Privacy Policy
Last updated: August 2026
ReviewStack is available to small hiring teams worldwide. We process account data (email, name via Clerk) and workplace data you upload (job descriptions, resumes, review decisions) to provide the service.
Resume files and derived analysis results are stored in our backend (Convex) and deleted on the retention schedule (90 days from first successful upload) or when you delete a job/account. Notifications are retained for 30 days.
Before AI scoring, we apply lightweight deterministic redaction (for example emails and phone-like strings). Remaining resume and job text is sent to third-party AI providers to generate rubrics and scores. That processing may occur in regions outside your country, including where the AI provider hosts its API. Optional OCR for scanned or image PDFs uses a separate document-intelligence provider when enabled.
Authentication is provided by Clerk (Google). Payment data is handled by Paddle as Merchant of Record; we do not store card numbers.
We do not claim GDPR certification, contractual data-residency guarantees, or suitability for government, healthcare, or other highly regulated hiring stacks out of the box. If those requirements apply to you, contact us before uploading candidate data.
Contact: wuyuejaymay@gmail.com