Legal

Privacy Policy

Last updated: July 2, 2026

This is a plain-English summary of how we currently handle data, and it isn’t legal advice.

workalong helps small teams hire. You build a job page with an AI “twin” that candidates chat with, and that twin answers in your voice and helps you spot the people worth a real conversation. To do that, we handle data about you, your company, and the candidates who apply. This policy explains what we collect, why, and the commitments we make about it. We’ve tried to keep it honest and readable rather than dense.

Who this applies to

Three groups of people show up in this policy, and it’s worth being clear about which is which:

For candidate data, our role is different from the hiring company’s. More on that below under data ownership.

What we collect

Account and company info

When you sign up, we collect your name, email, and the details you add about your company and your roles. If you subscribe, our payment processor handles your card details and shares a limited billing record with us. We never see or store your full card number.

Candidate-provided data

When a candidate chats with a twin, we process what they share: their name and contact details if they give them, the messages in the conversation, and any application information they provide. This data is collected on behalf of the hiring company that owns the page.

Usage and analytics

We collect basic technical and usage data (pages viewed, actions taken, device and browser type, approximate location from IP) to keep the product working, fix problems, and understand what to improve.

Cookies

We use a small number of cookies and similar technologies to keep you signed in and to measure how the product is used. See the cookies section below for detail.

How we use it

We use the data we collect to:

AI processing

The heart of the product is the twin. Candidate conversations are processed by AI models so the twin can answer questions in the company’s voice and help assess how well a candidate fits the role. This processing happens to deliver the service you asked for.

Two firm commitments. We do not sell personal data, full stop. And we do not use your data or your candidates’ data to train third-party models or the models of other customers. Your conversations are used to serve your hiring, not to build a product on the back of someone else’s.

Data ownership and who controls it

Candidate data belongs to the hiring company. The company decides why it’s collected and what happens to it, which in data protection terms makes the company the controller. workalong acts as a processor: we handle candidate data on the company’s instructions, to run the service, and not for our own separate ends.

If you’re a candidate and you want to know how your data is being used for a specific role, the hiring company behind that page is the right first point of contact. We’ll help them help you.

Sharing and subprocessors

We don’t sell data and we keep sharing to what the service actually needs. We rely on a small set of trusted providers to operate:

These providers act on our instructions under contracts that require them to protect the data and use it only to provide their service to us. We may also share data where the law requires it, or to protect the rights and safety of people using the product.

Data retention and deletion

We keep data for as long as your account is active and the data is needed to run the service, then for a reasonable period afterward to meet legal, accounting, and security needs. You can export your candidates, chats, and notes whenever you like, and we’ll delete your data on request. It’s yours: export it whenever you like, and we delete it on request. We don’t sell it, and we don’t train anyone else’s model on it.

Your rights

Depending on where you live, you have rights over your personal data, including the right to access it, correct it, delete it, take a portable copy, and object to certain uses. For candidates in the EU, the GDPR applies and those rights are backed by law.

Because the hiring company is the controller of candidate data, requests about a specific role usually start with that company, and we support them in responding. You can reach us any time using the contact details below and we’ll point you the right way.

Security

We protect data with encryption in transit, access controls, and sensible operational practices, and we work with providers who do the same. No system is perfectly secure, so we can’t promise absolute safety, but we take this seriously and we’ll tell you promptly if something goes wrong that affects you.

Cookies

We use cookies that are strictly necessary to keep you signed in and the product working, plus a light layer of analytics cookies to understand usage. You can control cookies through your browser settings, though turning off the necessary ones may break parts of the product.

Children

workalong isn’t built for children. We don’t knowingly collect data from anyone under 16 without a lawful basis, and job pages should only be opened to candidates who are old enough to work and to consent to this processing where that’s required. If you believe a child’s data has reached us in error, contact us and we’ll remove it.

Changes to this policy

As the product grows, this policy will change with it. When we make a meaningful update we’ll revise the date at the top and, for significant changes, let you know directly. Continuing to use workalong after an update means the current version applies.

Contact

Questions, requests, or concerns about privacy? Email us at hello@workalong.io and a real person will get back to you. You can also write to us by post: workalong · Ben Mann, Postfach 700106, 32529 Bad Oeynhausen, Germany.