Legal

Privacy Policy

Last updated: May 10, 2026

This Privacy Policy describes how Cestone AI ("we") collects, uses, and shares information when you use placement.solutions ("Service").

1. What we collect

Account information: name, work email, organization, password (hashed).

Customer Data: resumes, candidate records, client/job data, pipeline activity that you upload or generate via the Service.

Usage data: page views, button clicks, feature usage, IP address, browser type. Used to operate and improve the Service.

Billing: processed by our payment provider (Stripe). We never see or store full card numbers.

2. How we use it

3. Sharing & sub-processors

We do not sell your data. We share information only with sub-processors strictly necessary to operate the Service:

We require all sub-processors to maintain appropriate security and confidentiality safeguards.

4. Data retention

We retain Customer Data for as long as your account is active. Upon account deletion you may export your data for 30 days; after that we delete it from production systems within 60 days. Backup copies are deleted within 90 days.

5. Your rights (GDPR / CCPA)

Depending on your jurisdiction you may have the right to: access, correct, or delete your personal data; export your data in machine-readable form; object to or restrict certain processing; lodge a complaint with a supervisory authority. To exercise these rights, email hello@placement.solutions.

If you are a candidate whose data was uploaded by a recruiting customer, please contact that customer directly. We act as a data processor on their behalf.

6. Cookies & tracking

We use a small number of essential cookies to keep you signed in and to remember your preferences. With your opt-in consent we also use product analytics cookies (page views, feature usage) to improve the Service. We do not use advertising or cross-site tracking cookies. See our Cookie Policy for details.

7. Security

Data is encrypted in transit (TLS 1.3) and at rest. Account passwords are hashed with industry-standard algorithms. Access to production systems is restricted, logged, and reviewed.

8. International transfers

The Service is hosted in the United States. If you access the Service from outside the United States your data will be transferred to and processed in the US. By using the Service you consent to this transfer.

9. Children

The Service is not directed to children under 18 and we do not knowingly collect personal information from children under 18.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated by email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance.

11. Contact

Questions about this Policy? Email hello@placement.solutions.