Candidate Data Usage Policy

1. What we collect from talent

When a candidate uses Geteroom we collect profile details, simulation responses, decision logs, reflection notes, capability signals generated from their work, and basic device/usage telemetry needed to run the platform reliably.

2. Why we collect it

• Produce honest, verifiable capability signals from real work.
• Match candidates to roles where their proven capabilities fit.
• Give recruiters context so hiring decisions rely on evidence, not assumptions.
• Detect integrity issues that would distort the signal for everyone.

3. Visibility & discoverability

Candidates control discoverability from their profile: anonymous mode, recruiter visibility, proof visibility, and direct-messaging preferences. Recruiters only see a candidate's submitted work for roles where the candidate has applied or been invited.

4. Lawful basis (Kenya DPA 2019)

We process candidate data on the basis of (a) the candidate's consent when creating an account and submitting work, (b) the legitimate interest of evaluating candidates for roles they have engaged with, and (c) compliance with applicable Kenyan employment and data-protection law. Candidates may withdraw consent at any time by deleting their submissions or account.

5. Retention

Capability submissions are retained while the candidate's account is active and for a reasonable archival period afterwards so recruiters who already evaluated a candidate keep a consistent record. Talent can request deletion of specific submissions or their entire account at any time.

6. Sharing

Candidate submissions are shared with the company workspaces evaluating them. We use a small set of vendors (hosting, email, analytics) that process data on our behalf under written contracts. We do not sell candidate data and we do not share it with third parties for advertising.

7. Pilot-access limitations

During the pilot, Geteroom is operated as a curated, low-volume platform. Some features (advanced analytics, exports, integrations) are rolled out progressively. Candidate-data handling rules in this policy apply to every pilot organization without exception.

8. Candidate rights

• Access a copy of your data.
• Correct inaccurate profile or submission details.
• Delete submissions or your account.
• Object to recruiter visibility at any time.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.