Privacy Policy

Last updated November 1, 2026

1. Introduction

This Privacy Policy explains how Addrly ("we", "us" or "our") collects, uses, stores, shares and otherwise processes personal information when you access or use our website, application and related services ("Service").

Addrly is an AI-powered recruitment tool that helps recruiters, employers, founders, hiring teams and recruitment agencies process, evaluate and rank candidate applications received through email.

This Privacy Policy applies to:

  • Visitors to our website.
  • Individuals who register for or use Addrly.
  • Organisations and their authorised users.
  • Candidates whose information is submitted to Addrly by our customers.

Candidates do not currently create or maintain accounts directly with Addrly. Their information is submitted and processed through the recruitment activities of our customers.

By using the Service, you acknowledge that you have read this Privacy Policy.

2. Data Controller and Data Processor Roles

The role Addrly plays depends on the type of information and processing involved.

Account and Platform Information

When we collect information directly from users to create and manage accounts, provide support, administer subscriptions, maintain security and operate our platform, Addrly generally determines the purposes and means of that processing and acts as a data controller.

Customer and Candidate Information

When organisations use Addrly to process candidate applications, resumes, emails and related recruitment information, the organisation generally determines why that information is collected and processed.

In those circumstances, the organisation generally acts as the data controller, while Addrly processes information on its behalf to provide the Service.

Customers are responsible for ensuring they have the necessary rights and lawful basis to submit candidate information to Addrly and for providing any privacy notices required by applicable law.

Addrly may independently act as a data controller for certain processing activities, including service security, operational administration and aggregated product improvement, where permitted by applicable law.

3. Information We Collect

Depending on how you use the Service, we may collect the following categories of information.

3.1 Account and Registration Information

When you create an account, we may collect:

  • Name.
  • Email address.
  • Organisation name.
  • Authentication and account credentials.
  • Account settings and preferences.

Authentication information is processed through our authentication provider.

3.2 Customer and Candidate Information

When customers use Addrly, we process information they submit through the Service, which may include:

  • Job descriptions and hiring requirements.
  • Evaluation criteria.
  • Original forwarded email content.
  • Email sender and recipient addresses.
  • Email subject lines and timestamps.
  • Email attachments.
  • Resumes and other candidate documents.
  • Candidate names and contact information.
  • Employment history, qualifications, skills and experience.
  • Structured candidate profiles.
  • Evaluation criteria, scores, rankings and related outputs.

This information may contain personal information relating to candidates and other individuals.

3.3 Payment and Subscription Information

When you purchase a paid subscription or custom plan, payment processing is handled through our payment provider, Dodo Payments.

We may receive and process information relating to your subscription and transactions, including:

  • Customer and subscription identifiers.
  • Payment status.
  • Transaction references.
  • Subscription plans.
  • Billing amounts and currencies.
  • Billing-related communications.

Payment card information is handled by the applicable payment provider rather than being intentionally stored by Addrly.

3.4 Technical and Usage Information

When you access the Service, we and our service providers may collect technical and usage information, including:

  • Browser and device information.
  • IP address and connection information.
  • Access timestamps.
  • Application usage and interaction events.
  • Diagnostic information.
  • Error reports and service performance information.

This information helps us understand service usage, maintain reliability, troubleshoot issues and protect the Service.

3.5 Communications

If you contact us, we may collect your email address, message contents and any additional information you choose to provide.

4. How We Collect Information

We collect information through several methods.

Directly from You

When you register, use the Service, manage an account, purchase a subscription or contact us.

Through Customer Submissions

When customers forward emails, resumes, attachments and other candidate information to Addrly.

Automatically Through the Service

Through application activity, technical logs, analytics technologies and similar tools used to maintain and understand the Service.

Through Third-Party Providers

Through service providers that support authentication, hosting, document processing, artificial intelligence, payment processing and other operational functions.

5. How We Use Information

We use information for the following purposes:

  • Creating and managing customer accounts.
  • Providing access to the Service.
  • Receiving and processing forwarded candidate applications.
  • Extracting information from resumes and attachments.
  • Creating structured candidate profiles.
  • Interpreting job requirements and evaluation criteria.
  • Generating candidate evaluations, scores and rankings.
  • Providing recruitment-related functionality.
  • Processing subscriptions and payments.
  • Providing customer support.
  • Maintaining platform security and preventing abuse.
  • Monitoring service performance and diagnosing errors.
  • Improving and developing our services.
  • Complying with applicable legal obligations.
  • Establishing, exercising or defending legal claims.

