Commercial Privacy Policy

Effective Date: February 10, 2026. Last updated: October 10, 2026.

Who and what this policy covers

Reppls, Inc. provides Reppls 10xRecruiter (also called 10x or Reppls 10x), our desktop interview and meeting recorder, and the Reppls recruitment platform. This policy covers companies, recruiters, hiring teams, and the data they process through these products. It covers the macOS and Windows editions of 10xRecruiter, including free trials and connected personal or work Google accounts.

For 10xRecruiter's Google Calendar integration, read section 1.7: Google Calendar data. That section explains access, use, storage, protection, sharing, retention, and deletion. It applies to Google API data and data derived from it, and takes precedence over any broader provisions in this policy or our general Privacy Policy. The general policy's provisions about advertising, networking, or AI model training do not apply to this Google data.

1. Data We Collect

1.1 Data You Provide to Us (Customer Data)

  • Registration: To create a commercial account, you need to provide data including your business name, business email address, and billing information.
  • Candidate Data: We collect data that you upload or that candidates submit to your specific job openings via our Services. This includes names, emails, CVs/Resumes, job application responses, and interview video recordings. You (the Customer) retain ownership of this data.
  • Service Inputs: We collect data when you configure AI agents, set up interview questions, or input scoring criteria.

1.2 Data From Others

  • Candidates: We receive personal data when candidates apply to your job postings or complete AI interviews invited by you.
  • Integrations: If you integrate Reppls with your Applicant Tracking System (ATS), we receive data necessary to sync candidate profiles and statuses.

1.3 Service Use

We log usage data when you visit or use our Services, including platform technology, such as when you view candidate reports, play interview videos, or export data. We use log-ins, cookies, device information, and internet protocol ("IP") addresses to identify you and log your use.

1.4 Cookies and Similar Technologies

We use cookies and similar technologies to collect data to recognize you and your device(s) on, off, and across different services and devices.

1.5 Your Device and Location

When you visit or leave our Services, we receive the URL of both the site you came from and the one you go to. We also get information about your network and device, including IP address, proxy server, operating system, web browser and add-ons, device identifier and features, and/or your mobile carrier.

1.6 Communications

We collect information about you when you send, receive, or engage with messages in connection with our Services (e.g., support tickets or email outreach to candidates initiated via the platform).

1.7 Google Calendar integration in Reppls 10xRecruiter

Connecting Google and the data we access

Connecting Google Calendar is optional. You authorize access through Google's consent screen; Reppls does not ask for or receive your Google password. The integration uses these read-only permissions:

  • https://www.googleapis.com/auth/calendar.calendarlist.readonly: reads the names and identifiers of calendars available to your Google account so you can choose a primary or shared calendar.
  • https://www.googleapis.com/auth/calendar.events.readonly: reads events from the calendar you select. This includes event titles, start and end times, time zones, event and recurring-event identifiers, organizer and attendee names and email addresses, attendance responses, cancellation status, and calendar and video meeting links.

We also use the connected Google account's identifier and email address to identify the connection in the app. These permissions do not allow 10xRecruiter to create, edit, or delete calendar events. We do not request Gmail or Google Drive access for this integration.

How we use Google Calendar data

10xRecruiter uses calendar names and identifiers for the calendar selector, and event titles and times to display your schedule and show meeting reminders. Calendar and conference links let you open an event or join a meeting when you choose. Event identifiers and times let us associate a recording with the selected meeting and restore an interrupted interview session. Attendee names and email addresses can prefill optional candidate details; you can edit or remove them before starting.

Connecting Google Calendar does not start recording. You start recording yourself. Audio, notes, transcripts, and assessment reports are separate interview data processed to provide the recording and interview features you choose.

What stays on your device and what is sent to Reppls

The desktop app retrieves the selected calendar's events directly from Google. It uses Google authorization credentials to maintain the connection. In the macOS app, the Google Sign-In SDK stores these credentials in macOS Keychain; Google access and refresh tokens are not sent to the Reppls API. The app keeps your account association and calendar choice on your device and refreshes the displayed schedule while connected.

When you start an interview or recording linked to an event, the app sends the selected meeting's calendar provider, account and event identifiers, title, scheduled times, meeting link, and the candidate details shown in the start form to Reppls. We store this information with the interview in your Reppls organization so you can identify the recording and resume an interrupted session. The app does not upload the full calendar event list to Reppls as part of this flow.

How we protect Google data

The app uses HTTPS to retrieve calendar data from Google and send selected meeting data to Reppls. Saved meeting information receives the same encryption-at-rest safeguards described in section 5.1 as other customer data. Access to saved interviews is restricted by Reppls account and organization permissions. macOS Keychain protects the Google authorization credentials stored by the macOS app.

Who can receive Google data

Authorized users in your Reppls organization can access the meeting information saved with an interview according to their permissions. If you share an interview through a sharing link, the recipient may also see its associated meeting information.

We use the service providers listed in section 3.2 only where necessary to provide these user-facing features. AWS provides infrastructure and storage for saved meeting and interview data. Transcription and AI providers process interview data when needed for the feature you choose; calendar access does not give every listed provider access to your calendar. Providers may receive associated meeting or candidate information only when needed to deliver the selected feature and must process it on our behalf under the restrictions in this policy.

