Privacy notice

Two roles

For our customers' hiring data (candidates, interviewers, feedback), the customer is the controller and Even Panel is the processor. Candidates should read the hiring company's own privacy notice and contact them first.

For our own website, accounts, billing and support, Even Panel is the controller. This notice covers that.

What we collect

Account details: name, work email, company, access level.

Sign-in records: one-time codes (stored hashed), sessions, and sign-in events in your company's audit log.

Billing: plan, invoices and payment status from Dodo Payments. We never see full card numbers.

Usage: which features you use and how much, to bill interviews and enforce fair use.

Technical: error reports and server logs with a request id. We don't use advertising or analytics trackers.

Why

To provide the service you signed up for (contract), to bill you (contract and legal obligation), to keep the service secure and working (legitimate interest), and to answer you (legitimate interest).

Who we share it with

Only the subprocessors listed in the data processing agreement, under contract, and only for the purpose listed.

How long we keep it

Account data for as long as you have an account, then 30 days. Invoices as long as tax law requires. Server logs for up to 30 days.

Your rights

You can ask to see, correct, export or delete your personal data, or object to how we use it, by emailing support@evenpanel.com. You can also complain to your data protection authority.

Transfers

Our providers are mostly in the United States. Transfers out of the EU and UK rely on the EU-US Data Privacy Framework or standard contractual clauses.