Privacy Policy

Last updated: October 1, 2026
Effective: October 1, 2026

This policy explains what information Kendyl collects, why we collect it, who can see it, how long we keep it, and what you can do about it.

It covers the Kendyl website (https://kendyl.io), the Kendyl web app, the Kendyl desktop app for Windows, the browser time tracker, AI interviews (including interview links that Businesses and Recruiters send to candidates), and the Jira integration once it is available.

Contents

Kendyl at a glance

  • The desktop app captures your work only while your timer is running. In each 10-minute block it takes at most one screenshot, at a random moment (one image per screen if you choose to capture all screens). It also counts how many keys you press and how many times you click or scroll each minute, and records the title of the window you used most. It never records which keys you press or what you type. The Business you work for sees all of this. See Section 6.
  • AI interviews are recorded and scored by AI. Your video and audio are recorded, the conversation runs through OpenAI, and AI produces scores. Candidates on interview links are sorted automatically by their score, and a Business or Recruiter can have Kendyl email each group automatically. Talent onboarding interview results can be viewed by any signed-in Kendyl user. See Section 5.
  • We share information with the people you work with, and with service providers such as Amazon Web Services, OpenAI, Stripe, Wise and SendGrid. See Section 7.
  • Closing your account does not erase everything. Contracts, time, payment records, recordings and other information are kept. You can ask us to delete more. See Section 9 and Section 11.
  • Questions? Write to hello@kendyl.io.

1. Who we are

Kendyl is operated by Kendyl LLC ("Kendyl", "we", "us", "our"), 18 West 18th Street, Suite 3401, New York, NY.

Kendyl is a marketplace and a set of tools for hiring and working together. Businesses post jobs, interview candidates and hire Talent. Recruiters submit candidates. Talent find work, track their time and get paid.

In this policy:

  • Business means a company that uses Kendyl to hire or work with people, and the team members who use Kendyl for it.
  • Talent means a person who works with Businesses through Kendyl.
  • Recruiter means a person who submits candidates, or posts jobs, for Businesses through Kendyl.
  • Candidate means a person who is invited to an AI interview through a link a Business or Recruiter shares, or who is submitted by a Recruiter, whether or not that person has a Kendyl account.

2. Who is responsible for your information

  • Kendyl decides how Kendyl works, and is responsible (the "controller") for the information described in this policy. That includes accounts, profiles, the marketplace, AI interviews, contracts, time tracking on Kendyl contracts, payments and payouts, and keeping Kendyl secure.
  • A Business that receives information about you through Kendyl is responsible for its own use of that information. This includes your profile, interview results, tracked time, screenshots and activity. If you have a question about how a Business uses what it received, you can ask the Business directly, and you can also contact us.
  • Interview links. When a Business or Recruiter invites candidates to an AI interview through its own link, .
  • Tracking a Business's own staff. If a Business uses Kendyl to track the time of its own employees rather than Talent hired on Kendyl, .

3. Information we collect

Most of this information comes from you. Section 3.13 lists what we get from other people and services.

3.1 Your account (everyone)

  • Name, email address and password. We store your password only as a one-way hash, never in a form that can be read back.
  • Account type and status, such as Business, Talent, Recruiter or Candidate.
  • Phone number and country code, if you verify a phone. We send the verification code by text message through Twilio.
  • Time zone. For Talent, also city, country, street address and postal code.
  • Notification preferences.
  • How you arrived. Whether you signed up through a job or interview link (and which link) or came directly, and a campaign value carried in the link you used.
  • Sign in with Google. If you use it, we receive the name and email address on your Google account.
    • On the desktop app, Google sign-in happens in your web browser. The app keeps your Kendyl sign-in on your computer, encrypted with Windows' built-in data protection.
  • Sign-in sessions. For each device you sign in on, we record:
    • your IP address and the type of browser or app;
    • an approximate location (such as city and country), when our network provider supplies one based on your IP address;
    • when the session started, when it was last used, when it expires and when it was signed out.

3.2 Talent profiles

  • Profile details: photo, title and description of your services, seniority, availability, rate or budget, languages, skills, education and work experience.
  • Resume. When you upload a resume, our servers extract its text, using text recognition for scanned files. We then send the text to OpenAI to fill in your profile.
  • LinkedIn. If you give us your LinkedIn profile address and ask us to import it, our servers fetch that public page and send its text to OpenAI to fill in your profile.
  • Interview results from your Kendyl onboarding interviews. See Section 5.
  • Ratings and public feedback that Businesses leave at the end of a contract.
  • Job matches. We calculate how well your profile and interview results match job posts.

