Version v1 · In effect since October 3, 2026

Privacy Notice

This Privacy Notice explains how Parzr, LLC ("Inleika", "we", "us") collects, uses, shares and protects personal data when you use Inleika (the "Service"). It also explains your rights and how to use them.

Country-specific information is in section 13. For people in Mexico, this Notice is our Aviso de Privacidad Integral.

1. Who is responsible for your data

Controller: Parzr, LLC, 5640 Lenox Park Pl, Sugar Hill, GA 30518, United States.

Privacy Office: our designated person and department for personal data. It handles your requests and questions at privacy@parzr.com or at the postal address above.

When an organization is responsible instead. Organizations that use Inleika to hire decide how they use the information in their own hiring processes:

candidates they add themselves;
their pipelines, notes and evaluations;
their interviews, including AI interviews with Mila;
their code challenges;
their offers.

For that information, the organization is the controller and Inleika processes it on the organization's behalf (as its processor or encargado). The organization's own privacy notice applies, and you can send requests to the organization; we will help it respond. This Notice still explains what Inleika does with that information as a processor.

2. Whose data we process

Candidates who create an account or connect a profile.
People an organization adds to its private talent pool, even if they don't have an account (we act for the organization; see section 1).
People an organization invites to its talent pool by email. Until the person answers, we use the address and the organization's note only to deliver the invitation, on the organization's behalf (see section 1).
Organization members: people who use Inleika for an employer, recruiter or staffing company.
People who take a code challenge an organization sends them, with or without an account (we act for the organization; see section 1).
Other participants: interviewers, evaluators, observers and offer signers invited by an organization.

The Service is for adults. We do not knowingly collect data from anyone under 18.

3. What personal data we collect

Category	Examples	Source
Identity and contact	Name, email, phone, location (city or region), professional links	You; or the organization that added you
Professional profile	Job title, work history, education, languages, skills, summary, years of experience	You; your CV (AI proposes details for you to review); the organization
Job preferences	Job type, work arrangement, availability date, salary expectation	You
Documents	CV, cover letter, certificates, profile photo (optional)	You; the organization
Matching information	Skills matched to positions, match explanations, fit scores and rationales, ranking	Generated by the Service (see section 5)
Hiring-process information	Applications and stages, interview schedules, evaluations, interview notes, feedback, decisions and reasons, offers, signed documents	The organization; you; evaluators
AI interview information	Text transcripts of Mila interviews, who joined and left the meeting and when, and Mila's observations (no audio or video is kept)	Generated during the interview, with your consent
Face comparison images	A few still images of your face from Mila interviews, and whether they appear to match your profile photo and your earlier interviews with the same organization	Captured during the interview, only with your express consent (section 5.5)
Integrity reports	An organization's confirmation that someone else took part in your interview, or its decision to end your process for an integrity reason (a different person, unauthorized help, or false profile information)	The organization (section 5.6)
Identity verification	The kind of check, its result and when it was decided. Your ID images and selfie go to our verification provider, not to Inleika	You, through our verification provider (section 5.7)
Code challenge work	Changes to your files and how each was made (typed, pasted, suggested or from the terminal), what you paste, when you leave and return to the page, when you copy the task text, terminal commands and their output, your runs and checks, the app preview, and your questions to the assistant with its answers; the AI summary, and the organization's ratings, warnings and comments	Recorded while you take a code challenge an organization sent you (section 5.8)
Skill paths	Your goal, what you say you can already do and your answers to the starting check; the milestones and steps planned for you; which steps you mark done, how a step felt and your practice reps	You; planned by AI (section 5.9)
Account and security	Sign-in email, authentication methods and factors (managed by our authentication provider), session information	You; our authentication provider
Acceptance and consent records	Which version of our legal documents you accepted and which consents you gave (for example, to a profile photo or to sharing with a partner organization), when, where in the Service, your IP address and your browser's user agent	Collected when you accept or consent
Organization billing	Purchase history and the card brand, last four digits and expiry (card numbers are handled by our payment provider)	Organization members
Communications	Emails we send, notifications, requests you send us	You; the Service
Technical	Essential cookies, error reports without personal content	Your browser

Sensitive data.

