Privacy Policy

1. Who we are

Northwall Technologies Ltd (company number 16873407), 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, is the data controller for personal data processed through the Nudge service ("we", "us", "our").

We are committed to protecting your personal data and processing it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Questions about this policy or your data rights: owen@nudgebot.ai

2. What data we collect

Recruiters and hiring coordinators

• Name and email address (via Slack and Google OAuth)
• Slack workspace ID and user ID
• Google Calendar OAuth tokens (encrypted at rest)

Interviewers

• Name, email address, and Slack user ID (derived from calendar event attendees)
• Free-text interview feedback submitted via Slack DM
• AI-structured feedback (strengths, concerns, recommendation, score)
• Timestamp of feedback submission and confirmation

Candidates

• Name and email address (derived from calendar event attendees)
• Interview date and stage
• Structured feedback submitted about them by interviewers

Usage data

• Service interaction logs (for debugging and reliability)

3. How we use your data

We do not use candidate or interviewer data for any purpose other than providing the Service to your organisation. We do not sell personal data to third parties.

4. AI processing

Interview feedback is processed by third-party AI models (currently Anthropic Claude) to extract structured information. This processing occurs within the EU/UK data region where available. Raw feedback text is sent to the AI provider solely for structuring purposes and is not used to train AI models under our agreements with those providers.

5. Data sharing

We share personal data only with the following categories of third parties, all of whom process data on our behalf under appropriate data processing agreements:

• Supabase — database and backend infrastructure (EU region)
• Anthropic — AI feedback structuring
• Slack Technologies — message delivery
• Google — calendar integration and OAuth
• Vercel — web hosting

We do not transfer personal data outside the UK/EEA except where the above providers operate under Standard Contractual Clauses or equivalent safeguards.

6. Data retention

We retain personal data for as long as your organisation uses the Service, plus a maximum of 90 days following termination, after which it is permanently deleted. You may request earlier deletion at any time.

Interview feedback data is retained for the duration of the relevant hiring process and may be deleted on request.

7. Your rights

Under UK GDPR, individuals whose data we process have the right to:

• Access — request a copy of personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Restriction — request that we restrict processing of your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests

To exercise any of these rights, contact us at owen@nudgebot.ai. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption at rest and in transit, access controls, and regular security reviews. OAuth tokens are encrypted and never exposed to end users.

9. Cookies

The nudgebot.ai website does not currently use tracking or analytics cookies. We may use strictly necessary cookies for session management on the role page dashboard.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify active users of material changes via email or Slack. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

Northwall Technologies Ltd
71–75 Shelton Street, Covent Garden
London, WC2H 9JQ
owen@nudgebot.ai