/Application PolicyApplication Policy
Last updated: March 2026
1. Who We Are
a.team operates this recruiting application on behalf of its clients. When you submit an application, a.team acts as the data controller responsible for your personal data. For any privacy-related questions, contact us at dor@a.team.
2. What We Collect
When you apply for a role, we collect:
- Name and email address
- Phone number (optional — only if you provide it)
- LinkedIn profile URL (optional)
- Resume / CV (PDF)
- Availability and any other information you include in your application
3. Why We Collect It
We collect this data solely to evaluate your suitability for the role you applied to and, if appropriate, to consider you for future opportunities on our talent bench.
Legal basis (GDPR): Processing is carried out on the basis of your explicit consent given at submission, and on our legitimate interest in recruiting qualified candidates for active engagements.
4. Third-Party Processors
Your data is shared with the following sub-processors solely to operate this service:
OpenAI
Your resume is sent to OpenAI's API for automated parsing and fit assessment. No data is used to train OpenAI models. Processed under OpenAI's Privacy Policy.
Slack
A notification containing your name, email, and application summary is sent to our internal Slack workspace when you apply. This is used to alert the recruiting team. Processed under Slack's Privacy Policy.
Twilio
If you provide a phone number, we may use Twilio to send you an SMS for recruiting outreach. Your phone number is only shared with Twilio if we initiate contact. Processed under Twilio's Privacy Policy.
Supabase
Application data and resume files are stored in Supabase (PostgreSQL + object storage), hosted on AWS infrastructure. Processed under Supabase's Privacy Policy.
5. Talent Pool
If your application is strong but there is no immediate fit, we may add you to a.team's talent pool — a curated bench of candidates considered for future engagements. You will be notified if this occurs. You can request removal at any time by emailing dor@a.team.
6. Data Retention
- Rejected applications: retained for 12 months after the final decision, then deleted.
- Active candidates and talent pool members: retained for the duration of active consideration or engagement.
7. Your Rights (GDPR)
If you are located in the EU/EEA or UK, you have the following rights:
- Access: request a copy of your personal data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data (Article 17)
- Restriction: limit how we process your data
- Portability: receive your data in a structured format
- Objection: object to processing based on legitimate interest
- Withdraw consent: at any time, without affecting prior processing
To exercise any of these rights, email dor@a.team. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
8. Security
Application data is stored in a SOC 2 Type II compliant infrastructure (Supabase/AWS). Access to candidate data is restricted to authorized a.team staff only, protected by authentication and row-level security policies. Resume files are stored with access-controlled signed URLs.
9. Contact
For any questions about this policy or your data, contact dor@a.team. For a.team's full platform privacy policy, see platform.a.team/privacy-policy.