Your data works for you here. Nobody else.

Callback (hirecallback.com) is a job platform operated by Callback Hiring LLC, a New York limited liability company (“Callback,” “we”). This policy covers everyone who uses it — candidates, employers, and visitors. The short version, which the long version never contradicts: we never sell your data, employers see your identity only when they advance you to interviews, and we collect nothing beyond what this policy lists.

What we collect, why, and for how long

Before you have an account: joining the waitlist stores what you give us — an email address, a city, whether you’re coming as a candidate or an employer, optionally a company, a note and your line of work — used only to open your door when we launch, and deleted on request. We send one email to confirm the address is yours; invites go only to confirmed addresses.

Blind screening

Employers read applications blind: your letter and your work first — no name, no photo, no school names, no graduation years, no contact details. Those unlock only when an employer advances you to interviews, and you can see on every application exactly what was shared and when.

Two automated steps

Two steps run without a person, and both are deterministic. At apply time, the eligibility gate checks the answers you gave (work authorization, on-site days, licenses, education, years) against the must-haves the employer wrote for the role; you see the result on every role before you apply. At window close, when a role draws more applications than an employer can answer (more waiting than the role’s pool size — 25, unless a larger pool is shown on the role), the platform closes the field and delivers the ones that best match the criteria the employer stated when posting, ties broken on a value that carries nothing about the candidate; every displaced application is returned with its credit. That is all the automated screening on Callback — no AI scores, profiles, or ranks candidates.

Identity verification

Verification is performed by our vendor, Didit, in its own flow under its own privacy notice, and only after you give a stand-alone consent at hirecallback.com/home/verify that names what is collected and for how long. During verification Didit processes your ID document and a selfie. Callback never receives, collects, or stores ID images, selfies, or biometric identifiers — we keep only the outcome (verified or not), an adult-age confirmation, and a session reference. Didit’s result message may include the date of birth it read from the document; Callback uses it once to compute “over 18” and does not store it. Didit retains verification session data for up to 30 days on our instruction, then deletes it. If the automated check fails you, or you have no document it can read, ask for a review at hirecallback.com/home/verify: a person at Callback reads it, can ask the vendor to look at your check by hand, and answers you in writing by email within two business days. Nobody asks you for a call, a picture or a document. Nobody at Callback ever sees a document, on a call or otherwise; we keep the outcome and the method, never an image or a document number.

Your references

Your profile may include up to three professional references — people you choose, and entirely optional. By providing their contact details you confirm they know and agree. Callback does not contact them: nobody here calls, emails, or checks a reference, and no employer sees a mark from us about them. We use those details for two purposes only: detecting duplicate or fraudulent accounts, and, if you switch it on, handing them to an employer who has already advanced you to an interview. Reference contacts are never sold and never marketed to.

Sharing is off unless you turn it on. With sharing on, an employer reading your application blind sees one line — how many references you listed — and nothing else about them; the names and contact details follow only after that employer advances you. An employer can never see who your references are while they are still deciding about you, and you can turn it back off at any time. What they receive is the contact details exactly as you entered them — never an assessment of you from us. Anything an employer then does with those details is that employer’s own hiring process, not ours.

If you were listed as a reference by someone applying through Callback: we hold your name, and the email address or phone number they entered, on their say-so. We use them for two things only: to detect duplicate or fraudulent accounts (the same reference on many unrelated profiles is a signal a person looks at) and, if the candidate turned sharing on, to pass them to an employer who has already advanced that candidate to an interview. Nobody at Callback contacts you, and we never market to you. To have your details removed, email hello@hirecallback.com from the address that was listed, or name it; we confirm by replying to that address and remove the entry within ten business days, and the candidate sees the reference slot as empty.

