Privacy and data

Who is responsible

The company that invites a candidate decides why the interview happens and what is done with it. Under GDPR they are the data controller. First Round processes the data on their behalf, as their data processor.

Candidates with questions about a specific application should contact the company that invited them first.

What we collect

• The candidate's name and email, entered by the company that invites them.
• A video and audio recording of the interview, and a written transcript.
• An assessment of each competency, written from the transcript only.
• A short summary of the CV, if the candidate uploads one. The CV file itself is read once and not kept.
• The decision the recruiter records, with their notes.

What we never do

• We do not analyse faces, voices or emotions. The assessment reads what was said, nothing else.
• We do not give candidates an overall score or rank them against each other.
• We do not let the system make decisions. A person records every decision.
• We do not sell data or use it for advertising.

Where data is processed

Today, part of the processing happens outside the EU. The live voice conversation runs through ElevenLabs, and the assessment and CV summary are written by Anthropic's Claude. Both are US companies, and data sent to them can be processed in the US.

We are moving the voice conversation and the assessment to providers in EU regions. Until that is done we will not describe First Round as EU-hosted, and we will tell customers before it changes.

How long we keep it

Recordings, transcripts and assessments are kept for as long as the inviting company needs them for the recruitment. We are building automatic deletion, with a period each company sets and six months as the default.

Until that is in place, we delete an interview when the company or the candidate asks us to.

Candidates' rights

Every candidate can:

• ask for a person instead of the AI interviewer, at any point;
• read their own transcript after the interview;
• ask to see the data held about them, have it corrected or have it deleted;
• complain to Datatilsynet, the Danish Data Protection Agency.

To use any of these rights, contact the company that invited you, or write to us at hello@firstround.dk.