We do not ask for sensitive personal data such as health, ethnic or racial origin, religious, philosophical or moral beliefs, political opinions, sexual orientation or genetic information.
Please don't include them in your profile, CV or interview answers.
A profile photo can reveal sensitive characteristics. It is optional, and we ask for your express consent before you upload one.
Face comparison images are treated as sensitive data. We ask for your express consent first (section 5.5).
The ID images and selfie of an identity check are treated as sensitive data. We ask for your express consent first (section 5.7).
If sensitive information appears incidentally (for example, in a CV or an interview answer), we do not use it to evaluate you.

Financial or patrimonial data. Your salary expectation and offer compensation are treated as financial data, and we process them with your express consent.

4. Why we use your data

4.1 Purposes that are necessary for the Service (primary purposes)

Create and manage your account and authenticate you.
Build your profile, including proposing details from your CV for you to review.
If you choose to be discoverable: show your profile to organizations and match it to positions.
Let organizations invite you to and run hiring processes: scheduling, interviews, evaluations, offers, e-signatures and hire confirmation.
Run Mila AI interviews when you have consented.
Send service communications (invitations, reminders, status updates, security notices).
Let organizations collaborate, including sharing a talent pool with another organization when you allow it. While an organization manages your profile, that organization decides.
Provide the AI-assistant (MCP) connections you choose to set up.
Bill organizations for paid features.
Keep records of your acceptance of our legal documents.
Keep the Service secure, prevent fraud and abuse, fix errors, and comply with the law. Preventing fraud includes keeping integrity reports and asking a person to verify their identity after an organization confirms that a different person took part in their place (section 5.6).
Compare faces in Mila interviews when you consent, so the organization can confirm it is talking to you (section 5.5).
Verify your identity when you choose to or when we ask, and show the result to the organizations that can see your profile (section 5.7).
Run the code challenges organizations send you: record your work so the organization's reviewers can replay it, and summarize it with AI (section 5.8).
Plan and guide the skill paths you set up (section 5.9).

4.2 Secondary purposes

We do not use your data for secondary purposes such as marketing, advertising or selling data. If we ever want to, we will ask for your consent first, and you will be able to say no without affecting the Service.

4.3 De-identified data

We de-identify data so that it can no longer be linked to you or to any organization, and use it to measure and improve the Service, for example how often organizations' decisions agree with our matching results and identity warnings. Once de-identified, it is no longer personal data.

5. AI, matching and automated processing

5.1 What AI does in Inleika. AI helps to:

propose profile details from CVs;
recognize skills;
match profiles to positions and explain why;
score fit from 1 to 5 with reasons;
interpret recruiters' search requests;
prepare and summarize interviews;
conduct AI interviews (Mila), when an organization enables it and you consent;
flag a possible different person in a Mila interview, when you consent to face comparison (5.5);
prepare code challenges and summarize how they went (5.8);
plan your skill paths (5.9).

5.2 What it doesn't do.
It does not make hiring decisions. People at the organization decide whether to contact, interview, offer or hire.
It is not given protected characteristics to evaluate.
It does not identify you by your voice, and it does not infer emotions or personality from your face or voice.
It never concludes on its own that someone else took part in an interview. Only a person at the organization can (5.5).
It never concludes on its own that someone had unauthorized help in a code challenge. Only a person at the organization can (5.8).
It does not reject anyone automatically.

5.3 Ranking affects visibility. When an organization searches or runs matching for a position, the Service ranks candidates and shows the most relevant ones first. If you are lower in the ranking, you may not be shown for that position.

5.4 Your choices. You can:
turn discovery off at any time;
ask for an explanation of how matching works;
object to automated processing;
ask for a person to review it (section 9).

The AI in Hiring Notice explains this in more detail.

5.5 Face comparison in Mila interviews. If you agree, when Mila takes part in your interview we keep a few still images of your face and compare them with your profile photo and with your earlier interviews with the same organization.

If they may not match, the organization sees a warning and the images side by side. A person there decides whether it was someone else; the comparison never decides.
Only that organization sees the images, the warning and its decision. Other organizations never do.
A face template (a mathematical representation of your face) exists only for the moment of the comparison and is not kept. Our comparison provider processes the images only to compare them (see the subprocessor list).
The organization decides whether to ask for it in an interview, and you decide whether to agree, separately from agreeing to Mila. If the organization asked and you don't agree, you can't continue in that hiring process until you do; you can withdraw from it instead. In Colombia, declining only skips the comparison (section 13.2).
If you withdraw your consent, your images are deleted.
The images are kept as section 8 describes.

