Privacy Policy

This Privacy Policy describes how Neuroscale, Inc. ("Neuroscale", "we", "us", or "our") collects, uses, discloses, and safeguards personal information in connection with Arbi, our AI-powered recruiting and talent acquisition software-as-a-service platform (the "Services").

Arbi is designed for employers, recruiters, and talent teams who use our tools for sourcing, screening, outreach, and workflow automation, including integrations with applicant tracking systems ("ATS") and other HR technologies. Depending on how Customers configure the Services, we may process information about individuals who apply for roles, are sourced as potential candidates, or otherwise interact with recruiting workflows ("Candidates"), as well as information about Customer personnel who administer or use the platform ("Users").

By accessing or using the Services, or by submitting information through a Customer's use of Arbi, you acknowledge that your information may be processed as described in this Privacy Policy. If you do not agree, please discontinue use of the Services and contact the organization that invited you to engage with Arbi.

This policy supplements any agreement between Neuroscale and our business customers (each, a "Customer"). Where a Customer's instructions or contract terms conflict with this policy for Candidate or User data processed on the Customer's behalf, the Customer agreement may govern to the extent permitted by law.

We collect information that Customers and Users provide directly, information that Candidates provide or that is imported on their behalf, and information generated automatically when the Services are used.

Account and User data. We collect names, work email addresses, job titles, company affiliation, authentication credentials, billing and subscription details where applicable, and communications you send to us, such as support requests or sales inquiries.

Candidate and recruiting data. Through Customer submissions, resume uploads, profile imports, ATS integrations, email or calendar connections where enabled, and similar features, we may process resumes and CVs, cover letters, contact information, employment and education history, skills, certifications, compensation expectations where provided, interview notes, assessment results, and correspondence related to recruiting activities.

Usage, device, and technical data. We collect log data, IP address, browser type, device identifiers, approximate location derived from IP, pages or features accessed, timestamps, referring URLs, and diagnostic information. We and our service providers may use cookies, pixels, and similar technologies to remember preferences, maintain sessions, measure performance, and understand how the Services are used.

We use personal information to operate, maintain, and improve Arbi; to provide features requested by Customers; and to deliver customer support, security monitoring, and technical notices.

AI-powered matching and workflow automation. We process Candidate and job-related data to power AI-assisted sourcing, ranking, summarization, drafting of outreach, and screening workflows configured by the Customer. Outputs are intended to assist human recruiters and hiring managers; Customers control how results are used in their processes.

We use usage data and aggregated or de-identified analytics to understand product performance, train and evaluate models where permitted by contract and applicable law, develop new features, and improve relevance and reliability of our systems. We may send service-related communications, product updates, and, where consistent with your choices and applicable law, marketing messages.

We process information as necessary to comply with law, enforce our terms, protect rights and safety, and defend against legal claims.

Arbi uses machine learning and other automated techniques to parse unstructured documents, extract structured fields, compare profiles to role requirements, generate summaries or scores, and suggest actions within the recruiting pipeline. The specific models, prompts, and thresholds applied depend on Customer configuration and product settings.

Automated outputs may influence how Candidates are prioritized or presented in the Services; however, Neuroscale designs the platform to support human oversight. Customers remain responsible for hiring decisions and for ensuring their use of Arbi complies with employment, anti-discrimination, and data protection laws applicable to them.

We work to provide transparency into how features function at a high level. We do not guarantee that automated assessments are complete or error-free. Candidates who have questions about a specific decision should contact the organization that is using Arbi to recruit for the relevant role.

Where applicable law grants individuals rights related solely to automated decision-making that produces legal or similarly significant effects, we will support Customers in responding to such requests, and we will comply with our direct obligations as a processor or service provider to the extent required.

We share personal information in the following circumstances:

• With the Customer. Information submitted in connection with a Customer's recruiting activities is available to that Customer's authorized Users in accordance with their internal policies.
• Service providers. We engage vendors for hosting, infrastructure, security, analytics, communications, customer support, and payment processing. These providers process data on our instructions and are contractually obligated to protect it.
• Integrations. Where a Customer enables integrations, we share or sync data as directed by the Customer to operate those connections.
• Legal and safety. We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Neuroscale, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, personal information may be transferred subject to appropriate confidentiality and continuity safeguards.

