Privacy Policy

Last updated: 18th of May 2026
Company: SlashHash B.V. – KVK 97824216

Introduction

This Privacy Policy explains how SlashHash B.V. ("we," "us," or "our") collects, uses, stores, and protects personal data when you use our website, app, and services (the "Platform"), including AI-powered recruitment, job matching, hiring, and career guidance features. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR).

The Platform may be used by job seekers ("Candidates") and employers, recruiters, staffing agencies, or hiring organizations ("Employers"). This Policy applies to all users of the Platform.

By using our Platform, you acknowledge and agree to the processing of your personal data as described below.

1. Definitions

• Website: jobs.slashhash.ai
• App: SlashHash mobile or desktop applications, including updates and features.
• Platform: Collectively refers to the Website and App.
• Candidate: An individual using the Platform to search for employment opportunities.
• Employer: A business, recruiter, staffing agency, or hiring organization using the Platform for recruitment.

2. Personal Data We Collect

We may collect, use, and store the following categories of personal data:

• Identity Data: First name, last name, email address, address, date of birth, telephone number; for Employers: company representative name, company registration information, and job title.
• Contact Data: Address, email address, telephone number.
• Engagement Data: How you use our Platform, jobs viewed/applied for, interview feedback, messages sent/received; for Employers: candidate searches, recruiter interactions, and hiring activity.
• Profile Data: Username, password, CV/resume, interests, feedback, education, work history, languages, salary information (if provided), job preferences; for Employers: employer profile information, company descriptions, recruiter preferences, and hiring requirements.
• Technical & Usage Data: IP address, login data, browser type/version, operating system, device information, time zone, location, browser plug-ins, pages visited, Platform interactions.
• Marketing & Communications Data: Your communication and marketing preferences.
• Special Categories of Data: Ethnicity, sexual orientation, gender identity. You provide this data with explicit consent.
• Aggregated Data: Statistical or demographic information derived from your personal data, anonymized so you cannot be identified.

3. How We Collect Personal Data

• Direct interactions: Information you provide via forms, emails, messages, or support requests.
• Automated technologies: Technical and usage data collected via cookies, device interactions, or AI chat features.
• Third parties and public sources: Employers using our Platform, LinkedIn, and other publicly available sources.

4. Legal Bases for Processing

We process your personal data under the following GDPR legal bases:

Note: We may process data for multiple legal bases depending on the purpose.

5. Data Processing Roles

Depending on the context, SlashHash B.V. may act as either:

• a Data Controller for Platform operations, analytics, security, and account management; or
• a Data Processor acting on behalf of Employers in connection with recruitment activities.

Where required by law, separate Data Processing Agreements (DPAs) may apply. Please contact privacy@slashhash.ai to request a DPA.

6. Employer & Recruiter Responsibilities

Employers and recruiters using the Platform act as independent data controllers for Candidate Data they access through the Platform.

Employers are responsible for:

• complying with applicable privacy and employment laws,
• processing Candidate Data lawfully and for legitimate recruitment purposes only,
• implementing appropriate technical and organizational security measures,
• using Candidate Data solely for legitimate recruitment purposes.

SlashHash B.V. is not responsible for an Employer's independent handling of Candidate Data after access has been granted through the Platform.

7. AI and Automated Processing

Our Platform includes AI features, including a large language model (LLM) by OpenAI:

• Chat inputs are processed to provide job guidance, resume analysis, and role recommendations.
• Chat inputs are encrypted at rest, stored only in the EU, and not used to train external AI models.
• Messages may be securely stored and internally reviewed for safety, support, debugging, abuse prevention, and service improvement purposes. Data is not used to train external AI models.

By using the AI features, you acknowledge and agree to the processing described in this Policy.

8. Failure to Provide Personal Data

Where personal data is required by law or to perform a contract with you (e.g., providing your CV, contact info, or using AI features), failure to provide such data may prevent us from providing certain services. We will notify you if this is the case.

9. Data Security

• Encryption at rest: All personal data is encrypted using unique per-user encryption keys. When you delete your account, the keys are destroyed, making the data permanently inaccessible.
• Data in transit: All data transmitted between your device and our Platform is encrypted via TLS.
• Data location: All personal data is stored within the European Economic Area (EEA).

Access is limited to authorized personnel, who process data only on our instructions and are bound by confidentiality agreements. We have procedures for data breach detection, reporting, and response.

10. Cookies

We use cookies and similar technologies to enhance functionality, analyze usage, and provide personalized content. Non-essential cookies are set only after consent. You may manage or withdraw consent via our cookie settings.

For more information, see our Cookie Policy.

11. Disclosures of Your Personal Data

We may share your personal data with:

• Employers: Third parties using our Platform to select and recruit candidates. Candidate data may be shared with Employers for recruitment purposes, and Employer data may be shared with Candidates where relevant to job applications or hiring processes.
• Service providers: IT, software, system administration, analytics, and AI providers (acting as processors).
• Professional advisers: Lawyers, auditors, bankers, insurers.
• Legal authorities: Where required by law.
• Business transfers: In the event of a merger, sale, or acquisition.

All third parties must process data in compliance with GDPR and only for specified purposes.

12. International Transfers

We do not transfer data outside the EU/EEA without appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions.

13. Data Retention

We retain personal data only as long as necessary for contractual, legal, regulatory, or business purposes. Data may be anonymized for research or statistical purposes indefinitely.

14. Your Rights

Under GDPR, you have the right to:

• Access, correct, or erase your data
• Object to or restrict processing
• Request portability of your data
• Withdraw consent
• Lodge a complaint with a supervisory authority

Requests are usually processed within one month, and we may request information to verify your identity. No fee is required unless requests are clearly excessive or repetitive.

15. Opting Out of Marketing

You can withdraw consent to marketing communications at any time via unsubscribe links or by contacting us at privacy@slashhash.ai.

16. Change of Purpose

We will only use personal data for the purposes described, unless we reasonably consider a compatible purpose. If we process your data for a new purpose, we will notify you.

17. Contact Us

For questions or to exercise your rights:

SlashHash B.V.
General support: jobs.support@slashhash.ai
Privacy inquiries: privacy@slashhash.ai
KVK: 97824216
Address: Newday Offices Amsterdam Zuid, Apollolaan 151, 1077 AR Amsterdam Netherlands