Last updated 29 October 2026
This Privacy Policy explains how EmployLabs, run by Weemploy Co. (“EmployLabs”, “we”, “us”), collects, uses, shares and protects personal data. It covers our website, employlabs.ai, and our AI recruiting platform, app.employlabs.ai.
It applies to four groups of people: recruiters and hiring teams who use EmployLabs, candidates and referrers whom our customers contact through it, visitors to our website, and business contacts at companies we may work with. Each section says which group it is about where that matters.
If anything here is unclear, write to saurabh@weemploy.world.
1. Who we are
EmployLabs is an AI recruiting platform for companies and recruiters. Its assistants do much of a recruiter's work:
- Meera, an AI agent, finds candidates, runs outreach, schedules interviews and keeps the hiring pipeline moving.
- Naira, an AI interviewer, interviews candidates by voice. The recordings, transcripts and scored reports are used for the customer's hiring.
- Zia, our career strategist, calls candidates and referrers and messages them on WhatsApp.
Our users are businesses: recruiters and hiring teams. In this policy, the “customer” is the company that holds an EmployLabs account.
For any privacy question or request, contact us at saurabh@weemploy.world.
2. Who decides how data is used
Data protection law gives different duties to two kinds of party. The controller (under India's Digital Personal Data Protection Act, 2023, the data fiduciary) decides why and how personal data is used. The processor handles personal data on the controller's behalf and follows its instructions.
- Customer workspace data. When a customer hires with EmployLabs, the roles, candidates, interviews and messages in its workspace are the customer's. The customer is the controller (data fiduciary). We are its processor: we handle that data on its behalf, only to provide the service and as it instructs.
- Our own data. We are the controller for recruiter account data, billing data, data about visitors to our website, the professional profiles we gather from public sources and data providers to run sourcing, and the business contacts we collect for Company Room.
If you are a candidate and a company contacted you through EmployLabs, that company decides how your data is used for its hiring. You can still write to us. We will help, or pass your request to the company (see Privacy choices).
3. What we collect
Recruiters and customers. When you use EmployLabs, we collect:
- Account details: your name, work email, company and sign-in details.
- Workspace content: the roles and job descriptions you add, hiring criteria, notes, decisions about candidates, and the messages you send or approve.
- Connected accounts: if you connect Google, the data described in Google user data.
- Billing details: your billing contact and company details, and records of payments. Payments are processed by Razorpay.
- Usage data: the actions you take in the product (kept in an audit log), and log data such as IP address, browser type and the time of each request.
Candidates and referrers. We receive candidate data in these ways:
- Public professional sources and data providers: your name, work history and other professional profile details, links to public professional profiles, and professional contact details such as a work email or phone number. Our data providers are listed on our Sub-processors page.
- Applications: what you send when you apply for a role, such as a CV and your answers.
- Referrals: your name and contact details when someone refers you for a role, and the referrer's own name and contact details.
- Interviews: voice recordings of interviews with Naira, their transcripts, and the scores and reports made from them, including an English level; answers to skills tests and take-home tasks; and integrity signals recorded during an interview, such as switching tabs, leaving full screen, copying and pasting, or turning the camera off. If a take-home assessment asks you to share a code repository, we read the repository's contents.
- Messages and calls: emails, WhatsApp and SMS messages, phone calls and messages on other channels a customer turns on, such as LinkedIn or X, including call audio and transcripts, and your replies.
- Your choices: a record of any request not to be contacted.
Business contacts. For Company Room, where we prepare hiring research for companies we may work with, we collect business contact details of people at those companies, such as name, job title and work email, from Apollo and Bitscale.
Website visitors. On employlabs.ai we collect:
- Analytics data: through Google Analytics, the pages you visit, how you arrived, your device and browser type, and an approximate location based on your IP address. Our Cookie Policy lists the cookies involved.
- What you send us: if you write to us, your name, contact details and message.
- Demo bookings: if you book a demo, your name, email and the time you pick, through Cal.com.
4. How we use it
We use personal data to:
- Provide the service: find candidates for a customer's roles, send outreach, run AI interviews, make calls and send messages, schedule interviews, and show the results to the customer's hiring team.
- Run customer accounts: sign-in, seats, support, billing and payments.
- Prepare Company Room research: research companies we may work with and the people who hire there.
- Honour opt-outs: keep a do-not-contact record, so that once someone asks us not to contact them, we stop contacting them at the email, phone or profile they gave us.
- Keep the service safe: detect and stop abuse, keep an audit log, investigate problems and fix errors.
- Improve the service: understand which pages and features are used, so we can make them better.