5.6 Integrity reports and identity verification. An organization can confirm that someone else took part in your interview, or end your process for an integrity reason. In the Service you see only that the organization decided not to continue; its reason and notes stay with the organization. You can ask for the data held about you (section 9).

Reports stay with the organization that made them. We never show them to other organizations.
When an organization confirms that a different person took part in its interview or process, we also keep that confirmation in our own fraud-prevention record, for which we are responsible. Its other integrity reasons stay with the organization.
If an organization confirms that a different person took part in your place and you are not verified, we ask you to verify your identity before you continue to take part in hiring processes. Until you do, organizations see your profile as temporarily unavailable, without the reason.
A person at Inleika can review a report and remove it if it is wrong. You can ask for that review (section 9).
If your identity is verified, reports never limit you with other organizations.

5.7 Identity verification. You can verify your identity with our verification provider, Persona. It checks a photo of your government ID and a selfie, and compares your face in both.

Persona collects and compares the images only with your express consent, and deletes them as soon as the check is decided. Inleika never receives them.
We keep the kind of check, its result and when it was decided.
Organizations that can see your profile see that your identity was verified, with the kind of check and its date. It says nothing about your skills or experience.
Verifying is optional. Declining or not finishing a check changes nothing else, except when we ask you to verify after a confirmed report (5.6).
In Colombia, when we ask you to verify after a confirmed report, the check is your ID alone, without a selfie (section 13.2).

5.8 Code challenges. An organization can send you a code challenge, prepared by AI from your profile, the position and the criteria the organization selected. Your profile only helps choose a setting familiar to you; the level expected is the position's. The organization can review and edit the challenge before sending it.

Before you start, we show you exactly what is recorded. Your camera, your microphone and anything outside the workspace are never recorded.
AI checks each terminal command before it runs, to keep the workspace safe.
When the organization allows it, Mila answers your questions as an assistant, from documentation sources the organization confirmed. Those sources receive her searches (section 7), so please don't put personal information in your questions.
After you finish, AI points out pastes from outside the challenge that could be unauthorized help, summarizes how the work went and suggests ratings. A person at the organization decides each warning and sets each rating; a suggestion counts for nothing until then. A task you didn't reach is missing information, never a weakness.
The organization controls your work and its review (section 1). We keep it for the organization as section 8 describes.

5.9 Skill paths. When you set a goal, AI plans a path for you from your goal, what you say you can already do, your answers to the starting check and your profile. With your goal, it keeps what it understands about what you can do and what the goal requires, so it can plan the next steps.

Your skill paths are private. Organizations never see them, and they are not used for matching.
To learn what a goal involves, the AI searches the web through our search provider (see the subprocessor list). The searches are about the work, not about you.

6. AI providers

We use third-party AI models to provide these features. They process data only to provide the Service to us. We do not use your data to train AI models. We do not allow our providers to use it to train theirs.

7. Who we share data with

Recipient	What and why
Organizations using Inleika	Your profile and matching information, only if you turn discovery on. Hiring-process information with the organizations whose processes you take part in. Information in a shared talent pool, only when you allow the share, or, while an organization manages your profile, when that organization shares it. These organizations become responsible for the data they receive and must protect it as this Notice describes.
Service providers (processors)	Hosting, database, storage, authentication, background jobs, AI models, code challenge workspaces, web search, face comparison, identity verification, meeting connection, email, payments, e-signature and error monitoring. They act on our instructions. See the subprocessor list.
Documentation sources	In a code challenge where the organization allows Mila's help, the documentation sources it confirmed receive her searches. They are independent services; we don't send them your account details.
Your AI assistant	If you connect one, it receives what it requests at your direction.
Authorities	When required by law, court order or a valid request from a competent authority, or to defend legal claims.
A successor business	If Inleika is merged, acquired or sells its assets, subject to this Notice and to your consent where the law requires it.

We do not sell your personal data and do not share it for advertising.

Transfers to organizations require your acceptance. When you sign up, you choose whether organizations can discover your profile. That choice is how you accept or decline these transfers. You can change it at any time.

