This Privacy Policy describes how Lekvy Labs, Inc., a Delaware C-Corp ("Lekvy", "we", "us", "our") collects, uses, discloses, and protects personal information when you visit lekvy.com and related websites or applications (collectively, the "Site"), request information, subscribe to updates, or use our products and services that help employers screen and interview candidates using automation and artificial intelligence (together with the Site, the "Services"). By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.

Individuals, applicants, and business customers

This Policy applies to everyone who interacts with Lekvy, but your relationship with us depends on your role:

• Visitors and marketing contacts: If you browse the Site, request a demo, subscribe to updates, or contact us as an individual, we generally act as the controller of your personal information as described in this Policy.
• Organizations that are our customers: If your company (or other organization) contracts with Lekvy, we process account, billing, and authorized-user information to deliver and support the Services. We typically act as controller for that relationship data unless your agreement says otherwise.
• Candidate and employee data you submit: When your organization uses Lekvy to run recruiting workflows, personal information about applicants or employees is usually provided under your organization's instructions. In that situation your organization is typically the controller (or "business" under U.S. state laws) and Lekvy processes that data as a processor or service provider on your organization's behalf, in line with your Customer Agreement and, where applicable, a data processing addendum ("DPA").
• Job applicants: If you apply through an employer that uses Lekvy, that employer is usually responsible for explaining how your application data is used. Contact the employer first for access or deletion requests relating to your application; we help as required by law and our contract with that customer.

Commercial terms, security commitments, and processing instructions for customer accounts are also addressed in our Terms & Conditions (business customers). If you need a DPA, standard contractual clauses, or details about subprocessors for procurement or GDPR compliance, contact us through your account team or our contact page.

Information we collect

Depending on how you interact with us, we may collect:

• Contact and account details: such as name, work email, company name, job title, phone number, and similar identifiers you provide when you create an account, book a demo, use our contact form, or subscribe to marketing.
• Hiring and candidate-related information: when you use our Services on behalf of an organization, we may process information you or your applicants submit in connection with recruiting workflows—for example application materials, interview responses, transcripts or recordings where the product supports them, assessment outputs, and related metadata. The types of data depend on how your organization configures and uses the Services.
• Usage and technical data: such as IP address, device and browser type, general location derived from IP, pages viewed, referring URLs, and timestamps. We use this to operate, secure, and improve the Services.
• Communications: content of messages you send us and records of support or sales conversations.
• Payment information: when you purchase paid plans, payment details are processed by our payment processor (for example Stripe). We do not store full payment card numbers on our servers.

How we use information

We use personal information to:

• Provide, maintain, secure, and improve the Services;
• Create and manage accounts, process transactions, and fulfill contractual obligations with business customers;
• Deliver recruiting-related functionality you or your organization enable, including automated or AI-assisted screening, scoring, summarization, or interview experiences where offered;
• Send service-related notices, respond to inquiries, and provide customer support;
• Send marketing communications where permitted (you can opt out using the unsubscribe link or by contacting us);
• Detect, prevent, and address fraud, abuse, or technical issues, and comply with legal obligations.

Legal bases (EEA, UK, and Switzerland)

Where the GDPR or similar laws apply, we rely on appropriate legal bases such as: performance of a contract; legitimate interests that are not overridden by your rights (for example securing our Services and understanding product usage); consent where required (for example certain cookies or marketing); and compliance with legal obligations.

Automated processing and AI

Parts of the Services may use machine learning or other automated methods to analyze application or interview content and generate scores, summaries, or recommendations. Organizations that use Lekvy are responsible for configuring workflows and for compliance with employment and equal opportunity laws. Where required by law, we work with customers to support meaningful human review and applicant rights. Outputs are assistive tools and should not be the sole basis for employment decisions without appropriate human oversight, consistent with your policies and applicable law.

How we share information

We do not sell your personal information. We may share information with:

• Service providers who assist us with hosting, analytics, email delivery, customer support, security, payments, and similar functions, bound by confidentiality and processing terms;
• Your organization when you use the Services under a business account, consistent with that relationship;
• Professional advisors (such as lawyers or auditors) where necessary;
• Authorities if we believe disclosure is required by law, legal process, or to protect rights, safety, or security.

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice where required.

International transfers

We are based in the United States. If you access the Services from other regions, your information may be processed in the U.S. or other countries where we or our providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

Retention

We retain personal information for as long as needed to provide the Services, fulfill the purposes described in this Policy, meet legal or regulatory requirements, resolve disputes, and enforce our agreements. Retention periods may depend on your organization's settings, the nature of the data, and applicable law.

Security

We implement technical and organizational measures designed to protect personal information against unauthorized access, loss, or alteration. No method of transmission or storage is completely secure; we encourage you to use strong passwords and protect your account credentials.

Cookies and similar technologies

We use cookies and similar technologies as described in our Cookie Policy.

Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information, to data portability, to object to certain processing, and to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority.

If you interact with us as a job applicant through an employer that uses Lekvy, that employer is often the primary controller of your application data. In many cases you should contact the employer first; we will assist as required by law and our agreements with customers.

To exercise rights that apply directly to Lekvy, or to ask questions about this Policy, please use our contact form. We may need to verify your request.

U.S. state privacy notices

Residents of certain U.S. states may have additional rights under local privacy laws (including rights to know, delete, and correct personal information, and to opt out of certain types of processing). We do not sell personal information or use it for targeted cross-context behavioral advertising as those terms are commonly defined in state laws. You may submit requests through our contact page. We will not discriminate against you for exercising privacy rights.

Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can take appropriate steps.

Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised Policy on the Site and update the "Updated" date above. If changes are material, we will provide additional notice as appropriate. Continued use of the Services after the effective date constitutes acceptance of the revised Policy, to the extent permitted by law.