IVS AI Agent

Privacy notice

This notice describes how the service handles personal data. It is a summary in plain language; the contract with your organization takes precedence.

Who is responsible

Companies that use IVS AI Agent to screen candidates decide which candidates are contacted and why. They are the controller of that data. IV Solution operates the service on their behalf as a processor. For the accounts of people who sign in to the service, and for messages sent through the contact form, IV Solution is the controller.

What is processed

For candidates: name, phone number or messaging identifier, the position they applied for, the messages exchanged with the assistant, and the answers and score derived from them. For users of the service: name, e-mail address, a password stored only as a salted hash, and technical logs needed to keep the service secure.

How messages are handled

Messages travel through the messaging provider chosen by the company (WhatsApp Business Platform by Meta, or Viber). To understand free-text answers, the text of a message is sent to a language-model provider together with the screening questions. It is used to produce the reply and is not used by us to train models.

Consent and opting out

The assistant introduces itself as automated and asks for permission before the first question. Replying STOP ends the conversation and blocks further messages to that number from the same company.

Retention and deletion

Conversations are kept until the company deletes the candidate or closes its workspace. A candidate can ask the company that contacted them for access to, correction of, or deletion of their data; the company can delete a candidate and all of their conversations in one step.

Phone calls

A voice agent introduces itself as a virtual assistant at the start of a call. What the person says is turned into text so that the agent can answer; the transcript, the outcome and the recorded details are kept with the call. Audio is stored only when the company turns recording on, and it must then tell people so. A person who says they do not want calls is not called again.

Security

Access tokens of messaging channels are encrypted at rest. Each company sees only its own data. Sign-in sessions use short-lived tokens kept in cookies that scripts cannot read.

Cookies

The site uses only cookies that are necessary: the sign-in session and the chosen language. There is no advertising or cross-site tracking.

Contact

Questions about this notice or a request concerning your data can be sent through the contact page.