Legal
Privacy Policy
This policy explains how Xarlon handles personal data on its website and when providing hiring-support services to customers.
1. Scope and our role
Who is responsible. Xarlon operates this website and the Xarlon recruitment-support service. For personal data collected through this website, Xarlon is the data controller and can be reached at info@xarlon.com.
This policy applies to the Xarlon website, sales communications, and recruitment-support service. Xarlon helps organizations manage role information, review candidate applications, support interviews, and organize hiring workflows. Human users remain responsible for every hiring decision.
For website inquiries and direct marketing, Xarlon generally determines why personal data is used. When Xarlon processes candidate data for a customer, that customer generally controls the hiring process and Xarlon acts on its documented instructions. The applicable customer agreement and local law determine the parties' exact roles.
2. Data we collect
Website and business contacts
We collect the details you submit through our demo, pilot, and pricing forms. Depending on which form you use, that is your name, work email, company, the role you would like to discuss, and your approximate monthly hiring volume. Each submission also records which of our pages it came from and the time it was sent. We may additionally receive communications and meeting details when you email us or book a demonstration.
Candidates
Depending on the customer's configuration, candidate data may include contact details, CV and application information, employment and education history, role-related evidence, assessment or interview responses, reviewer notes, and workflow status. Audio, video, transcripts, and related metadata are collected only where the interview experience discloses them and the required permission has been obtained.
Technical data
Our systems may process IP address, browser and device information, timestamps, security logs, and referral pages. This website sets no cookies, so there is no cookie choice to record. Candidate-facing pages do not load advertising pixels.
3. How we use personal data
- Provide, secure, maintain, and improve the website and services.
- Respond to inquiries, arrange demonstrations, run pilots, and manage customer relationships.
- Process candidate information according to the customer's configured hiring workflow.
- Provide assessment-related information and workflow support to authorized human users.
- Prevent abuse, investigate incidents, keep operational records, and meet legal obligations.
We do not run a marketing mailing list and we do not send bulk marketing email. If you submit a form, we reply to that enquiry.
Depending on the context and applicable law, processing may rely on consent, performance of a contract, legitimate interests, or compliance with legal obligations. The customer is responsible for identifying and communicating the appropriate basis for its candidate processing.
6. Retention
Website enquiries. Details you send through the demo, pilot, or pricing form are kept for up to 24 months from our last contact with you, and are then deleted. You can ask us to delete them sooner.
Candidate data. Retained according to the schedule of the customer running that hiring process. That customer sets the period, not Xarlon.
Backups. A deleted record can remain in routine backups for a short period before those backups age out.
7. Data location and transfers
Personal data may be processed in the locations where Xarlon and its vetted providers operate. Candidate data for a customer is processed in the location configured for that customer's service.
Where personal data crosses a border, we and our customers use the contractual and legal safeguards the applicable jurisdiction requires.
8. Security
We use administrative, technical, and organizational measures designed to protect personal data, including access controls, encryption where appropriate, monitoring, backups, and restricted production access. No internet service can guarantee absolute security.
9. Your rights and choices
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or review by a human. You may also have the right to complain to a relevant authority.
If your request concerns a job application, contact the employer named in your application or interview invitation first. Xarlon will support verified customer instructions. For website or Xarlon-controlled data, contact us using the details below. We may need to verify your identity before acting on a request.
10. Children
The website and services are not directed to children below the minimum working or digital-consent age that applies in their location. Customers must not submit children's data unless they have a lawful basis and the required notices or permissions.
11. Changes to this policy
We may update this policy as our services or legal obligations change. We will post the revised version with a new effective date and provide additional notice where required.
12. Contact
For privacy questions and data requests, email info@xarlon.com. Please say what you are asking for and include enough detail for us to identify your records. We may need to verify your identity before acting on a request.
If your request concerns a job application, contact the employer named in your application or interview invitation first — that employer decides how its hiring data is handled, and we act on its instructions.