3.3 Businesses

  • Business details: name, website, location, time zone, logo, description and hiring manager.
  • Culture answers, including a recorded culture interview if you take one.
  • Team members and invitations: names, email addresses and roles.
  • Hiring activity: job posts, careers page settings, interview links and questions, and the notes, tags and shortlists you keep about candidates.
  • Billing information. See Section 3.8.

3.4 Recruiters, and the candidates they submit

  • Your recruiting background: professional background, recruiting experience, clients and placements, motivation, and how you heard about Kendyl.
  • Candidates you submit: name, email address, phone number, LinkedIn profile and resume.
  • Payout details and tax forms. See Section 3.8 and Section 3.9.

3.5 AI interviews

  • Video and audio recordings, transcripts and your answers.
  • AI-generated scores and explanations, and integrity signals.
  • Answers to screening questions, such as expected salary, start date and availability.

Section 5 explains all of this in detail.

3.6 Time tracking

  • Desktop app: screenshots, keyboard and mouse activity counts, window titles, time blocks and device details.
  • Browser tracker: start, pause and stop times, the task, and which device started the timer.

Section 6 explains exactly what is and is not captured.

3.7 Contracts, time, disputes and feedback

  • Offers and contracts: rate or fixed price, weekly hour limit, dates, notes, cancellation reasons and fees.
  • Offers to people who don't have an account yet: name, email address and phone number.
  • Time records: tracked time and the notes and files you add to it, manual time (start, end and memo), approvals and invoices.
  • Tasks: their descriptions, comments and attachments, including tasks imported from Jira. See Section 13.
  • Projects a Business groups tasks into, and the timesheets it views or downloads from them, including as a spreadsheet (CSV) file.
  • Bonuses a Business sends, with any message it writes.
  • Disputes: the Business's reason, the Talent's response and attachments, and the outcome.
  • Contract history: a record of changes to each contract and who made them.
  • End-of-contract feedback: a private reason and recommendation score, and a public rating and comment.

3.8 Payments and payouts

Businesses. You enter card details into a form provided by Stripe, so card numbers go to Stripe, not to Kendyl. We keep:

  • the identifiers Stripe gives us for you and your payment method;
  • a summary of the payment method, and your billing details;
  • records of invoices, charges, fees and failed payments.

Talent:

  • Your wallet balance, earnings and withdrawals.
  • Your payout details: account holder name, payout method, bank country and bank name, account and routing numbers, the email address of your Wise account, legal and account type, and home address.
  • We store account and routing numbers encrypted. We share payout details with Wise to set up and send your payments.
  • To protect against fraud, withdrawals are held for three days after your payout details change.

Candidates who are paid through Kendyl:

  • A record of your payouts.
  • Your payout details. Which ones depend on the country of your bank: for example account holder name, account and routing numbers, IBAN, SWIFT/BIC or sort code, account type and address, and, where the payout country requires it, a national taxpayer ID such as an Argentine CUIT or a Brazilian CPF.
  • We store these details encrypted. We share them with Wise to set up and send your payments.

Recruiters. We keep your account holder name and your bank account and routing numbers, stored encrypted, and a record of your payouts.

People Kendyl pays through its payroll tool. We keep name, email address, salary, currency, country and payout recipient.

3.9 Tax forms

  • The W-9, W-8BEN or W-8BEN-E forms you upload. These include your taxpayer identification number, name and address.
  • Kendyl staff review the forms. For Talent, withdrawals become available once the form is approved.

3.10 Messages, support and contact forms

  • Chat: the messages and attachments you send, and whether each one has been read, edited or deleted.
  • Help, support and feedback forms: what you write, plus any phone number, "how you heard about us" answer or call-booking details you give.
  • Enquiries from our website: email address, name, business name, website and message.
  • Interview feedback: your comments and basic information about your browser.

3.11 Information from your devices, and error reports

Web. IP address, browser and device type, the pages and requests you make, plus the cookies and browser storage in Section 3.12.

Desktop app:

  • A random identifier created when the app is installed.
  • A clock reading used to detect changes to the computer's clock.
  • The app's version and the fact that it runs on Windows.
  • When the app checks for updates, it contacts Kendyl's update service.
  • Diagnostic reports stay on your computer unless you send one to us. The app can write a report file with your Windows version, memory, screen layout and recent app logs, with window titles removed from the logs.

Error and performance reports. The web app and our servers send reports to Sentry, our error-monitoring provider. These are not only reports of things going wrong.