8. How long we keep data

Data	Retention
Account and profile	While your account is open. After you ask us to delete it, we block the data and then delete it within 30 days, except as listed below.
CVs and documents you remove	Deleted from storage within 30 days of removal.
Matching information	While the position is open, plus 12 months, then deleted.
Mila interview transcripts and who joined and left	90 days after the interview, then deleted. Mila's written observations are kept as part of the organization's records.
Face comparison images	90 days after the interview, then deleted. While a warning the organization confirmed in that process stands, they are kept, but never more than 12 months after the interview. Deleted at once if you withdraw your consent.
Integrity reports in our fraud-prevention record, and the verification requests based on them	24 months after the organization's decision.
Identity verification result	While your account is open.
ID images and selfie at our verification provider	Deleted as soon as the check is decided.
Hiring-process records	As long as the organization keeps them under its own retention rules; we keep them for the organization until it deletes them or closes its account.
Code challenges	Your work, its AI summary, the organization's ratings, warnings and comments, and your acceptance when you started are kept as hiring-process records. The workspace is deleted when the challenge ends. The copy of your profile kept with the challenge's preparation is removed when you delete your account.
Skill paths	While your account is open; deleted with it.
Signed offers and signature audit records	As long as the organization keeps them, to prove what was signed.
Acceptance and consent records (including IP address and user agent)	While your account is open, then blocked for the period during which legal claims about them can be brought (up to 10 years), then deleted.
Organization billing records	As long as tax and accounting laws require.
Talent pool invitations	The email address and note are deleted when the invitation is answered, cancelled or expires (14 days after it is sent). We keep a record of how it ended, with only a one-way code of the address so a decline is respected for 30 days, for 12 months.
Company signup data not completed	Deleted within 30 days.
Security and error logs	Up to 90 days.

Face comparison images and biometric information. We use face comparison images, and the comparisons made from them, only to help an organization confirm who took part in its interview. We do not sell, lease or trade them, and we disclose them only to that organization and to the providers that process them for us. We permanently delete them on the schedule above, and in any case within 3 years of your last interaction with Inleika, whichever comes first. The ID images and selfie of an identity check are handled by our verification provider on our behalf, compared only to verify your identity, and deleted as soon as the check is decided.

9. Your rights

Depending on where you live, you can:

access your data;
correct it;
delete it (cancellation);
object to its use, including automated processing that evaluates you without human involvement;
receive a copy in a portable format;
revoke your consent;
limit how we use or disclose it;
ask for a human review of automated processing and an explanation of how it works;
complain to your data protection authority.

How to use them.

Many controls are in your account: edit your profile, turn discovery off, download your data, request account deletion.
For anything else, email privacy@parzr.com from your account email, or write to our postal address.
Include your name, how to contact you, the right you want to exercise, and the data concerned.
We will verify your identity before acting, and we may ask for more information to locate your data.
Requests are free, except for reasonable reproduction or shipping costs where the law allows.

Response times. We answer within the deadline that applies to you (see section 13). In all cases we respond within 20 business days, and sooner where your local law requires.

Revoking consent.

You can revoke consent at any time by turning discovery off, withdrawing an interview consent, or writing to us.
Revocation does not affect processing that already happened.
If the processing is necessary for the Service, we may not be able to continue providing it.

Data an organization controls. For information an organization controls (section 1), contact that organization. If you contact us, we will pass your request to the organization and help it respond.

10. Transfers to the United States

Inleika is operated from the United States, and our main service providers store and process data there. When you sign up, you give your express consent to transfer your data to the United States for the purposes in this Notice. We also require our providers to protect it by contract. The United States may not offer the same level of protection as your country. Section 13 has more information for your country.

11. Security

We use administrative, technical and physical safeguards, including:

encryption in transit;
access controls based on role and organization;
separation between candidate and organization accounts;
keeping personal data out of logs and error reports;
an independent review of what our AI interviewer says.

No system is perfectly secure. If a security breach significantly affects your rights, we will tell you without delay.

12. Cookies and similar technologies

We use only essential cookies and browser storage needed for sign-in, security, language and forms. We do not use advertising or analytics cookies, and we do not track you across other websites.