We do not sell candidate or customer personal information to data brokers or advertisers.

6. AI and Automated Processing

Addrly uses artificial intelligence and automated systems to process candidate information and generate structured profiles, evaluations, scores and rankings.

Candidate information may be processed by external AI and document-processing providers to provide these features.

AI-generated outputs may contain inaccuracies, omissions or incomplete interpretations.

Addrly ranks candidates according to evaluation results to assist recruiters in reviewing applications.

The Service does not independently reject, eliminate or automatically hide candidates. All candidates remain available for customer review.

Addrly does not make final hiring, rejection, interviewing or selection decisions. Customers remain responsible for reviewing AI-generated results and making employment decisions.

We do not guarantee the accuracy, completeness, fairness or suitability of any AI-generated evaluation or ranking.

7. Product Improvement and Model Training

We may use aggregated or de-identified information that does not identify, or reasonably allow the identification of, individual customers or candidates to analyse product usage, evaluate service performance and improve our services.

Addrly does not independently use identifiable candidate resumes or raw forwarded email content to train or fine-tune its own general-purpose AI models.

Third-Party AI and Document Processing

We use external AI and document-processing providers to provide certain Service features. These providers may process submitted information according to their respective service terms, data-use settings and applicable privacy policies.

In particular, Datalab.to may retain and use eligible information submitted through its services for training and improving its AI models, depending on applicable account settings, data residency eligibility and its service terms.

Datalab's data processing, retention and use are subject to its applicable agreements and policies.

Information submitted to Google and Microsoft AI services may also be processed under those providers' respective terms and data-handling policies.

8. Sharing and Disclosure of Information

We may share information with third parties where reasonably necessary to provide, maintain, secure or improve the Service.

These providers include:

Cloud Infrastructure and Storage — Cloudflare

We use Cloudflare to support website delivery, hosting infrastructure, file storage and website analytics.

Authentication and Database Services — Supabase

We use Supabase to support authentication, account management and database functionality. Our Supabase project is hosted in Mumbai, India.

Document Processing — Datalab.to

We use Datalab.to for document and resume processing, including optical character recognition and information extraction.

Datalab may process submitted documents and extracted information according to its applicable service terms and data-use settings.

Artificial Intelligence — Google

We use Google AI services to support AI-powered information processing and candidate evaluation.

API request and response storage is disabled in our Google AI Studio project settings. Google may nevertheless process information separately for security, abuse monitoring and service integrity purposes under its applicable policies.

Artificial Intelligence — Microsoft Azure

We use Microsoft Azure AI Foundry for AI-powered candidate interpretation, evaluation and ranking.

Our associated Azure resource is located in Korea Central and uses a Global Standard deployment. Under Microsoft's Global deployment model, prompts and responses may be processed in any Azure region where the relevant model is deployed.

Microsoft's applicable data-protection commitments govern its processing of information.

Product Analytics — PostHog

We use PostHog on our login and authentication pages to understand the registration and login experience.

Depending on enabled features, PostHog may collect pageviews, automatically captured interactions and session recordings associated with those pages.

PostHog session replay is currently limited to our login route and is not intentionally enabled across the main application.

Website Analytics — Cloudflare Web Analytics

We use Cloudflare Web Analytics to understand website traffic and performance.

Payment Processing — Dodo Payments

We use Dodo Payments to facilitate payment processing, subscriptions and billing-related operations.

These providers may process information on our behalf or independently under their applicable terms and privacy policies, depending on the nature of their services.

We may also disclose information:

  • Where required by applicable law or legal process.
  • To protect our rights, users, systems or property.
  • To investigate fraud, abuse or security incidents.
  • In connection with a merger, acquisition, restructuring or transfer of the Service.
  • With your direction or permission.

9. International Data Transfers

Addrly and its service providers may process and store information in countries other than the country in which you or the relevant candidate reside.

Our infrastructure and service providers operate across multiple geographical regions.

Our primary database and authentication services are hosted in Mumbai, India.

Cloudflare R2 uses automatic data-location placement. This does not guarantee that all stored information remains within India.

Our Azure AI Foundry deployment uses Global Standard processing. Prompts and responses may be processed in Azure regions outside Korea Central.