  • The web app sends performance data for every page you open, a report for each error, and a report for each request to our servers that takes more than 3 seconds. These include your IP address, your browser and device, and the full address of the page. A page address can contain a one-time link, such as an email verification, password reset or invitation link, and your email address.
  • Our servers send error reports that can include your user ID, email address, name, IP address, browser, the address requested, and a copy of the request. Passwords, tokens, keys and bank account numbers are removed from that copy first. Our servers also send performance data for a sample of requests, and can send signals about the quality of interview audio and transcripts.
  • The desktop app shows Kendyl's web pages inside it, and those pages can send the same reports as the web app.

Server logs. Our servers keep logs of requests and events. These can include account identifiers and email addresses.

3.12 Cookies and similar technologies

Cookies and storage set by Kendyl:

  • auth_role cookie

    What it does
    Remembers which kind of account you are signed in with
    How long it lasts
    1 day

  • ai_links_candidate_<link> cookie

    What it does
    Remembers you as the candidate on an interview link
    How long it lasts
    7 days

  • sidebar_state cookie

    What it does
    Remembers whether the side menu is open
    How long it lasts
    7 days

  • Browser storage (local and session storage)

    What it does
    Keeps you signed in (sign-in tokens) and keeps a copy of your account and Business profile. Also remembers where to return after signing in, the campaign value from the link you used, which tips you have already seen, your camera and microphone choices for interviews, the progress of an interview, and the progress of uploads
    How long it lasts
    Until you sign out or clear it. Some items, such as which tips you have seen, stay after you sign out until you clear them

Content from other companies. Some pages load content from other companies. They receive your IP address and browser details when it loads, and handle that information under their own privacy policies.

  • Contentsquare runs on the Business dashboard and on the pages of Kendyl's hiring app: its sign-up and sign-in pages; jobs, interviews, candidates, shortlists, messages, contracts and settings; interview links and interview pages; public careers pages; and the candidate dashboard, including its payout pages. Once it has loaded, it can keep running on other Kendyl pages you open in the same browser tab. It records how you use those pages, such as page views, clicks and scrolling, so we can improve them. It may set its own cookies.
  • Google on sign-in pages (Sign in with Google) and on the profile form in the hiring app (address suggestions).
  • Stripe on payment pages.
  • Calendly on the page for booking a hiring intake call.
  • flagcdn.com for country flag images.

Advertising. We do not use advertising or retargeting pixels, such as those from Google Ads, Meta, LinkedIn or TikTok.

Your choices.

  • Kendyl does not currently offer a cookie settings tool. You can block or delete cookies in your browser, but signing in and some other features will not work without them.
  • We do not currently respond to "Do Not Track" or Global Privacy Control signals.

3.13 Information we get from other people and services

  • Businesses give us candidates' details for interviews and offers. They also send team invitations, and keep notes, tags and ratings about candidates and Talent.
  • Recruiters give us the details of the candidates they submit.
  • LinkedIn: the public profile page whose address you give us.
  • Google: your name and email address, when you use Sign in with Google.
  • Stripe and Wise: the status of payments and transfers.
  • Atlassian: when the Jira integration is available. See Section 13.
  • Our network providers: an approximate location based on your IP address.

If someone else gave us your information and you have questions, contact us at hello@kendyl.io.

4. How we use information

  • Create and run your account, sign you in, and keep sessions secure

    Information used
    Account and session information
    Legal basis (where the law requires one)
    Performing our contract with you

  • Run the marketplace: profiles, job posts, matching, offers, contracts and messages

    Information used
    Profile, Business, job, contract and message information
    Legal basis (where the law requires one)
    Performing our contract with you

  • Run AI interviews, score them, sort candidates by fit, and produce results for you, Businesses and Recruiters

    Information used
    Recordings, transcripts, answers, scores and integrity signals
    Legal basis (where the law requires one)
    Performing our contract with you; our legitimate interest in reliable hiring;

  • Track time, calculate billable time, invoice Businesses and handle disputes

    Information used
    Time-tracking information, contracts and time records
    Legal basis (where the law requires one)
    Performing our contracts with Talent and Businesses; our legitimate interest in accurate billing

  • Detect tampering, fake activity and fraud

    Information used
    Device identifier, clock readings, activity counts, payout changes
    Legal basis (where the law requires one)
    Our legitimate interest in preventing fraud

  • Take payments and send payouts

    Information used
    Payment, payout and tax information
    Legal basis (where the law requires one)
    Performing our contract with you; legal obligation

  • Collect and review tax forms

    Information used
    Tax forms
    Legal basis (where the law requires one)
    Legal obligation

  • Send service emails and notifications

    Information used
    Contact information and notification preferences
    Legal basis (where the law requires one)
    Performing our contract with you