We do not sell Google user data, disclose it to data brokers, use it for advertising, or use it to train or improve general-purpose AI models. We do not allow service providers to use Google data for those purposes. Human access to Google data is limited to your affirmative agreement to view specific data, necessary security investigations, or legal requirements. A transfer of Google user data as part of a business sale requires your explicit prior consent.

Retention, disconnection, and deletion

The app uses the active Google connection to refresh your schedule until you disconnect it or revoke access. In the macOS app, disconnecting signs out the active Google session, removes its saved account association, and clears the displayed schedule. A saved calendar choice may remain on the device as a preference; it does not provide access to Google without authorization.

To stop future access, disconnect Google Calendar in the app's calendar settings. You can also remove Reppls from your Google Account connections. Revoking access prevents the app from continuing to retrieve calendar data with that authorization.

Meeting information already saved with an interview remains in Reppls after disconnection or revocation. We retain it while your account is open or as needed to provide the saved interview features. Under section 4.1, we delete customer data from active production systems within 30 days after termination of the commercial agreement, unless law requires a longer retention period.

To request deletion of saved Google meeting data before then, use the interview deletion controls in the Reppls dashboard where available, or email maksim@reppls.com with your Reppls account, organization, and the records you want deleted. We verify that you are authorized to request deletion. Do not send passwords or Google authorization tokens. Disconnecting Google and deleting a saved interview are separate actions; neither deletes the original event from Google Calendar.

Google's Limited Use requirements

Reppls 10xRecruiter's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. These restrictions also apply to data derived from Google API data and override broader uses or sharing provisions in our other policies.

If we change how 10xRecruiter accesses, uses, stores, or shares Google data, we will update this policy and notify users through the app or other appropriate communication. We will request additional consent where required before using the data for a new purpose.

2. How We Use Your Data (Strictly Limited for Commercial Customers)

We use your data to provide, support, and secure our Services. We do not use commercial customer data for general-purpose model training.

2.1 Service Delivery

We use Customer Data solely to:

  • Conduct AI interviews and assessments on your behalf.
  • Process and rank candidates based on your specific criteria.
  • Provide you with transcripts, scores, and analytics.

2.2 NO AI Model Training on Customer Data

Reppls represents and warrants that we do NOT use your Customer Data (including candidate CVs, video interview recordings, transcripts, or assessment results) to train, fine-tune, or improve our artificial intelligence models, Large Language Models (LLMs), or algorithms for the benefit of other customers or third parties. Your data is processed in isolation to generate results only for your account.

2.3 Customer Support

We use data to investigate, respond to, and resolve complaints and Service issues at your specific request.

2.4 Security and Investigations

We use data for security, fraud prevention, and investigations. We may use your data if we think it's necessary for security purposes or to investigate possible fraud.

3. How We Share Information

3.1 Controlled Sharing & Shared Links

Unlike our standard consumer platform, Customer Data is generally treated as Confidential Information and is not visible to the public. However, the Service includes features that allow you to share data externally at your discretion:

  • Shared Links: If an Authorized User generates an expirable link to a candidate's profile, CV, or interview recording, that specific data will be accessible to anyone who possesses the link.
  • Customer Control: You control who receives these links and can set expiration parameters (if supported by the feature). We do not index these links in search engines, but we cannot control how you or your recipients share them.

3.2 Service Providers (Sub-processors)

We use trusted third-party service providers (e.g., cloud hosting, video processing) to help us provide our Services. They will have access to your information only as reasonably necessary to perform tasks on our behalf and are obligated not to disclose or use it for other purposes.

Our sub-processors and service providers may include, but are not limited to:

3.3 Legal Disclosures

We may need to share your data when we believe it's required by law or to help protect the rights and safety of you, us, or others.

3.4 Change in Control or Sale

We may share your data if our business is sold to others, but it must continue to be used in accordance with this Privacy Policy.

4. Your Rights and Obligations

4.1 Data Retention and Deletion

  • Retention: We retain Customer Data only as long as your account is open or as needed to provide you Services.
  • Deletion: Upon termination of your commercial agreement, Reppls will delete all Customer Data from its active production systems within 30 days, unless a longer retention period is required by law.

4.2 Data Controller vs. Processor

  • Customer (You): You act as the Data Controller for all candidate data you upload or collect. You are responsible for ensuring you have the legal basis to collect this data.
  • Reppls (Us): We act as the Data Processor. We process data only in accordance with your written instructions (this Policy and the Terms of Service).

4.3 Access and Control

You have full control to export, correct, or delete candidate data directly through the Reppls dashboard.

5. Other Important Information

5.1 Security

We implement enterprise-grade security safeguards designed to protect your data, such as HTTPS encryption in transit and AES encryption at rest. We regularly monitor our systems for possible vulnerabilities and attacks.

5.2 Cross-Border Data Transfers

We transfer, process, and store your information outside of your country of residence, to wherever we or our service providers operate. We take steps to protect your data, including using standard contractual clauses approved by the European Commission.

5.3 Lawful Bases for Processing

We will only collect and process personal data about you where we have lawful bases. For Commercial Customers, the primary basis is Contract (processing is necessary for the performance of the Commercial Terms of Service).

5.4 Direct Marketing

We do not share your commercial data or your candidates' data with third parties for their direct marketing purposes.

5.5 Contact Information

If you have questions or complaints regarding this Privacy Policy, you can contact us at:

Reppls Data Protection Officer

  • Email: maksim@reppls.com.
  • Address: 1111B S Governors Ave STE 21573 Dover, DE 19904 US

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.