Privacy Policy
Last updated: February 2, 2026
1. Scope; roles (controller/processor)
This policy applies to information processed in connection with the Service. Depending on how you use the Service, Kiloma may act as:
- Controller (or equivalent) for information related to account administration, billing (if applicable), security, and operation of the Service.
- Processor (or service provider) when an employer/recruiter organization uploads or otherwise provides candidate information and directs us to process it on their behalf. In those cases, the organization is typically the controller and is responsible for providing required notices and establishing a lawful basis for processing.
2. Information we collect
We collect information in the following categories (depending on your use of the Service):
- Account and authentication information (e.g., name, email address, sign-in method, and basic profile details).
- Content you submit, including resumes/CVs, job descriptions, candidate communications, interview notes, and other materials you upload or enter into the Service.
- Usage and device information, such as log data, IP address, browser type, device identifiers, timestamps, and pages/actions taken within the Service.
- Communications, including messages you send to us (e.g., support requests) and administrative emails we send you (e.g., authentication emails).
- Cookies and similar technologies (see below).
Please do not submit sensitive personal information unless necessary and lawful for your intended use (for example, government identifiers, health data, or biometric data), and ensure you have appropriate rights and permissions to submit any personal data to the Service.
3. How we use information
We use information to:
- Provide, maintain, secure, and operate the Service (including authentication, access control, and troubleshooting).
- Process Content as directed by users (including generating AI-assisted summaries, extractions, or recommendations, where enabled).
- Improve and develop the Service (including performance, reliability, and security).
- Communicate with you about the Service (e.g., product updates, security notices, support responses).
- Detect, prevent, and address fraud, abuse, or violations of our Terms of Service.
- Comply with legal obligations and enforce our rights.
Where required by applicable law, we rely on appropriate legal bases to process personal data, such as performance of a contract, legitimate interests (e.g., securing and improving the Service), compliance with legal obligations, and consent (where applicable and revocable).
5. AI processing and third-party AI providers
The Service may offer AI-assisted features that process portions of submitted Content (for example, resumes/CVs or job descriptions) to generate AI outputs such as summaries or extracted fields. AI outputs may be inaccurate or incomplete; you are responsible for review and appropriate use.
When AI features are used, we may transmit the minimum necessary portions of Content to third-party AI providers (for example, OpenAI APIs) for processing on our behalf. We do not permit such providers to use your Content to train or improve their general-purpose models. Providers may process and retain data only as needed to provide services to us, maintain safety and prevent abuse, and comply with legal obligations, consistent with our agreements and their applicable policies.
6. Data retention
We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of information, your account settings, and applicable law.
7. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. International transfers
Kiloma is based in Israel, and the Service is available worldwide. Your information may be processed in Israel and in other countries where we and our service providers operate. Where required, we take steps to support lawful cross-border transfers (for example, contractual protections with service providers).
9. Your rights and choices
Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a copy of your personal information; to object to or restrict certain processing; and to withdraw consent where processing is based on consent.
If your data is processed on behalf of an employer/recruiter organization (where Kiloma acts as a processor), you should direct requests to that organization, which may submit a request to us.
11. Children
The Service is not directed to children. If you believe a child has provided personal information to us, please contact us and we will take appropriate steps to address it.
12. Changes
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date above. If changes are material, we may provide additional notice.
13. Contact
Questions or requests regarding this Privacy Policy can be sent to privacy@kiloma.com.