We do not sell personal information as that term is commonly defined in U.S. state privacy laws, and we do not share Candidate data for cross-context behavioral advertising unrelated to providing the Services.

We retain personal information for as long as necessary to provide the Services, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Customer-controlled recruiting data is generally retained according to the Customer's subscription term, account settings, and instructions, including deletion or export requests submitted through the platform or to our support team. Some residual copies may persist for a limited period in encrypted backups before automatic rotation.

Usage logs and security records may be kept for shorter or longer periods depending on operational and compliance needs. Where we anonymize or aggregate data such that it can no longer reasonably be linked to an individual, we may retain it without limitation.

Customers may contact us for assistance with data lifecycle questions; individual Candidates should direct retention or deletion requests to the relevant Customer where that organization is the controller of their recruiting data.

Depending on your location and the role of Neuroscale, you may have rights regarding your personal information, including:

• Access and portability - request a copy of certain information we hold about you in a structured, commonly used format where feasible.
• Correction - request correction of inaccurate or incomplete information.
• Deletion - request deletion of your information, subject to legal exceptions and the Customer's legitimate business needs.
• Restriction or objection - object to or limit certain processing where applicable law provides these rights.
• Opt-out - where required, opt out of certain uses such as "sale" or targeted advertising.
• Appeal - in some jurisdictions, appeal our response to your request.

To exercise rights relating to data processed for a Customer's recruiting activities, please contact that Customer first. You may also email us at [email protected] and we will route your request or assist the Customer as appropriate. We may verify your identity before fulfilling a request.

You may have the right to lodge a complaint with a supervisory authority in your country or region; we encourage you to contact us first so we can address your concern.

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using industry-standard protocols, encryption for data at rest where supported by our infrastructure, role-based access controls, logging and monitoring, vulnerability management, and employee training on data handling.

Neuroscale maintains a security program aligned with common SaaS practices and pursues independent assurance activities such as SOC 2 or equivalent audits where applicable to demonstrate the design and operating effectiveness of controls relevant to the Services. Specific report availability may be subject to confidentiality arrangements with Customers.

No method of transmission or storage is completely secure. If you become aware of a security issue affecting Arbi, please notify us promptly at [email protected].

Customers are responsible for configuring access permissions for their Users, safeguarding credentials, and using integrations in line with their security policies.

Neuroscale is based in the United States and may process and store information in the United States and in other countries where we or our service providers operate. Those countries may have data protection laws that differ from those in your jurisdiction.

Where we transfer personal information from the European Economic Area, the United Kingdom, Switzerland, or other regions that require safeguards, we implement appropriate mechanisms such as Standard Contractual Clauses approved by relevant authorities, supplemented by technical and organizational measures as needed.

Customers who deploy Arbi across borders remain responsible for ensuring their use of the Services complies with applicable transfer and employment laws, including providing any required notices or obtaining authorizations from Candidates where necessary.

The Services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. Arbi is intended for business-to-business use in professional recruiting contexts.

If you believe we have collected information from a child under 16 in violation of this policy, please contact us at [email protected] and we will take steps to delete such information where required by law.

Customers should not use the Services to process children's personal information except where permitted by law and with appropriate safeguards.

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, legal requirements, or industry standards. When we make material changes, we will provide notice by posting the updated policy on this page, updating the "Last updated" date, and, where appropriate, notifying Customers through the Services, by email, or by other reasonable means.

Your continued use of the Services after the effective date of an update constitutes your acknowledgment of the revised policy, to the extent permitted by law. If you disagree with the changes, you should stop using the Services and may request deletion of your information subject to our retention practices and any Customer instructions.

We encourage you to review this page periodically for the latest information on our privacy practices.

If you have questions, concerns, or requests regarding this Privacy Policy or Neuroscale's privacy practices, please contact us:

• Email: [email protected]
• Entity: Neuroscale, Inc. (Arbi)

For data protection inquiries related to a specific recruiting process, contacting the organization that uses Arbi may be the fastest path to resolution; we will assist verified Customers and regulatory requests as required by law.