If an employer hires you

Your name stays on that employer’s own private hiring record, alongside the role and the date — visible only to the teammates who can already see candidate identities, never to other employers and never publicly. This is the ordinary employment record any employer keeps about someone they hired. It survives a deletion request because the employer needs it, because the placement fee rests on it, and because our own accounting records are kept for seven years: if you close your account we remove your name and contact details, and the role, the dates and the application as that employer read it (your letter and your answers, as you submitted them) remain in that employer’s record. For every application that did notlead to a hire, closing your account removes everything you wrote and everything that names you; what stays with the employer is a structured row per application (the dates, the state, the decision and its stated reason) and, where their team interviewed you, the feedback they recorded at the time, with your name and everything you wrote removed. That is the record an employer must keep about who it considered. Candidates who were not hired are never named on that record.

Who your data goes to

We do not sell personal information, and we do not share it for advertising. There are no ads here. Your data moves in exactly three directions: to the employer whose role you applied to — meaning the people on their hiring team who hold screening access, not the whole company, and blind until you are advanced; to the service providers listed below, who run our infrastructure under data-protection agreements; and to authorities if the law genuinely requires it, in which case we limit the response to what is legally compelled.

Our service providers, and what each one holds:

• Supabase (United States): the database and sign-in; everything you give us.
• Vercel (United States): hosting; the pages you load and the server that builds them.
• Stripe (United States): employer payments.
• Resend (United States): the emails we send you, addresses and delivery results.
• Didit (European Union): the identity check, in its own flow under its own privacy notice.
• Anthropic (United States): turns the résumé text you paste into profile fields you confirm, and drafts employers’ interview guides, under a data-protection agreement and never used to train models.
• Cloudflare (United States): DNS and the bot check on our public forms, which runs in your browser under Cloudflare’s own privacy notice.
• Microsoft 365 (United States): the company mailbox, where the email you send to hello@hirecallback.com and our own operations alerts are received and kept.
• Sentry (United States): server-side error reports, with no cookies, IP addresses, request bodies or query strings attached.
• Better Stack (European Union): uptime checks of our public pages; no personal data.

We update this list when a provider changes; the date at the top of this page moves with it.

Your privacy choices

These apply to everyone, not just where a statute requires them: you can access what we hold about you, correct it (your profile is directly editable), and delete your account and data — email hello@hirecallback.com and we act within 30 days, verifying it’s really you first. Two honest limits. First, facts that are part of an employer’s completed hiring record stay in that record: the law requires employers to keep it, so those facts survive your deletion. Second, where an account was involved in fraud or abuse we may keep the minimum records needed to prevent fraudulent re-registration — IP records for twelve months from when they were recorded, and the closed account’s block on signing up again, which stays — in restricted-access form, used for nothing else.

Cookies

We use cookies only to keep you signed in. No advertising cookies, no analytics cookies, no third-party trackers — blocking cookies simply signs you out.

Email

We send transactional email about your own activity — receipts, answers, deadlines. Candidates with complete profiles also get eligibility alerts about new roles they clear, gathered into at most two emails a day: it’s on by default, shown as a switch on your roles page, and every alert carries a one-click unsubscribe that works without logging in. Opting out of alerts never suppresses transactional mail about your own applications. No newsletters, no marketing lists, no selling your address.

Security

We maintain a security program with administrative, technical, and physical safeguards reasonable for our size and the data we hold, in line with New York’s SHIELD Act: encryption in transit and at rest, row-level access controls on every table, least-privilege service keys, multi-factor authentication on the vendor consoles we administer the platform from and two-step sign-in (an authenticator app, with one-time recovery codes) available on every Callback account, audit logging, and vendors selected for their own certifications. If a breach affects your unsecured private information, we will notify you promptly and as the law requires.

Age

Callback is for people 18 and over; identity verification includes an age check, and a result showing under 18 blocks applying. We do not knowingly collect data from anyone under 18.

Changes and contact

If this policy changes materially, account holders get an email at least 14 days before the change takes effect — never silent amendments. Questions, requests, complaints: hello@hirecallback.com, or by mail: Callback Hiring LLC, 418 Broadway, Ste N, Albany, NY 12207.

See also the Terms of Service, the Posting Standards, and Trust & security.