  • Notify our team about new sign-ups, job posts, submitted candidates, hires, payments and Recruiter payouts

    Information used
    Names, email addresses, roles, pay rates, salaries and amounts
    Legal basis (where the law requires one)
    Our legitimate interest in running the business

  • Fix errors, monitor reliability, and understand how pages are used

    Information used
    Error reports, logs and Contentsquare data
    Legal basis (where the law requires one)
    Our legitimate interest in a working, improving product

  • Provide support and answer enquiries

    Information used
    Messages, forms and diagnostic reports you send
    Legal basis (where the law requires one)
    Performing our contract with you; our legitimate interest

  • Comply with the law, enforce our terms, and protect users and Kendyl

    Information used
    Any information needed for that purpose
    Legal basis (where the law requires one)
    Legal obligation; our legitimate interest

Service emails. Kendyl sends emails about your account and your work, such as verification, password reset, invitations, contract and payment notices, and reminders.

  • In your notification settings you can turn off emails about new chat messages. Talent can also turn off the in-app notices about them.
  • The other switches in your notification settings do not yet change what you receive. Emails about your account, interviews, offers, contracts and payments are currently always sent.
  • Businesses and Recruiters can also turn on automatic emails to candidates for each fit group (see Section 5). These are sent through Kendyl.

5. AI interviews and automated assessment

Kendyl uses AI interviews in three places:

  • Talent onboarding, with a technical and a behavioral interview.
  • Interview links that a Business, or a Recruiter who posted a job, sends to candidates.
  • A Business's own culture and job interviews.

What happens during an interview

  1. Recording. With your browser's permission, Kendyl records your camera and microphone. The video is uploaded in short pieces while you talk, then combined into one recording. The audio is also extracted and stored separately. Kendyl keeps the pieces, the combined recording and the audio.
  2. The conversation. Your voice goes through Kendyl's servers to OpenAI's real-time voice service, which runs the AI interviewer. OpenAI also creates the interviewer's voice and transcribes the conversation.
  3. Integrity signals. During the interview, Kendyl notes:
    • when you switch away from the interview for more than half a second;
    • when an answer starts more than 8 seconds after a question;
    • when your audio drops.

    After the interview, the audio is analysed for typing sounds, other voices, signs of reading from a screen, background noise and microphone problems.

What the AI produces

Kendyl uses OpenAI's models to score your answers and your recording, mostly from 0 to 100, with short explanations. The scores cover:

  • Your answers: for example skills, role fit, seniority, communication, culture fit and enthusiasm.
  • Your spoken English: comprehension, fluency, grammar and vocabulary, with an overall level on the CEFR scale (A1 to C2).
  • How you come across when speaking, judged from the audio: communication tone, confidence, presence and an overall sentiment (positive, neutral or negative). These are assessed from features such as tone, pacing and hesitation.

Kendyl also calculates integrity scores from the signals described above.

Kendyl does not analyse your face, and does not use your face or voice to identify you.

How results are used

  • Talent onboarding:
    • The technical interview gives a score from 0 to 100. A score of 60 or more marks it as qualified, which is one of the steps to complete your Kendyl marketplace profile.
    • Kendyl calculates a match score from 0 to 100 for each job, from your profile and interview results. Once your interviews are complete, jobs that score under 60 are not shown in your job matches.
    • You cannot apply to a job through your job matches until your profile and both interviews are complete. You cannot apply if your technical result is "not qualified", or if the job scores under 60.
    • Any signed-in Kendyl user can view your Talent profile and your onboarding interview results, not only Businesses considering you for a job. Your profile is shown without your email address. The results include the interview video, your scores and qualification result, your English level, the scores drawn from your voice (see above), the written summary and skill assessments, the questions, and the transcript of your answers.
  • Interview links:
    • The Business or Recruiter that posted the job sees your recording, transcript, answers and scores.
    • Kendyl automatically sorts each candidate into Good fit, Potential fit or Not a fit. The group comes from your overall AI score for the interview, after Kendyl adjusts it: up or down when your seniority is above or below the job's, down when your expected pay or start date does not match the job's, and combined with a culture score when there is one. The adjusted score is the one the Business or Recruiter sees.
    • A Business or Recruiter can turn on emails that go out automatically to each group, including a "not a fit" email. When it does, an AI score can lead to an email telling you that you were not selected, without a person reviewing your interview first. These emails are off unless the Business or Recruiter turns them on.
    • The Business or Recruiter decides whom to hire.
  • AI can be wrong. Scores can be inaccurate or incomplete.

Your choices

  • Before an interview starts, your browser asks for permission to use your camera and microphone. If you do not want to be recorded, do not start the interview, and contact the Business or us about alternatives.

