Candidate Privacy Policy
Last updated: 1 October 2026
This policy covers people who apply to, connect with or are approached by Firmable, and their referees. Firmable Pty Ltd (Level 6, 6 Adolph St, Cremorne VIC 3121, Australia) and the Firmable company or employer of record in the country of the role are responsible for your information. Questions go to people@firmable.ai or privacy@firmable.ai If you join us, our Employee Privacy Notice applies instead.
What we collect and why
We collect your contact details, application, interview notes, assessments, references, salary expectations and messages with us. We use them to assess your application, arrange interviews, make offers, contact you about future roles if you agree, and meet our legal obligations. We get most of it from you. We may also get it from recruiters, employees who refer you, your referees and public profiles such as LinkedIn; if we do, we email you to tell you. We record interviews only if you agree at the start. Saying no does not affect your application.
AI
Teamtailor Co-pilot summarises CVs and interviews and matches applications against the criteria for a role, using your application, answers and interview transcripts. It helps us consider a shortlist. It does not make decisions: a person reviews every application and makes every hiring decision.
Sharing and storage
We share your information with Firmable group companies (Australia, India, New Zealand, Singapore, United States), hiring managers, recruiters working with us, Teamtailor and our assessment providers, an employer of record if one employs the role, our advisers, and government agencies where the law requires. Teamtailor stores it in its Asia-Pacific region. We do not sell your information or share it for advertising.
How long we keep it
4 years from your last activity with us, then we delete it. You can ask us to delete it sooner unless the law requires us to keep it.
Your rights
You can ask to access, correct or delete your information, or withdraw your consent, by emailing people@firmable.ai or using the data request form on this site. We verify your identity and respond within 20 days. If you are unhappy with our response, you can complain to your regulator: OAIC (Australia), Privacy Commissioner (New Zealand), PDPC (Singapore), Data Protection Board (India), PDP Commissioner (Malaysia), National Privacy Commission (Philippines) or the California Privacy Protection Agency.
California applicants: this policy is our notice at collection. We collect identifiers, professional, education and audio information (interview recordings), and inferences drawn from matching your application to role criteria, for the purposes above, and keep them for 4 years. We have not sold or shared them in the past 12 months.
