Privacy Policy

1. Who we are

Sieve ("we", "us") provides AI-assisted CV screening and hiring workflow tools at sievecv.com. This policy explains what personal data we process, why, and the rights you have over it.

2. How Sieve uses AI

Sieve uses AI (large language models from Anthropic) to parse CVs, score candidates against job requirements, and generate interview questions, screening emails, and summaries.

Scores are explainable. Each candidate score includes a breakdown across technical fit, culture fit, leadership, domain match, and experience level, plus plain-English strengths and gaps. Candidates can request a copy of the AI output relating to them from the hiring company.

3. Personal data we process

When you use Sieve as a recruiter, we process:

• Your name, email address, and company
• Your authentication identifiers (Google, Microsoft, GitHub, LinkedIn OAuth tokens, or hashed passwords)
• Usage and billing information

When your company uploads candidate CVs to Sieve, we process candidate data including:

• Name, email, phone number, location
• Work history, education, skills, certifications
• The original CV file and extracted text
• Notes and scoring outputs created by the hiring company and the AI

4. Legal basis (UK/EU GDPR)

• Contract — to deliver the Sieve service to hiring companies.
• Legitimate interests — running a secure, reliable hiring platform and allowing hiring companies to evaluate candidates they have received CVs from.
• Consent — where required, the hiring company is responsible for obtaining candidate consent before uploading their CV to Sieve.

5. Your rights (GDPR)

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Receive your data in a portable format
• Request human review of any decision that significantly affects you (GDPR Article 22)
• Lodge a complaint with your local data protection authority

To exercise these rights, email privacy@sievecv.com. If you are a candidate, please contact the hiring company directly first — they are the data controller.

6. Automated decision-making

Sieve does not make solely automated decisions that produce legal or similarly significant effects. Every shortlist, progression, or rejection is reviewed and actioned by a human recruiter. If you believe an automated decision was made about you, contact the hiring company or email us and we will investigate.

7. Subprocessors

We use the following third-party services to operate Sieve:

• Anthropic — AI model provider (CV parsing, scoring, chat). Anthropic does not train on customer data.
• Vercel — hosting and file storage
• Neon — PostgreSQL database
• Stripe — billing and payments
• Resend — transactional email
• Upstash — rate limiting (where configured)

8. International transfers

Data may be processed in the United States and other countries where our subprocessors operate. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

9. Retention

We retain account data for as long as your company uses Sieve. When an account is deleted, associated personal data is removed within 30 days. Hiring companies are responsible for their own candidate retention policies within the platform.

10. Security

We use industry-standard encryption in transit (TLS 1.3) and at rest, authentication via OAuth and hashed passwords, and role-based access controls. No system is perfectly secure but we continuously monitor for threats.

11. Changes to this policy

We may update this policy. Material changes will be notified by email to account owners.

12. Contact

Questions? Email privacy@sievecv.com.