AI providers and training

  • OpenAI processes interview, resume and LinkedIn information for us as a service provider.
  • Kendyl does not currently train AI models on your information.

6. Time tracking: what the desktop app and browser tracker capture

This section is for Talent who track time on Kendyl, and for Businesses who review it. We want you to know exactly what is captured before you start a timer.

6.1 The desktop app (Windows)

The desktop app only captures work information while your timer is running.

  • The app counts keyboard and mouse events while it is open, but it throws away anything counted before your timer starts.
  • Nothing is stored or sent for time when your timer is off.

While your timer runs, the app records the following for every 10-minute block:

  • Screenshot

    Details
    At most one per block, taken at a random moment inside the block, plus a smaller preview image. By default, only the screen your mouse pointer is on. In the app's Settings you can choose to capture all screens, and then there is one image per screen. A block with only a few seconds of tracking may have none.
    Who Kendyl shows it to
    You; the owners and administrators of the Business on that contract; authorized Kendyl staff

  • Keyboard activity

    Details
    How many keys you pressed in each minute, across your whole computer
    Who Kendyl shows it to
    You and the Business

  • Mouse activity

    Details
    How many times you clicked, plus how far you scrolled, in each minute, across your whole computer
    Who Kendyl shows it to
    You and the Business

  • Active window title

    Details
    The full title of the window you used most during the block, such as a document name or a web page title, and how much of the block it was in front
    Who Kendyl shows it to
    You see both. The Business sees the title

  • Time

    Details
    When the block started and ended, and the task
    Who Kendyl shows it to
    You and the Business

  • Capture problems

    Details
    Why a screenshot could not be taken properly, for example a black image, content protected from capture, a secure Windows screen, or permission denied
    Who Kendyl shows it to
    You and the Business

  • Device details

    Details
    The app's random install identifier, a clock reading used to detect changes to the computer's clock, and which of your signed-in devices started the timer
    Who Kendyl shows it to
    Kendyl. You can see which of your devices is running a timer

Authorized Kendyl staff can also see everything in this table, to provide support, handle disputes and keep Kendyl working correctly.

6.2 What the desktop app never captures

  • Which keys you press, or what you type. The app's keyboard counter adds one to a number for each key press. It never stores, logs or sends which key it was.
  • Mouse movement or the pointer's position. Moving the mouse is not counted.
  • Your webcam or microphone.
  • Your files, your clipboard, or the content of your messages.
  • The titles of windows other than the one you used most in each block.
  • Anything while your timer is off.

A window title often contains a document name, an email subject or a web page title. Close or minimize anything private before you start your timer.

6.3 Your controls

  • Screenshot notice. After each screenshot, a notice with a small preview appears for about 12 seconds.
  • Delete a screenshot before it is sent. You can delete a screenshot from the notice, but only while it is still on your computer.
    • If you confirm before it is sent, the image is deleted from your computer and is never sent.
    • The time, activity counts and window title for that block are still sent, and the time still bills.
    • The Business will see that block without a screenshot.
    • The upload does not wait for you. A screenshot is sent soon after its 10-minute block ends, even while the delete confirmation is open. If it was sent before you confirmed, deleting it from the notice does not remove the copy Kendyl received, even if the notice says it was deleted, and the Business may still see it. To remove it, delete that time from the tracker, as described next.
  • Delete time after it is sent. You can delete blocks of tracked time from the tracker in Kendyl.
    • This removes the time from billing, so you will not be paid for it, and we delete its screenshot files from our storage. If a deletion fails, a file can remain in storage.
    • Kendyl keeps a record that time was deleted: who deleted it, when, and how much time.
    • You can only delete time from the current month. You cannot delete time that has been approved, invoiced, billed or disputed.
  • Idle prompt.
    • If there is no keyboard or mouse input for 5 minutes (the default) while your screen is unlocked, the app asks whether to keep that time or discard it. If you don't answer within about a minute, the timer pauses.
    • Locking your screen, or putting your computer to sleep, pauses the timer.
    • To decide when to ask, the app reads how long Windows has been idle. That reading stays on your computer.
  • Stopping. You can stop the timer at any time. Closing the app's window does not stop the timer; the app warns you about this.
  • Launch at login is off unless you turn it on.

6.4 Automated billing rule

  • A 10-minute block with no keyboard or mouse activity at all is not billed, as long as the app confirms it was able to count activity during that block.
  • A block without a screenshot still bills.

