Your data works for you here. Nobody else.
Callback (hirecallback.com) is a job platform operated by Callback Hiring LLC, a New York limited liability company (“Callback,” “we”). This policy covers everyone who uses it — candidates, employers, and visitors. The short version, which the long version never contradicts: we never sell your data, employers see your identity only when they advance you to interviews, and we collect nothing beyond what this policy lists.
What we collect, why, and for how long
| Category | What | Why | Kept |
|---|---|---|---|
| Identifiers | Name, email address, city; IP address when you apply (candidates) or when your organization is created (employers) | Your account; contacting you; fraud, spam and abuse prevention | While your account exists. Application IP records: up to 12 months. Fraud-prevention records: see 'Your privacy choices.' |
| Professional and employment information | Work history and the résumé text you paste to build it, LinkedIn URL, cover letter and your answer to an employer's question, with statistics about how each was written in our editor (active time, typing and paste counts; employers see a one-line summary — how long it took and, for the letter, in how many sittings — never the raw counts), your answers to our questions, licenses, work-authorization and availability answers, up to three reference contacts | Your profile; the blind application employers read; eligibility checks you see on every role; duplicate-account and fraud detection; and, only if you switch reference sharing on, handing your reference contacts to an employer after they advance you | While your account exists, or until you delete it from your profile. An application you already sent keeps its as-submitted copy with the employer's record of that application, the same way a completed hiring record persists (see the Terms) |
| Education information | Credentials, fields of study, institutions, years, GPA if you choose to add it | Your profile (school names and years are withheld from employers until you are advanced) | While your account exists, or until you delete it |
| Identity verification outcome | Verified / not-verified result, an adult-age confirmation, and a session reference — never ID images or biometric data (see below) | Keeping every profile a real, verified person — the platform's core promise | While your account exists |
| Two-step sign-in (if you turn it on) | The authenticator factor Supabase Auth holds, and the SHA-256 hashes of your one-time recovery codes — never the codes themselves | Signing you in with a second step; getting back in if you lose the device | While two-step sign-in is on; a used recovery code's hash for up to 90 days |
| Commercial information (employers) | Organization, plan, payment records. Card details go to Stripe; we never receive full card numbers | Billing, refunds, the shortlist guarantee | at least 7 years (tax and accounting requirements) |
| Platform activity | Applications, decisions and their timestamps, emails we sent you, security logs; feedback you send us through the feedback button | Making the product work: answer deadlines, credits, the public employer record; security | Application records while your account exists; security logs up to 24 months |
| Interview feedback (recorded about candidates) | After an employer interviews you, their team records structured feedback on the platform: ratings against the role's own interview questions, a verdict, and written notes | The employer's structured hiring decision — visible only to that role's hiring team, never public, never shared with other employers | With the application's record, same as the application itself |
Before you have an account: joining the waitlist stores what you give us — an email address, a city, whether you’re coming as a candidate or an employer, optionally a company, a note and your line of work — used only to open your door when we launch, and deleted on request. We send one email to confirm the address is yours; invites go only to confirmed addresses.
Blind screening
Employers read applications blind: your letter and your work first — no name, no photo, no school names, no graduation years, no contact details. Those unlock only when an employer advances you to interviews, and you can see on every application exactly what was shared and when.
Two automated steps
Two steps run without a person, and both are deterministic. At apply time, the eligibility gate checks the answers you gave (work authorization, on-site days, licenses, education, years) against the must-haves the employer wrote for the role; you see the result on every role before you apply. At window close, when a role draws more applications than an employer can answer (more waiting than the role’s pool size — 25, unless a larger pool is shown on the role), the platform closes the field and delivers the ones that best match the criteria the employer stated when posting, ties broken at random; every displaced application is returned with its credit. That is all the automated screening on Callback — no AI scores, profiles, or ranks candidates.
