases

Interview rooms and recording

Transcription, evaluation, reports and rubrics

Estimating communication signals

Candidate sourcing

Interview scheduling and job description upload(Google)

We may also share information as follows:

Service providers: they may use the information only to provide services to us, underagreements that regulate that use.
Professional advisors, such as lawyers and auditors, where necessary for the servicesthey provide to us.
Legal and safety: to comply with the law or legal process, and to protect the rights,security and safety of Trufa, our users or others.
Business transfers: in connection with a merger, acquisition or sale of assets.
Consent: for any other purpose that we disclose to you and for which you consent.
Integrations you enable: permissions you grant to a third-party integration give thatthird party access to your data, and its own privacy practices apply.

8. International data transfers

Trufa serves customers in different countries, and our providers may process information outside your country of residence, for example in the United States. When we transfer personal information internationally, we use contractual and technical safe guardsintended to give it an adequate level of protection.

9. Retention

We keep personal information only as long as needed for the purposes described above,or as the law requires.

Interview videos: kept for 90 days, then deleted automatically.
Other process data, such as transcripts, reports and resumes: kept only as long asneeded for the purposes above or as the customer instructs, and deleted on request.
Account data: kept while the account is active and for a reasonable period after itcloses.
Google integrations: you can revoke access at any time from your Google Account permissions, after which we no longer access that data.

Deletion requests are processed and logged.

10. Security

We use technical and organizational measures designed to protect personal information against accidental loss and against unauthorized access, use, alteration and disclosure. No system is completely secure, and keeping your own credentials secure is also your responsibility.

If a privacy incident occurs, we assess it and notify affected customers, individuals or authorities as required by law.

11. Your rights and choices

Depending on where you live, you may have the right to access, correct, update or delete your personal information, to object to or restrict certain processing, to withdraw your consent, and to receive your data in a portable format.

Candidates. Because our customers are the controllers of candidate data, the fastest way to make a request is to contact the organization that contacted you or to which you applied. You can also write to us at the address in section 15, and we will forward the request to the right customer or handle it ourselves where we are the controller. We may need to verify your identity.

Residents of the EU, UK and Switzerland. You have the rights described in the GDPR and the Swiss FADP, including access, rectification, erasure, restriction, objection, withdrawal of consent and data portability, and the right to lodge a complaint with your local data protection authority.

California residents. Under the CCPA you have the right to know, delete and correct the personal information we hold about you, and we will not discriminate against you for exercising these rights.

Residents of Argentina. Under Law 25.326 you may access your personal data free of charge at intervals of not less than six months, unless you show a legitimate interest(article 14, subsection 3), and you may request its rectification, updating or deletion. TheAgency for Access to Public Information (AAIP), the supervisory authority under Law25.326, handles complaints about non-compliance with data protection rules.

12. Google API Services User Data Policy

Trufa's use and transfer to any other app of information received from Google APIs willad here to the Google API Services User Data Policy, including the Limited User equirements.

13. Beta program and confidentiality

Trufa is in beta. People who access it take part to evaluate the tool and give professional feedback, and they sign a separate confidentiality agreement, which prevails over this summary. Its main points:

Confidential information: features, screens and workflows; screening, scoring andrubric methodology; pricing, costs and data providers; all material shared during orafter a session; and the existence of the tool itself until Trufa makes it public.

Participant obligations: do not disclose that information to third parties without written authorization; do not take screenshots, recordings or photos without authorization; do not copy it or use it for your own or others' benefit, including building similar products; and use it only to give feedback.
Exceptions: information that is public through no fault of the participant, that the participant already lawfully knew, or that must be disclosed by law or court order, with prior notice to Trufa where possible.
Intellectual property: all rights in the tool, its design, features and brand belong exclusively to Trufa.
Term: 2 years from signing.
Governing law: the laws of the Argentine Republic, with the ordinary courts of the Cityof Buenos Aires.

Questions about the confidentiality agreement: legal@gotrufa.com.

14. Changes to this policy

We review this Policy at least once a year. If we make changes, we will post them on this page and update the "Last updated" date. For significant changes, we will give reasonable advance notice by email or in the Service. Continued use of the Service means you accept the current version. We keep previous versions.

15. Contact us

For questions about this Policy or to exercise your privacy rights, write to privacy@gotrufa.com.

Legal notices and the beta confidentiality agreement: legal@gotrufa.com.

General questions about Trufa: contact@gotrufa.com.