This document describes the data actually processed by RecruitBot at the time of writing. Have it reviewed by a lawyer before large-scale commercial use.
1. Data collected
- Discord identity: Discord ID, username and avatar — obtained via Discord OAuth2 login (
identifyscope only; RecruitBot never asks for your Discord password and has no access to your private messages or email address). - Server membership: the Discord servers where RecruitBot is installed and where you have a role (candidate, recruiter, administrator).
- Application answers: the content you voluntarily submit when answering a recruitment form on a given server.
- Internal notes and history: actions taken by recruiters on an application (status change, notes, assignment) — visible only to that server’s staff.
- Session: a technical cookie (httpOnly, signed) that keeps you logged into the panel for up to 7 days, and a language cookie. No advertising or third-party tracking cookie is used. Theme and sound preferences on this site stay in your browser (local storage) and are never sent to us.
2. What RecruitBot does not do
- Does not sell or share your data with third parties for commercial purposes.
- Does not read your Discord messages outside of the forms you explicitly submit.
- Does not store a password (authentication goes entirely through Discord).
- Does not collect or see any payment data (credit card, etc.) — the Premium subscription is billed and managed directly by Discord (App Subscriptions).
3. Isolation between servers
A Discord server’s data (applications, forms, notes, statistics) is strictly separated from other servers using RecruitBot. An administrator or recruiter can only see the data of the server(s) they have a verified permission for.
4. Who can see your data
Answers to a recruitment form are visible to that Discord server’s staff (recruiters, managers, administrators — depending on permissions granted by that server), as well as, technically, the team operating RecruitBot’s infrastructure for maintenance or anti-abuse purposes.
5. Retention
Data is kept for as long as the Discord server concerned uses RecruitBot. The audit log has a retention period that depends on the plan (30 days on the free plan, unlimited on Premium); voice interview recordings are deleted after 30 days on the free plan. Removing RecruitBot from a server results in all associated data being permanently deleted after a 30-day grace period, unless the bot is reinvited before then.
6. Your rights
You can request access to, correction of, or deletion of your data by contacting support via https://support.recruitbot.app. Requests about the content of a specific application should first be addressed to that Discord server’s administrators, who are responsible for it at the first level.
How it works. We answer within one month. To protect you, we first check that the request comes from the Discord account concerned (for example by asking you to write from it, or to confirm from it). You can ask for a copy of your data (applications, interview recording metadata, sign-in and action logs, linked email account), and for erasure: your applications and everything attached to them, your own audio tracks in interview recordings (other participants’ tracks are kept), your per-server blacklist entries if you ask for it, and your email account. Sign-in and security logs are kept but detached from you (your identity is replaced by a random identifier). A platform blacklist decision taken for abuse is kept while it stands. Backups are rotated on the normal schedule, after which the erased data disappears from them too.
7. Security
Connections use HTTPS. Permissions are re-verified on every request, never based solely on information provided by the browser. Secrets (Discord tokens, session keys) are never exposed to the browser. This site loads no third-party script, font or tracker.
8. Contact
For any privacy question: https://support.recruitbot.app.