Transparency
Last updated:
What we collect, what for, who receives it, how long we keep it and what you can do about it. In full, in one place.
Who answers for your data
The data controller is MatchAccuracy. For anything about your data, including exercising your rights, write to datos@matchaccuracy.eu. There is no designated data protection officer: not an oversight — this activity is not among those that require one. Data is processed in Irlanda (eu-west-1) and the application runs in Fráncfort (fra1).pending confirmation
What we process your data for
Four purposes, and no others. Each has its own basis and its own retention period:
- Assessing your answers for the role you applied for.
- Checking that the person taking the test is you, with a 1:1 comparison between a camera frame and your ID photo.
- Detecting and documenting irregularities during the test.
- Reading your CV to prepare the record the recruiter consults.
How long we keep each thing
Every class of data has its period and the moment it counts from. The periods in this table are the ones the system enforces: they are read from the same place that applies them.
| Data | Period | Clock starts when |
|---|---|---|
| Session video and audio | 90 days | the session ends |
| Face comparison and its frames | 72 hours | the comparison is made |
| Answers, dossier and score | 24 months | the test is completed |
| CV handed over for this test | 24 months | the CV is handed over |
| CV kept for future processes | 24 months | the box is ticked, or renewed |
| Consent record | 3 years | it is accepted or declined |
| Expired or declined invitations | 30 days | it expires or is declined |
| Recruiter notifications | 12 months | the notification is issued |
| Invoices and account records | 6 years | the invoice is issued |
| Account audit trail | 4 years | the event is recorded |
| Access log | 24 months | the access is recorded |
| Report capture | 30 days | the report is captured |
| Adjustment request | 30 days | the adjustment is requested |
| Invitation credit record | 24 months | the movement is recorded |
Classes marked with an asterisk are special categories under article 9 — biometrics or health — which is why they carry the shortest period in the table.
The table says when each class is deleted. It does not say whether the sweep for your class has already run: that is a different question, and this page will not answer it until it can answer with a fact.
Who else receives your data
The providers involved in the processing, what they do it for, and where. They are named here, and only here:
| Who | What for | What they receive | Where |
|---|---|---|---|
| Amazon Web Services | Storage, database, queue | CV, session video, answers, accounts | eu-west-1 |
| Vercel | Running the web application | Everything that travels in a request | fra1 |
| AWS Textract | Extracting the text of the CV | The candidate’s PDF | eu-west-1 |
| AWS Bedrock | Reading and interpreting the CV | The text of the CV | UE |
| AWS Rekognition | 1:1 face match | Camera frame and document photo | eu-west-1 |
| AWS SES | Sending email | Name and email address | eu-west-1 |
| Vercel Analytics | Usage measurement | Navigation metrics | — |
| Stripe | Payment | The recruiter’s payment details | EE. UU. |
| Arcjet | Abuse protection | IP and headers of every protected request | EE. UU./global |
| GitHub, Inc. | Bug and feedback reports | The reporter’s email and their free text | EE. UU. |
This list is derived from the code and is pending confirmation by the controller.
Your result and everyone else’s
Each candidate’s result, aggregated and anonymised, contributes to calculating the relative position of others in their discipline. Nobody sees your result that way: what travels is the aggregate, not your test.
What you can do
Over your data you may exercise, at any time and without justifying yourself:
- Access: know what we hold and get a copy.
- Rectification: correct anything that is wrong.
- Erasure: ask us to delete it before its period runs out.
- Objection and restriction: ask us to stop processing it, or to freeze it.
- Contest: ask for a person to review a decision affecting you.
Write to datos@matchaccuracy.eu and we answer within the legal period of one month. Losing your test link takes none of your rights away: your email address is enough to find you.pending confirmation