6.5 What is kept on your computer

  • Before upload. Screenshots and time blocks are saved on your computer, in the app's data folder, until they are uploaded. Each screenshot image is deleted from your computer once our servers accept it.
  • Time block records stay on your computer for up to 30 days, within size limits.
  • App logs: up to five files of 1 MB each. Window titles are removed from these logs.
  • Uninstalling the app deletes its data folder, including anything that has not been uploaded yet.

6.6 The browser tracker

  • The browser tracker records only when you start, pause and stop, the task, and which device started the timer.
  • It does not take screenshots, count keyboard or mouse activity, or read window titles.

6.7 A note for Businesses

  • You see tracking information so that you can review and pay for work on your contracts. Use it only for that purpose.
  • Some laws require employers to give notice before monitoring, or to get consent. If those laws apply to you, you are responsible for following them. Our Terms of Service explain this in more detail.

7. Who we share information with

7.1 Other Kendyl users, as part of the service

  • Businesses you apply to, interview with or work for see:
    • your profile and resume;
    • your interview results (see Section 5);
    • your messages;
    • your contract details, time records, task notes and memos;
    • screenshots, activity counts and window titles (see Section 6);
    • disputes.
  • Recruiters who post their own jobs see the recordings, transcripts, answers, scores and fit groups of the candidates who interview for those jobs.
  • Any signed-in Kendyl user can view a Talent's profile, without the Talent's email address, and the Talent's onboarding interview results (see Section 5).
  • Talent and Candidates see a Business's profile, job posts, offers and messages.
  • Talent profiles may show public ratings and comments from Businesses.
  • Recruiters' candidates. Businesses see the candidates that Recruiters submit to them.
  • Business team members. Within a Business, team members see the Business's information according to their role.
  • Public pages. Careers pages and job posts that a Business publishes are public.

7.2 Service providers

We use these companies to run Kendyl. They process information for us, to provide their service.

  • Heroku (Salesforce)

    What they do for Kendyl
    Runs our servers
    Information involved
    Everything our servers process

  • What they do for Kendyl
    Hosts our database
    Information involved
    Account and service information

  • What they do for Kendyl
    Short-term data and background jobs
    Information involved
    Short-term service data

  • What they do for Kendyl
    Serves the website and web app
    Information involved
    IP address and requests

  • Amazon Web Services

    What they do for Kendyl
    File storage, and processing of interview video
    Information involved
    Uploaded files, screenshots, interview recordings, resumes, tax forms and attachments

  • OpenAI

    What they do for Kendyl
    AI interviewer, transcription, interviewer voice, scoring and audio analysis, resume and LinkedIn parsing, creating interview questions and evaluating screening answers
    Information involved
    Interview audio, transcripts and answers; resume and LinkedIn text; job details

  • Stripe

    What they do for Kendyl
    Card payments from Businesses
    Information involved
    Billing details, payment method and amounts

  • Wise

    What they do for Kendyl
    Payouts
    Information involved
    Payout details and amounts

  • SendGrid

    What they do for Kendyl
    Sending email
    Information involved
    Email address, name and email content

  • Twilio

    What they do for Kendyl
    Phone verification by text message
    Information involved
    Phone number

  • Google

    What they do for Kendyl
    Sign in with Google, and address suggestions
    Information involved
    Name and email address; what you type in the address field

  • Sentry

    What they do for Kendyl
    Error monitoring
    Information involved
    See Section 3.11

  • Contentsquare

    What they do for Kendyl
    Usage analytics on the pages listed in Section 3.12
    Information involved
    How you use those pages, IP address and device details

  • Calendly

    What they do for Kendyl
    Booking hiring intake calls
    Information involved
    What you enter when you book

  • Slack

    What they do for Kendyl
    Internal notifications to the Kendyl team
    Information involved
    Name, email address and role at sign-up; job posts; candidates submitted by Recruiters (the Recruiter's and the candidate's names and email addresses); hires, including the candidate's name and email address, the Business team member who made the hire, and the salary or contract value, or the hourly rate and weekly limit; payment amounts; Recruiter payouts waiting to be sent (the Recruiter's name and email address, the hired candidate's name, the amount, and whether payout details and a tax form are on file); completed Talent profiles

  • Atlassian (when the Jira integration is available)

    What they do for Kendyl
    Jira integration
    Information involved
    See Section 13

7.3 Other reasons we may share information

  • When the law requires it, or to respond to valid legal requests.
  • To protect people and Kendyl: to prevent fraud, investigate misuse, enforce our terms, or protect the rights, property or safety of our users, the public or Kendyl.
  • In a business transfer, such as a merger, acquisition, financing or sale of assets. Information may move to the new owner.
  • With your permission or at your direction.

7.4 Selling and advertising

  • We do not use advertising or retargeting pixels.