- Talk to you: answer your questions and send notices about your account or the service.
- Meet legal duties: keep tax and accounting records and respond to lawful requests.
Google user data has stricter limits, set out in Google user data.
5. AI and hiring decisions
EmployLabs uses AI agents to do recruiting work for a customer. They search for candidates and score how well each one matches a role, write and send outreach, interview candidates by voice, score interviews, and schedule meetings.
A person makes the hiring decision. The product shows scores and the evidence behind them, such as interview recordings, transcripts and reports. The customer's hiring team reviews them and decides. EmployLabs does not make automated final hiring decisions.
AI providers get only what a task needs. To complete a task, we send an AI model only the text or audio that task needs. We do this through the providers on our Sub-processors page: for example, OpenRouter for text models, Deepgram for speech-to-text and Cartesia for text-to-speech.
No training on Google data, and none across customers. We do not use Google user data to create, train or improve any generalized AI or machine-learning model. We do not use one customer's workspace data to train AI models for other customers.
AI can make mistakes. Customers must review AI output before relying on it, and you can ask us what data was used about you (see Your rights).
6. Google user data
EmployLabs' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Recruiters can connect a Google account so their AI agent can work from their own Gmail and Google Calendar. We ask only for the permissions below, and use each one only for the reason shown.
| Google permission | What we do | Why |
|---|
| openid, userinfo.email, userinfo.profile | Read the connected account's email address, name and photo. | To identify the connected account and show it in Settings. |
| gmail.modify | Read, draft, rewrite, send, label and archive email, and move email to Trash. We never permanently delete email. | So the recruiter's AI agent can send outreach from the recruiter's own mailbox, draft and rewrite replies, track candidate replies and keep the inbox organised. |
| calendar.events | Create, update and delete calendar events, including Google Meet links. | To schedule, reschedule and cancel interviews. |
| calendar.readonly | Read the list of calendars and free/busy times. | To find free interview slots. |
Limited Use. We use Google user data only to provide or improve the user-facing features in the table above. In particular:
- We transfer it only to provide these features with your consent, for security (such as investigating abuse), to comply with the law, or as part of a merger or acquisition with your prior consent.
- No person at EmployLabs reads it, unless you agree, it is needed for security, or it is needed to comply with the law.
- We never sell it.
- We never use it for advertising, retargeting or personalised advertising.
- We never use it to decide on credit or lending.
AI and Google user data. We do not use Google user data to create, train or improve any generalized AI or machine-learning model. AI models process it only to do the task you asked for, such as drafting a reply to a candidate. The model provider does not retain it for training.
How we access, store and share it.
- We access it through Google's APIs, using only the permissions you grant when you connect your account.
- We store it on our servers in Germany (EU). Copies may also sit in our backups, which are kept with Cloudflare R2 and expire on their normal rotation.
- Your OAuth tokens are encrypted at rest.
- We share it only with the sub-processors needed to run these features: our hosting and storage providers, and the AI providers that carry out a task you asked for. Each is bound to protect it.
- We keep it only as described in How long we keep it. Emails and calendar events about your candidates are kept with your workspace data and follow its rule. Your Google tokens are deleted when you disconnect.
Your control.
- Disconnect Google at any time in the app's Settings. We then revoke our access token with Google and delete the stored tokens.
- You can also remove our access at https://myaccount.google.com/permissions.
- To delete your account and its data, write to saurabh@weemploy.world.
Changes. If we want to use Google user data in a new way, we will tell you and ask for your consent again before the new use begins.
7. Legal bases
Under the GDPR, we rely on these legal bases:
- Contract: to provide the service to customers and their users, and to bill them.
- Legitimate interests: to find candidates and contact them about relevant roles, to research companies we may work with, to keep the service secure, to keep do-not-contact records, and to understand how our website and product are used. We weigh these interests against your rights, and you can object at any time.
- Consent: where we ask for it, for example when you connect a Google account. You can withdraw consent at any time. This does not affect what we did before you withdrew it.
- Legal obligation: to keep billing records for tax, and to respond to lawful requests.
Under India's Digital Personal Data Protection Act, 2023, we process personal data:
- With your consent, after giving you notice of what we collect and why, which this policy does. You can withdraw consent at any time, as easily as you gave it.
- For legitimate uses that the Act allows without consent, such as data you share with us voluntarily for a specific purpose, and to meet a legal obligation.
- Personal data that the person it is about has made publicly available, such as their own public professional profile, which the Act does not apply to. Candidates still have every choice on Privacy choices.
For customer workspace data, the customer is the controller (data fiduciary). It decides the legal basis and gives candidates any notice the law requires. We process that data on its behalf.
