verso
← Help center

Data, privacy and GDPR

Who owns candidate data, how long it's kept, and how to handle requests.

Who is responsible

Candidates' data is yours: your company is the controller. Verso processes it for you to run the interviews, under the data processing agreement (DPA) you accepted at sign-up. A signed copy is in Settings.

Data is hosted in the EU. The AI, voice and email providers we use are listed in the DPA and the privacy policy.

How long data is kept

  • Candidate data is deleted automatically 12 months after the job closes.
  • For jobs that are never closed, it's deleted 18 months after the application.
  • Deleting a job deletes all its candidates' data.

Only anonymous numbers, such as scores per criterion, are kept for statistics. They can't identify anyone.

Candidate requests

  • Delete: open the candidate and use Delete candidate data at the bottom. It's permanent.
  • Withdraw: candidates can withdraw and delete their own data from their private link, or get the link again at /my-data.
  • Human review: candidates can ask your company for a person to review their application. The AI only recommends, so your normal review covers this; reply to them directly.
  • Copy of their data (an access request): email [email protected] and we'll send it within a few days.

Read more

Next
Troubleshooting and FAQ