8. International transfers

  • Kendyl stores and processes information in the United States.
  • Files you upload, screenshots and interview recordings are stored with Amazon Web Services in the United States.
  • Error reports are stored by Sentry in .
  • Our service providers may process information in other countries.
  • If you are in the European Economic Area, the United Kingdom or Switzerland, your information is transferred to countries that may not have the same data protection laws as yours. We rely on the safeguards required by applicable data protection law for these transfers.

9. How long we keep information

We keep information for as long as your account is open, and afterwards for as long as we need it for the purposes in this policy. That includes keeping records the law requires, resolving disputes and preventing fraud.

What happens today:

  • Closing your account:
    • You are signed out on every device and removed from any Business teams. Your account can no longer be used.
    • We keep the rest of your information, including your name, email address, profile, resume, interview recordings and results, contracts, time records, messages and payment records.
    • If you want more deleted, contact us. See Section 11.
  • Interview recordings, transcripts and scores are kept, including the pieces the recording was assembled from and the extracted audio. They are not currently deleted automatically.
  • Screenshots and activity are kept with the time they belong to.
    • When a block of time is deleted, we delete its screenshot files from storage. If a deletion fails, a file can remain in storage.
    • A record remains of who deleted it, when, and how much time.
  • Deleted chat messages. You can edit or delete your own messages for 24 hours after you send them. When you delete one, its text and its list of attachments are removed from the conversation, but attached files may remain in storage.
  • Sign-in sessions stay in our records after they expire or are signed out.
  • Payment, payout, invoice and tax records are kept as long as accounting and tax laws require.
  • On your computer, see Section 6.5.
  • Jira, see Section 13.
  • Service providers keep information according to their own terms.

10. Security

We use measures designed to protect your information. Among them:

  • Passwords are stored only as one-way hashes.
  • Bank account details are stored encrypted.
  • Jira access tokens are stored encrypted, once the Jira integration is available.
  • The desktop app keeps your sign-in encrypted on your computer with Windows' built-in data protection.
  • Screenshots go straight from the desktop app to storage, through an upload link our servers issue for each file.
  • Kendyl's apps show screenshots only to the Talent, the Business's owners and administrators on that contract, and authorized Kendyl staff.
  • Passwords, tokens, keys and bank account numbers are removed from the error reports our servers send.
  • Talent withdrawals are held for three days after payout details change.
  • You can see where you are signed in, and sign out any device.

No method of storing or sending information is completely secure, and we cannot guarantee the security of your information. If we learn of a breach that affects your information, we will notify you as the law requires.

11. Your rights and choices

11.1 What you can do inside Kendyl

  • See and edit your profile and account details.
  • Turn off notifications about new chat messages. The other notification switches do not yet change what you receive; see Section 4.
  • See the devices you are signed in on, and sign out one or all of them.
  • Change your password.
  • Remove your profile photo, education and skills.
  • Edit or delete your own chat messages for 24 hours after sending them.
  • Delete tracked time, within the limits in Section 6.3.
  • As a Talent, shorten or delete time tracked with the browser tracker, move tracked time to another task, edit the notes and files on tracked time, and edit or delete manual time, while that time can still be changed.
  • Remove saved payment methods (Businesses), and remove team members and invitations.
  • Delete uploaded tax forms (Recruiters).
  • Disconnect Jira, once the integration is available.
  • Close your account. If you are the only owner of a Business, you must transfer ownership first. Closing an account does not erase your information; see Section 9.

Kendyl does not yet have a self-service download of your information. To get a copy, contact us.

11.2 Requests you can make to us

Depending on where you live, you may have the right to:

  • Access your information and get a copy of it.
  • Correct information that is wrong.
  • Delete your information.
  • Receive your information in a portable format.
  • Object to how we use your information, including for our legitimate interests.
  • Restrict how we use your information.
  • Withdraw your consent, where we rely on it.
  • Not be subject to decisions based solely on automated processing that significantly affect you, and ask for a person to review them.
  • Complain to a data protection authority where you live or work.

To make a request, write to hello@kendyl.io from the email address on your Kendyl account, or tell us how to reach you.

  • We may ask for more information to confirm your identity.
  • You can use an authorized agent; we may ask the agent for proof that you authorized them.
  • We will respond within the time the law requires.
  • We will not treat you differently for exercising these rights.

What we may still keep. We may keep information when we need it to meet a legal obligation, such as tax and accounting records. We may also keep it to resolve disputes, prevent fraud, enforce our agreements, or because it is part of another user's records, such as a Business's records of a contract it paid for.