Identity verification
Verification is performed by our vendor, Didit, in its own flow under its own privacy notice. During verification Didit processes your ID document and a selfie. Callback never receives, collects, or stores ID images, selfies, or biometric identifiers — we keep only the outcome (verified or not), an adult-age confirmation, and a session reference. Didit retains verification session data for a limited window on our instruction, then deletes it. If automated verification fails you, a human review path is available — email us.
Your reference
Your profile includes at least one professional reference and may include up to three — people you choose. By providing their contact details you confirm they know and agree. We use those details for two purposes only: confirming the facts of your work history (dates and working relationship — never opinions about you), and detecting duplicate or fraudulent accounts. Reference contacts are never sold and never marketed to.
Separately, and only if you switch it on, we pass your reference contacts to an employer who has already advanced you to an interview. It is off unless you turn it on, an employer can never see them while they are still deciding about you, and you can turn it back off at any time. What they receive is the contact details you entered — never an assessment of you from us. A reference who wants their details removed can email us directly.
If an employer hires you
Your name stays on that employer’s own private hiring record, alongside the role and the date — visible only to the teammates who can already see candidate identities, never to other employers and never publicly. This is the ordinary employment record any employer keeps about someone they hired, and recordkeeping law is why it survives a deletion request when a rejected applicant’s does not: if you close your account we remove the name, and the role and dates remain. Candidates who were not hired are never named on that record.
Who your data goes to
We do not sell personal information, and we do not share it for advertising. There are no ads here. Your data moves in exactly three directions: to the employer whose role you applied to — meaning the people on their hiring team who hold screening access, not the whole company, and blind until you are advanced; to the service providers who run our infrastructure under data-protection agreements — Supabase (database), Vercel (hosting), Stripe (payments), Resend (email), Didit (verification), Anthropic (turning the résumé text you paste into profile fields you confirm, and drafting employers’ interview guides — under a data-protection agreement, never used to train models), Cloudflare (DNS, email routing, and the Turnstile bot check on our signup, contact and sign-in forms — it runs in your browser under Cloudflare’s own privacy notice); and to authorities if the law genuinely requires it, in which case we limit the response to what is legally compelled.
Your privacy choices
These apply to everyone, not just where a statute requires them: you can access what we hold about you, correct it (your profile is directly editable), and delete your account and data — email hello@hirecallback.com and we act within 30 days, verifying it’s really you first. Two honest limits. First, facts that are part of an employer’s completed hiring record stay in that record: the law requires employers to keep it, so those facts survive your deletion. Second, where an account was involved in fraud or abuse we may keep the minimum records needed to prevent fraudulent re-registration — IP records, verification status, and the ban itself — in restricted-access form, for at most 24 months after account closure, used for nothing else.
Cookies
We use cookies only to keep you signed in. No advertising cookies, no analytics cookies, no third-party trackers — blocking cookies simply signs you out. (During the private test period there is also one cookie holding the site door password.)
We send transactional email about your own activity — receipts, answers, deadlines. Candidates with complete profiles also get an eligibility alert when a role they clear is posted: it’s on by default, shown as a switch on your roles page, and every alert carries a one-click unsubscribe that works without logging in. Opting out of alerts never suppresses transactional mail about your own applications. No newsletters, no marketing lists, no selling your address.
Security
We maintain a security program with administrative, technical, and physical safeguards reasonable for our size and the data we hold, in line with New York’s SHIELD Act: encryption in transit and at rest, row-level access controls on every table, least-privilege service keys, multi-factor authentication on the vendor consoles we administer the platform from and two-step sign-in (an authenticator app, with one-time recovery codes) available on every Callback account, audit logging, and vendors selected for their own certifications. If a breach affects your unsecured private information, we will notify you promptly and as the law requires.
Age
Callback is for people 18 and over; identity verification checks this, and an under-18 result blocks applying. We do not knowingly collect data from anyone under 18.
Changes and contact
If this policy changes materially, account holders get an email at least 14 days before the change takes effect — never silent amendments. Questions, requests, complaints: hello@hirecallback.com, or by mail: Callback Hiring LLC, 418 Broadway, Ste N, Albany, NY 12207.
See also the Terms of Service, the Posting Standards, and Trust & security.