8. Who we share it with
We never sell personal data. We share it only in these cases:
- Sub-processors. Providers that help us run EmployLabs: hosting, file storage and backups, email delivery, AI models, speech-to-text and text-to-speech, phone calls and SMS, WhatsApp messages, professional profile and contact data, web research, company data, payments, demo bookings, Google services, and code repositories for take-home assessments. The full list, with what each one does and the data it handles, is on our Sub-processors page.
- Our customers. A customer's authorised team sees the candidates, recordings, transcripts, scores and messages in its own workspace.
- The law. When the law requires it, or to protect the rights, safety or security of our users, candidates, the public or EmployLabs.
- A business transfer. If EmployLabs is part of a merger, acquisition or sale of assets, personal data may pass to the new owner under this policy. For Google user data, we ask for your consent first.
- Your instructions. Any other sharing you ask for or agree to.
9. International transfers
Our servers are with Hetzner Online GmbH in Falkenstein, Germany. Our voice rooms (LiveKit) and error tracking (GlitchTip) also run on our own servers.
Some of our providers process data outside the EU and India. When personal data leaves the EU, we use the safeguards the law requires, such as the European Commission's standard contractual clauses, where they are needed. When personal data leaves India, we follow the rules the Government of India sets for such transfers.
To ask about the safeguards for a particular provider, write to saurabh@weemploy.world.
10. How long we keep it
We keep personal data only as long as we need it, under these rules:
| Data | How long we keep it |
|---|
| Recruiter account data | While the account is active. Deleted within 30 days after the account closes. |
| Billing records | As long as tax law requires. |
| Customer workspace data (roles, candidates, interviews, messages) | For the life of the customer's account, as the customer instructs. Deleted within 30 days after the contract ends, after the customer has had the chance to export it. |
| Candidate data | While it is relevant to a customer's hiring. Deleted when you make a valid request. We keep a minimal do-not-contact record, such as an email address or phone number, so that an opt-out is honoured. |
| Company Room business contacts | While the research is relevant. Deleted when you make a valid request. |
| Google tokens | Deleted when the Google account is disconnected. |
| Security and usage logs | For a limited period, for security and troubleshooting. |
| Backups | Deleted data leaves our backups on their normal rotation. |
11. Security
We protect personal data with:
- Encryption in transit: our website and the product use HTTPS.
- Encryption at rest for Google OAuth tokens.
- Limited access: only EmployLabs staff who need personal data for their work can access it.
- An audit log of actions taken in the product.
- Private recordings: interview recordings are visible only to people the customer authorises.
No system is perfectly secure. If you think something is wrong, tell us at saurabh@weemploy.world.
12. Your rights
Your rights depend on the law that applies to you.
If the GDPR applies to you, you can:
- access the personal data we hold about you and get a copy;
- correct data that is wrong or incomplete;
- have your data deleted;
- restrict how we use it, or object to our use of it based on legitimate interests;
- receive the data you gave us in a portable format;
- withdraw your consent at any time, where we rely on consent;
- complain to a data protection supervisory authority, for example in the country where you live or work.
If India's Digital Personal Data Protection Act, 2023 applies to you, you can:
- get a summary of your personal data, how we process it, and who we have shared it with;
- have your data corrected, completed, updated or erased;
- withdraw your consent at any time;
- nominate another person to use your rights if you die or cannot act yourself;
- have your complaint handled by us first, and then complain to the Data Protection Board of India.
How to use your rights. Write to saurabh@weemploy.world, or follow the steps on our Privacy choices page. You do not need an account. We verify your identity before we act, and we reply within 30 days.
If your data sits in a customer's workspace, that customer decides for its workspace. We may pass your request to the customer and help it respond.
13. Choices for candidates
If EmployLabs or a company using EmployLabs contacted you, you can:
- Stop being contacted. Click the unsubscribe link in any outreach email, or ask us by email. We keep a do-not-contact record so that we stop contacting you at the email, phone or profile you gave us.
- See, correct or delete your data. Email us with your request. Our Privacy choices page says what to include.
- Know how interviews are used. Interviews with Naira are recorded and transcribed. The recording, transcript and scored report go to the company hiring for the role, and a person at that company makes the decision.
14. Children
EmployLabs is not for anyone under 18. We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete it.
15. Changes to this policy
We may update this policy. When we do, we change the date at the top. For material changes, we tell customers by email or in the product before the change takes effect. If a change affects how we use Google user data, we ask for your consent before the new use begins.
Questions, requests and complaints about privacy: saurabh@weemploy.world. We reply within 30 days.