11.3 Information a Business holds

A Business may keep its own copies of information it received through Kendyl, such as screenshots it downloaded or interview results it saved. To exercise your rights over those copies, contact the Business as well as us.

12. Notice for California and other US states

California

This section is for California residents. It is in addition to the rest of this policy.

Categories of personal information we collected in the last 12 months:

  • Identifiers

    Examples
    Name, email address, phone number, IP address, account and device identifiers, Atlassian account ID

  • Customer records

    Examples
    Address, phone number, bank account details, tax forms

  • Commercial information

    Examples
    Invoices, charges, payouts, contracts, job posting fees

  • Internet or other electronic network activity

    Examples
    Sessions, pages and requests, error reports, Contentsquare usage data, window titles and keyboard and mouse activity counts

  • Geolocation

    Examples
    Approximate location from IP address. We do not collect precise location

  • Audio and visual information

    Examples
    Interview video and audio, screenshots, profile photos

  • Professional or employment-related information

    Examples
    Resume, work history, skills, interview results, contract history, ratings

  • Education information

    Examples
    Education history you provide

  • Inferences

    Examples
    AI interview scores, English level, communication and sentiment scores, fit groups (Good fit, Potential fit, Not a fit), job match scores

  • Sensitive personal information

    Examples
    Account login (email address and password); financial account numbers; government or taxpayer identification numbers, on tax forms and where a payout country requires one (such as an Argentine CUIT or a Brazilian CPF)
  • Sources: see Section 3, and Section 3.13 in particular.
  • Purposes: see Section 4.
  • Who receives it: we disclose each category for business purposes to the recipients in Section 7.
  • Selling and sharing:
  • Sensitive personal information:
  • Retention: see Section 9.
  • Your rights: to know, delete and correct your personal information; to opt out of its sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for using these rights. Use the process in Section 11.2.
  • Automated decisions:
  • Do Not Track:
    • We do not currently respond to "Do Not Track" signals.
    • The companies listed in Section 3.12 can collect information about how you use the pages where their content loads.

Other US states

Residents of some other states have similar rights, which may include the right to appeal if we refuse a request. To use them, follow Section 11.2. If we refuse your request, you can appeal by replying to our answer.

13. Jira integration (coming soon)

This section applies once the Jira integration is available in Kendyl.

What it does.

  • A Talent can connect Jira to a contract. Kendyl then brings in the Jira issues assigned to that Talent as tasks on the contract.
  • The connection is read-only: Kendyl does not change anything in Jira.

Access Kendyl asks for. When you connect, Atlassian asks you to allow:

  • reading Jira work items;
  • reading Jira user information;
  • keeping access without signing in again ("offline access").

What Kendyl stores.

  • Your Atlassian account ID. This is the only personal information from your Atlassian profile that Kendyl keeps.
  • Access and refresh tokens, stored encrypted and never written to our logs.
  • The Jira site you connected: its ID, name and address.
  • For each issue assigned to you:
    • its ID, key, title, description (as plain text) and link;
    • its project (ID, key and name), status, story points and original estimate;
    • when it was last updated, and whether it is still assigned to you.
  • Issue titles and descriptions can contain whatever your team wrote in Jira.

How often. Kendyl checks for changes every 10 minutes and does a full refresh every hour.

Who sees it. Imported issues become tasks on the contract. You, the Business and authorized Kendyl staff can see them, along with any time tracked on them.

Disconnecting.

  • You can disconnect Jira from a contract at any time. Kendyl then deletes that connection. It deletes the access it stored (your tokens and Atlassian account ID) once none of your other contracts uses it.
  • Tasks that were already imported, and the time tracked on them, stay in Kendyl.
  • You can also remove Kendyl's access from your Atlassian account settings.

Reporting to Atlassian.

  • As Atlassian requires, Kendyl regularly reports the Atlassian account IDs it stores to Atlassian.
  • If Atlassian tells us an account has been closed, we delete the access we hold for that account. Imported tasks stay.

Where it is stored. Information from the Jira integration is stored in the United States.

Who is responsible. Kendyl, not Atlassian, is responsible for the information Kendyl collects and uses through the Jira integration.

14. Children

  • Kendyl is not meant for anyone under 18, and we do not knowingly collect information from them.
  • If you believe a child has given us information, contact us at hello@kendyl.io and we will take steps to delete it.

15. Changes to this policy

  • We may update this policy as Kendyl changes. The "Last updated" date at the top shows when it last changed.
  • If a change significantly affects how we use your information, we will tell you before it takes effect, by email or in Kendyl.

16. Contact us

Kendyl LLC
18 West 18th Street, Suite 3401, New York, NY
Email: hello@kendyl.io