Name	Purpose	Duration
`stytch_session`, `stytch_session_jwt`	Organization member session	Up to 60 minutes
`stytch_b2c_session`, `stytch_b2c_pending`	Candidate session; pending verification	Up to 60 minutes / 10 minutes
`inleika_b2b_verification`, `inleika_b2b_organization_selection`	Organization sign-in steps	10 minutes
`inleika-registration-cv-upload`	CV upload during signup	15 minutes
`NEXT_LOCALE`	Your language	Persistent

Our e-signature and payment providers may set their own cookies when you use their screens.

13. Country-specific information

13.1 Mexico (Aviso de Privacidad Integral)

Controller and address: section 1.
Data processed, including sensitive data: section 3.
Purposes: section 4. The primary purposes are necessary for the relationship. There are no secondary purposes.
Options to limit use or disclosure:
- the discovery setting;
- per-share choices for talent pools;
- interview consent;
- your notification settings;
- a request to privacy@parzr.com.
Transfers: to organizations (with your acceptance through the discovery choice) and to the United States (section 10). Transfers to our processors do not require consent.
ARCO rights (access, rectification, cancellation and objection):
- Send your request to privacy@parzr.com or our postal address. Include your name and contact details, proof of identity (or of your representative's authority), a clear description of the data, and the right you want to exercise.
- We will respond within 20 business days. If your request is approved, we will act on it within the following 15 business days. Each period may be extended once, if justified.
Revoking consent: same procedure.
Automated processing: you can object to automated processing that evaluates your professional performance without human involvement (section 5).
Complaints: you can file a data protection complaint with the Secretaría Anticorrupción y Buen Gobierno.
Changes to this Notice: we will tell you by email and in the Service (section 14).

13.2 Colombia

Your rights (Law 1581 of 2012):

know, update and correct your data;
request proof of your authorization;
be told how your data has been used;
file complaints with the Superintendencia de Industria y Comercio;
revoke your authorization or request deletion;
access your data free of charge.

Response times:

Inquiries: within 10 business days, extendable by 5.
Claims (corrections, deletion, non-compliance): within 15 business days, extendable by 8.

Your authorization. You give prior, express and informed authorization when you sign up, including for the international transfer described in section 10. Answers about sensitive data are optional. We keep proof of your authorization.

Face comparison. No activity is conditioned on your providing sensitive data (Decree 1377 of 2013, Art. 6). If an organization asks for face comparison and you decline, only the comparison is skipped: Mila still joins, and the organization sees that you declined.

Identity verification. When we ask you to verify your identity after a confirmed report, the check is your ID alone, without a selfie.

13.3 Argentina

You have the right to access your data free of charge at intervals of no less than six months, unless you show a legitimate interest (Article 14(3), Law 25,326).

The AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, as the Control Authority of Law No. 25,326, has the power to address complaints and claims from anyone whose rights are affected by non-compliance with data protection rules.

Response times:

Access: within 10 calendar days.
Correction or deletion: within 5 business days.

You give your free, express and informed consent when you sign up, including for the international transfer in section 10.

13.4 Chile (from December 1, 2026)

Your rights (Law 19,628 as amended by Law 21,719): access, rectification, deletion, objection, portability and blocking.

Automated decisions. You have the right not to be subject to decisions based solely on automated processing that significantly affect you. In any case, you are entitled to:

information;
an explanation;
human intervention;
express your point of view;
request a review.

Response times. We will respond within 30 calendar days, extendable once by 30. If we deny your request or do not answer in time, you can complain to the Agencia de Protección de Datos Personales.

Legal bases:

your consent (discovery, transfers, Mila interviews, photo);
the performance of our agreement with you (account and Service);
legal obligations;
our legitimate interest in security and fraud prevention.

International transfers. The United States is not currently recognized as adequate. We rely on your express consent and on contractual safeguards with our providers.

13.5 United States

We do not sell or share personal data for cross-context behavioral advertising.
We do not use sensitive personal data to infer characteristics about you.
We honor the rights in this Notice for US users. If a state privacy law gives you additional rights, we will honor them as that law requires.
Mila interviews take place only after you consent.

14. Changes to this Notice

We will post any update here with a new date and version. If a change is material (for example, a new purpose or a new kind of recipient), we will tell you by email and in the Service at least 30 days in advance. Where the law requires, we will ask for your consent again. Previous versions remain available.

15. Contact

Privacy Office, Parzr, LLC, 5640 Lenox Park Pl, Sugar Hill, GA 30518, United States · privacy@parzr.com

Questions about this document? Write to privacy@parzr.com.