Google and other external providers may also process information in different jurisdictions.

As a result, candidate and customer information may be transferred to or processed in jurisdictions with different data protection laws.

Where required by applicable law, we will use appropriate safeguards and recognised transfer mechanisms for international data transfers.

10. Data Retention and Deletion

We retain personal information for as long as necessary to provide the Service, fulfil the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes and enforce our agreements.

10.1 Candidate and Job Information

Customers may delete individual candidates and jobs through the available controls within Addrly.

When a job is deleted, its associated candidate information, including stored emails, attachments, resumes, extracted profiles and evaluation results, is deleted from our active systems.

Certain copies may remain temporarily in provider-managed backups, recovery systems, technical logs or security records, subject to applicable retention periods and legal requirements.

10.2 Account and Platform Information

Account and platform information is generally retained while your account remains active or for as long as reasonably necessary to provide our services, maintain account records, comply with legal obligations, resolve disputes, prevent abuse and enforce our agreements.

We do not automatically delete accounts solely because of inactivity.

Certain account, billing, transaction, security and operational information may be retained for longer periods where necessary or legally required.

10.3 Third-Party Retention

Information processed by third-party service providers may be subject to their respective retention and deletion practices.

The deletion of information from our active systems does not necessarily result in its immediate removal from all provider-managed systems, logs or recovery environments.

11. Cookies and Analytics

Addrly and its service providers may use cookies, local storage, pixels and similar technologies to support website and application functionality, understand usage patterns, monitor performance and improve the Service.

These technologies may collect technical information, device information, usage events and interaction data.

PostHog may use browser storage and similar technologies to support login-page analytics and session replay.

Cloudflare Web Analytics is used for website traffic and performance measurement.

You may be able to manage certain cookies and browser storage through your browser settings. Disabling certain technologies may affect the availability or functionality of features.

Where required by applicable law, we will obtain consent before using non-essential cookies or similar tracking technologies.

12. Data Security

We use reasonable technical and organisational measures designed to protect information from unauthorised access, alteration, disclosure, loss or destruction.

These measures may include access controls, authentication protections, infrastructure security and appropriate restrictions on access to customer information.

However, no internet transmission, storage system or electronic security measure can be guaranteed to be completely secure.

We cannot guarantee absolute security of information transmitted to or stored through the Service.

You are responsible for maintaining the security of your account credentials and limiting access to authorised individuals.

13. Privacy Rights and Requests

Depending on your location and applicable data protection laws, you may have rights concerning your personal information, which may include:

  • Requesting access to personal information.
  • Requesting correction of inaccurate or incomplete information.
  • Requesting deletion of personal information.
  • Withdrawing consent where processing is based on consent.
  • Objecting to or restricting certain processing activities.
  • Requesting information about how personal information is processed.
  • Requesting a copy of personal information where applicable.
  • Filing a complaint with an applicable data protection authority.

These rights are subject to applicable legal conditions and exceptions.

Candidate Information

Candidates whose information is submitted through a recruiter or employer should generally direct requests concerning their recruitment information to that organisation, which determines the purposes of processing.

Where appropriate, Addrly may assist customers in responding to candidate requests concerning information processed through the Service.

Candidates may also contact us directly regarding concerns about our processing of their information.

Submitting a Request

Requests concerning personal information may be submitted to:

dinesh@addrly.cc

We may request reasonable information to verify your identity or authority before responding.

We will review and respond to requests in accordance with applicable data protection laws.

Certain information may be retained where necessary to comply with legal obligations, prevent fraud, resolve disputes or establish, exercise or defend legal claims.

14. Children and Minors

Addrly is a professional recruitment platform and is not intended for individuals under the age of 18 to create or maintain customer accounts.

Candidates whose information is submitted by recruiters may be subject to different age requirements depending on the role and applicable law.

Customers are responsible for ensuring that submitting and processing information relating to candidates, including minors where applicable, is lawful and appropriately authorised.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, processing practices, legal requirements or operational arrangements.

Updated versions will be published on our website with a revised "Last Updated" date.

Where changes are material, we may provide additional notice through the Service or by email where required by applicable law.

We encourage you to review this Privacy Policy periodically.

16. Contact Us

For questions, privacy-related requests or concerns regarding this Privacy Policy or our handling of personal information, contact us at:

Email: dinesh@addrly.cc