Privacy Policy

This Privacy Policy explains how Fluxberry ("we", "us") handles personal data when you visit fluxberry.in, create an account, or apply for a job through a careers page or application form that runs on Fluxberry.

If you have a question about this policy or want to exercise a right described below, email us at sayandeep@fluxberry.in.

Our role

Fluxberry is hiring software that companies ("customers") use to post jobs, receive applications and manage candidates. How we handle data depends on whose data it is:

• Customer accounts and website visitors. For the people who sign up for Fluxberry and for visitors to our website, we decide how and why the data is used, so we are responsible for it (a "data fiduciary" under India's Digital Personal Data Protection Act, 2023, or a "controller" under the GDPR).
• Candidates and sourced contacts. When a company uses Fluxberry to collect applications or find candidates, that company decides what to collect and how to use it. We process that data on the company's behalf and under its instructions (as its "data processor"). If you applied to a job or were contacted about one, the hiring company is responsible for your data, and its own privacy notice applies. You can still contact us and we will pass your request on and help the company answer it.

Data we collect

When you create and use an account

• Account details: your name, email address and profile photo, which you give us through our sign-in provider, and the workspaces, roles and team invitations you create.
• Workspace details: your company name, logo, careers page content, jobs, application forms and pipeline settings.
• Billing details: your plan, billing cycle, subscription status and credit balance. Payments are processed by our payment partner, Dodo Payments, which collects your card or other payment details directly. We never see or store your full card number.
• Integrations: if you connect Google Calendar, we store the access tokens Google gives us and the email address of the connected calendar.
• Messages: emails you send to candidates through Fluxberry and the replies they send back.
• Usage and device data: records of actions in your workspace (such as publishing a job or moving a candidate) kept as an activity history and audit log, AI credit usage, and technical data such as IP address, browser type and error reports.

When you apply for a job through Fluxberry

The hiring company chooses which questions to ask. Depending on the form, this can include:

• your name, email address, phone number and location;
• your current and expected salary;
• your LinkedIn profile and other links you provide;
• your résumé or CV, and the text we extract from it;
• your answers to the company's questions, and any files or recorded video answers you upload;
• how you found the job, such as a referral code.

While the company reviews your application, Fluxberry also stores the company's notes, labels, pipeline stage, messages, any offer details (such as salary, bonus, equity and start date) and the AI screening results described below.

When a company uses Talent Sourcing

Customers on the Max plan can search for potential candidates who have not applied. For this we obtain professional profile information from third-party data providers (People Data Labs, Apollo and Levels.fyi, accessed through the data broker Monid). This can include name, job title, employer, location, skills, work history, education, public profile links, work or personal email address, phone number and compensation estimates. Customers can email these contacts through Fluxberry. Every outreach email includes an unsubscribe link, and anyone who unsubscribes is added to a suppression list so the workspace cannot email them again. Outreach emails contain a small image that tells the sender whether the email was opened.

When you visit our website

Our marketing pages do not use advertising or analytics cookies. We set cookies needed to keep you signed in, and public careers pages use product analytics. Our Cookie Policy lists them.

How we use AI

Fluxberry uses AI to read résumés and to score each applicant against the job's requirements, producing a score, a short summary, strengths and concerns. We also use AI to turn search prompts into filters and to help draft outreach emails.

• To do this, we send the relevant résumé text, application details and job description to our AI provider, Anthropic, which processes it to return a result. Under its commercial terms, Anthropic does not use this data to train its models.
• AI scores are a tool for the hiring team. Fluxberry does not reject or advance candidates on its own. A person at the hiring company decides what happens to every application.
• AI can make mistakes. Customers are responsible for reviewing results and for using them in line with the employment and anti-discrimination laws that apply to them.

Why we use your data

We use personal data to:

• provide, secure and maintain Fluxberry, including processing applications, parsing résumés, AI screening, scheduling and email;
• create and manage accounts and workspaces;
• process subscriptions, credit purchases and billing;
• send service emails, such as application confirmations, invitations, receipts and important notices;
• provide support and respond to requests;
• understand how the product is used so we can fix problems and improve it;
• detect and prevent fraud, abuse and security incidents;
• comply with legal obligations and enforce our Terms of Service.

We rely on your consent where the law requires it, on performing our contract with customers, on our legitimate interests in running and improving a secure service, and on legal obligations. We do not sell personal data, and we do not use candidate data for advertising.

Google user data

If you connect Google Calendar, Fluxberry uses the access you grant only to check your availability and to create interview events you ask for, and to show which Google account is connected. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and people cannot read it except where you ask us to for support, where it is needed for security, or where the law requires. You can disconnect Google Calendar at any time in your settings, which deletes the stored tokens, or revoke access from your Google Account.

Who we share data with

We share personal data only with the service providers that help us run Fluxberry, under contracts that limit how they can use it:

We also share data:

• with the hiring company, which sees the applications made to its jobs;
• with integrations a customer turns on, such as webhooks that send application data to the customer's own systems;
• when required by law, or to protect the rights, safety and security of our users, the public or Fluxberry;
• in a business transfer, such as a merger or acquisition, in which case this policy will continue to apply to your data.

Where your data is stored

Our providers store and process data in the United States and other countries. When we transfer personal data out of India, the European Economic Area or the United Kingdom, we rely on the safeguards those laws require, such as standard contractual clauses.

How long we keep data

• Account and workspace data is kept while the account is active. When an account is closed, we delete or anonymise its data within a reasonable period, except where we must keep records (for example for tax or accounting) or to resolve disputes.
• Candidate data is kept for as long as the hiring company keeps it in its workspace. Companies can ask us to anonymise or permanently delete a candidate's record.
• Notifications and webhook delivery logs are deleted automatically after 30 days.
• Suppression lists are kept so that people who unsubscribe are not contacted again.

Your rights

Depending on where you live, you may have the right to:

• get a copy of, or a summary of, the personal data we hold about you;
• correct or update it;
• have it deleted;
• withdraw consent you have given, without affecting processing before you withdrew it;
• object to or restrict certain processing, or ask to receive your data in a portable format;
• nominate another person to exercise your rights if you die or become incapacitated (under India's DPDP Act);
• complain to a data protection authority, such as the Data Protection Board of India or your local supervisory authority in the EU or UK.

To use any of these rights, email sayandeep@fluxberry.in. If your request is about a job application or a recruiting email, we will pass it to the hiring company and help it respond. We may need to confirm your identity first. We aim to respond within 30 days.

Security

We protect data with encryption in transit (HTTPS), encryption at rest by our hosting providers, role-based access, per-job access controls inside each workspace, and audit logs of sensitive actions. No system is perfectly secure, but if we learn of a breach that affects your personal data, we will notify you and the authorities as the law requires.

Children

Fluxberry is a business service and is not meant for anyone under 18. Customers must not use it to collect children's personal data without the consent the law requires.

Changes to this policy

We may update this policy as Fluxberry changes. When we do, we will change the "last updated" date above, and if the changes are significant we will tell account holders by email or in the product before they take effect.

Grievance Officer and contact

If you have a concern or complaint about how your personal data is handled, contact our Grievance Officer at sayandeep@fluxberry.in. We will acknowledge your complaint within 24 hours and aim to resolve it within 15 days.