Back to home

Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you use Konvenable:

  • Account information: name, email address, password

  • Organization information: company name, team members, roles

  • Recruitment data: job postings, candidate applications, resumes, interview notes, scorecards

  • Usage data: pages visited, features used, device and browser information

2. Data from Third-Party Services (Google, Microsoft)

When you connect your Google Calendar or Microsoft Outlook account, we access the following data:

  • Your email address associated with the connected account

  • Calendar free/busy information (availability slots only, not event details)

  • Permission to create, update, and delete calendar events for interviews scheduled through Konvenable

  • OAuth2 authentication tokens to maintain the connection

OAuth tokens are encrypted using AES-256-GCM before storage and are never stored in plain text. They are only decrypted at the time of use to perform calendar operations on your behalf.

We do not read, store, or access the content of your existing calendar events. We only create events for interviews you schedule through Konvenable and query your availability (free/busy) to help coordinate scheduling.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Konvenable recruitment platform

  • Connect job seekers with employers and manage hiring pipelines

  • Synchronize interview schedules with your connected calendars

  • Send transactional emails (interview invitations, status updates, password resets)

  • Generate analytics and insights to help you improve your hiring process

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We only share data in the following cases:

  • With your calendar provider (Google or Microsoft) solely to create and manage interview events you initiate

  • With infrastructure providers (hosting, email delivery) who process data on our behalf under strict data processing agreements

  • When required by law or to protect our legal rights

5. Data Retention & Deletion

We retain your data only as long as necessary to provide our services:

  • Account data is retained while your account is active and deleted within 30 days of account deletion

  • When you disconnect a calendar integration, OAuth tokens are immediately and permanently deleted from our systems

  • Candidate data retention is configurable per organization to comply with local regulations (e.g., 24 months maximum under GDPR best practices)

6. Data Security

We implement industry-standard security measures to protect your data:

  • All data is encrypted in transit (TLS/HTTPS) and sensitive credentials are encrypted at rest (AES-256-GCM)

  • Access controls and role-based permissions limit who can view and modify data

  • Infrastructure is hosted in Europe with regular security updates and monitoring

7. Cookies & Tracking

We use cookies for the following purposes:

  • Essential cookies: session management, authentication, security (strictly necessary)

  • Analytics cookies: anonymous usage statistics to improve the platform (only with your consent)

You can manage your cookie preferences at any time through the cookie consent banner or your browser settings. Declining analytics cookies does not affect your use of Konvenable.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and applicable privacy laws, you have the following rights:

  • Right of access: request a copy of your personal data

  • Right to rectification: correct inaccurate or incomplete data

  • Right to erasure: request deletion of your personal data

  • Right to data portability: receive your data in a structured, machine-readable format

  • Right to restriction: limit how we process your data

  • Right to object: opt out of data processing based on legitimate interests or marketing communications

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Revoking Third-Party Access

You can revoke Konvenable's access to your calendar at any time:

  • From Konvenable: go to Settings → Integrations and click "Disconnect"

  • From your provider: Google (myaccount.google.com/permissions) or Microsoft (account.live.com/consent/Manage)

10. Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Art. 6):

  • Contract performance: processing necessary to provide the Konvenable service you signed up for

  • Consent: for optional features such as calendar integration and analytics cookies, which you can withdraw at any time

  • Legitimate interest: for security, fraud prevention, and service improvement, balanced against your rights

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our platform. Continued use of Konvenable after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, contact us at:

Email: [email protected]

Company: Tatinango Technology

Back to home