Privacy Policy

1. Introduction

R1 TECH sp. z o.o. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered technical assessment platform, DevParser.

This policy applies to all users of our Service, including employers, recruiters (collectively, "Company Users"), and job candidates ("Candidates").

Roles: for candidate assessment data, the Company User is typically the data controller and R1 TECH acts as a processor on their instructions. For account, billing, and platform telemetry about Company Users, R1 TECH is the controller.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, job title, and payment information when you register or subscribe
• Assessment Content: Coding tasks, test cases, and evaluation criteria you create
• Candidate Information: Names, email addresses, and positions of candidates you invite to assessments
• Code Submissions: Source code, solutions, and notes submitted by candidates
• Communications: Messages you send through our support channels

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, and actions taken
• Device Information: Browser type, operating system, device identifiers, and IP address
• Cookies and Tracking: We use cookies and similar technologies for authentication, preferences, and analytics

2.3 Information from Third Parties

• ATS Integrations: Candidate data from connected applicant tracking systems
• Payment Processors: Transaction data from Stripe for billing purposes
• SSO Providers: Identity information from Microsoft Entra ID or other identity providers you configure

3. How We Use Your Information

• Provide Services: Process assessments, execute code, generate AI evaluations, and deliver results
• Account Management: Create and manage your account, process payments, and provide customer support
• Communications: Send assessment invitations, status updates, notifications, and important service announcements
• Improvement: Analyze aggregated, de-identified usage patterns to improve our Service and develop new features (we do not use candidate submissions or assessment content to train foundation AI models)
• Security: Detect fraud, abuse, and security threats; enforce our terms of service
• Legal Compliance: Comply with legal obligations and respond to lawful requests

4. AI and Code Analysis

Our Service uses artificial intelligence for:

• Task Generation: Creating coding challenges based on your specifications
• Code Evaluation: Analyzing code quality, correctness, and best practices
• AI Detection: Identifying potentially AI-generated code in submissions
• Plagiarism Detection: Comparing submissions against known sources

AI evaluations are decision-support tools for employment-related screening (EU AI Act high-risk context when used for hiring). Company Users (deployers) must keep a human in the loop for adverse outcomes. DevParser provides logging, explanations, and human-oversight tools. Behavioral telemetry and anti-cheat signals are not conclusive misconduct evidence without manual review.

Under the EU AI Act, Company Users remain responsible for how they deploy AI scores in hiring. Candidates receive an AI transparency notice before submitting and may request an explanation and human review of automated decisions.

5. Information Sharing

We share information with:

• Company Users: Candidate submissions and evaluation results are shared with the company that created the assessment
• AI subprocessors: Anthropic (Claude) and Google (Gemini) process assessment content to produce evaluations and related analysis — see our Subprocessors list
• Service Providers: Cloud hosting, payment processing (Stripe), email delivery, and error monitoring as listed on the Subprocessors page
• ATS Partners: Connected applicant tracking systems based on your integration settings
• Legal Requirements: When required by law or to protect our rights

We do NOT:

• Sell your personal information to third parties
• Share candidate data with other companies without consent
• Use candidate submissions or assessment content to train foundation AI models
• Use your content for advertising purposes

6. Data Retention

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Object: Object to certain processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent
• Automated decisions: Obtain meaningful information about logic involved in AI-assisted scoring (Art. 22 GDPR / EU AI Act Art. 86), and request human review via the hiring company or privacy@devparser.it

To exercise these rights, contact us at privacy@devparser.it. Candidates may also use in-product explanation and human-review request features after submission.

14. California & U.S. State Privacy Rights (CCPA/CPRA)

If you are a California resident (or a resident of another U.S. state with a comprehensive privacy law, such as Colorado, Virginia, Connecticut, Texas or Oregon), you have the rights described below in addition to those in Section 7. Where we process candidate data to run evaluations for a hiring company, we act as that company's service provider and process personal information only under our contract with them.

Categories of personal information we collect

• Identifiers (name, email, account and candidate IDs)
• Professional or employment information (CV/resume content, code submissions, assessment results)
• Internet or network activity (log data, usage analytics)
• Inferences drawn from the above (AI-generated scores and evaluations)

No sale or sharing of personal information

We do not sell your personal information and do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We have not done so in the preceding 12 months.

Your rights

• Right to know / access the specific pieces and categories of personal information we hold about you
• Right to delete your personal information
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information (not applicable — we do neither)
• Right to limit the use of sensitive personal information
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, email privacy@devparser.it. We will verify your request against the information we hold before responding. You may use an authorized agent to submit a request on your behalf with proof of authorization. Because candidate data is processed on behalf of the hiring company, we may direct or forward certain requests to that company as the responsible business.

California "Shine the Light" (Civil Code § 1798.83): we do not disclose personal information to third parties for their own direct marketing purposes.

8. Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Monitoring for suspicious activity and intrusion detection
• Secure code execution in isolated sandboxed environments

While we take extensive precautions, no method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

9. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, for any transfers of personal data outside the EEA.

10. Cookies

We use the following types of cookies:

• Essential: Required for authentication and security (cannot be disabled)
• Functional: Remember your preferences and settings
• Analytics: Help us understand how you use the Service

You can manage cookie preferences in your browser settings. Disabling certain cookies may affect functionality.

11. Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us