Privacy Policy

Core Value Recruiting ("Core Value Recruiting", "we", "us") is operated by Service Levers LLC, 4612 S. Carmine, Mesa, AZ 85212. It includes the website at corevaluerecruiting.com, the client portal, the application and scheduling pages we host for our clients, and the interview pages applicants use.

This policy covers three groups of people:

• Client businesses that subscribe to Core Value Recruiting, and the owners, admins and hiring managers on their team who use the portal.
• Job applicants who apply to, schedule with, or interview with a business that uses Core Value Recruiting.
• Visitors to our website and people who ask us for information.

Use of the service by client businesses is also governed by our Terms of Service.

When you apply for a job through Core Value Recruiting, you are applying to the business that posted the opening, not to us. That business decides what to ask you, whom to interview, how to score interviews, whom to hire, and what messages to send. For applicant information, the business is responsible for its use (in privacy-law terms, the "controller" or "business"), and we process that information on the business's behalf to provide the service (a "processor" or "service provider").

Each business's own privacy practices apply to how it uses your application. If you have questions about a business's decision or its records about you, contact that business. If you contact us instead, we will tell you which business holds your information and, where appropriate, pass your request to it.

For information about client businesses and their team members, and about visitors to our website, we are responsible for its use.

Account and team

• Name, email address and sign-in details for each person on your team, handled by our sign-in provider (Clerk). If you choose to sign in through another account provider, we receive what that provider shares with Clerk, such as your name and email address.
• Your organization and each person's role in it: Owner, Admin or Hiring Manager.
• Invitations you send to colleagues (their email address and the role offered).

Company and business profile

• Company profile: company name, the web address of your public application page, logo address, brand color, reply-to email address and time zone. Your company name, logo and color appear on your public application page and on your public job pages.
• Optional business profile: your trade, service areas, team size, expected hiring over the next 12 months, and whether you confirmed your time zone. If you choose to give it, an annual revenue range, which only your Owners and Admins can see, which no other feature reads, and which is never sent to an AI provider.

What you create in the service

• Your answers to the core-value discovery questions (which may describe a real team member and what they did), your core values and their descriptions.
• Job openings and the details you state about each role (such as title, industry, location, work arrangement, schedule, pay and benefits), screening questions, interview questions, scoring criteria, interview sessions and meeting links, email templates and onboarding checklists. When you publish an opening, its ad text, location, employment type and the pay you enter appear on a public job page that anyone can open and that search engines can index; pages on the Free plan are not offered to search engines. Unpublishing removes the page, but we cannot recall a copy a search engine or another person has already kept.
• Your team's interview scores and notes, hiring decisions, handoffs to a hiring manager, the hires you record, and your answer to the 90-day "is this hire still with you?" follow-up.
• Applicant lists you import from a spreadsheet, and the files you use to do so, to the extent they are processed into applicant records.

Compliance records

Before a business can publish a job opening or use AI features, an Owner or Admin accepts our equal employment opportunity terms, and each publication records an attestation. These records store who accepted or attested, when, and a fingerprint (hash) of the content attested to. They are append-only: they cannot be edited or deleted, because they are evidence of what was agreed.

Billing

Your plan, subscription status, and the customer and subscription identifiers issued by our payment processor (Stripe). You enter card details on Stripe's own checkout and billing pages; we do not receive or store full card numbers.

Connected accounts

If you connect your own GoHighLevel account, we store its location identifier, the webhook addresses you configure, and an access token. The access token is kept encrypted in a secrets vault in our database and is not readable by ordinary database access.

Usage information

• Setup progress events (an event name and a setup stage, with no answer content), and a record when someone reaches a feature their plan does not include.
• Counts we keep to apply plan limits and daily AI and email allowances.
• A record of each AI request: the organization, the person who made it, which feature, the plan, the model, and how many tokens it used. It never holds the text sent to or returned by the AI provider.
• A record of each email the service sends to your team, such as new-application and handoff notices.

We process the following on behalf of the business you apply to. Which of these apply depends on the features that business uses.

Your application

• Your first and last name, email address and phone number.
• Your answers to the business's yes/no screening questions, the opening you applied for, and when you applied. If you apply more than once, each application is kept in your history with that business.
• Your consent to receive messages about your application: whether you agreed, the exact wording you were shown, and when.
• Technical information from your application request: your IP address and an approximate location (city, region and country) that our hosting provider derives from it. Your IP address is also used to limit how many requests one connection can make to our public application pages.
• Campaign tags in the link you followed, if any (a "source" tag and standard UTM tags), which tell the business which advertisement brought you.

The application form does not ask for your date of birth, Social Security number, race, ethnicity, sex, disability, veteran status or other demographic information, and it does not take resume uploads. The screening questions are written by the business.

Scheduling and interviews

• The interview time you book or reschedule, and whether the business marked you as attending.
• Live interviews in Core Value Recruiting's own interview room: when you asked to join, when you were let in from the waiting room, and when you joined and left. Live interviews are not recorded by Core Value Recruiting.
• Live interviews held on another meeting service (for example Zoom, or a link the business provides) are handled by that service under its own terms.

Recorded video interviews

Some businesses invite applicants to record video answers to written questions. If you take one, we process the video and audio recordings of your answers (stored and streamed by our video provider, Mux), when you were invited, opened the interview and submitted it, and technical events from the recording page such as a camera permission being refused, together with your browser's user-agent (device and browser type). Recordings are played back to the business through time-limited signed links.

Evaluation and hiring

• Scores (above, meets or below expectations) and notes from the business's reviewers, the business's hiring decision, and any handoff to a hiring manager.
• If you are hired: the business's record of the hire, any onboarding checklist, information you provide through an onboarding link the business sends you, and whether the business reports you are still employed 90 days later.
• When two applications to the same business share a phone number, the service shows the business that they may be the same person. It never blocks, merges or discards an application because of this.
• A record of each email the service sends you and whether it was delivered or bounced.

A business may also add past applicants to its account by importing a spreadsheet. In that case, the business chose to provide your information to us.

• If you fill in a form on our website (for example to request a free resource, claim an offer, or ask about a plan), we collect what you enter, such as your name, company, email address, phone number, trade and team size, and store it in our own customer relationship management account (GoHighLevel) so we can send what you asked for and follow up about Core Value Recruiting.
• Choosing a plan on our pricing page takes you to Stripe's checkout to pay.
• Our marketing pages do not currently load any third-party analytics or advertising tags. If we add them, we will update this policy.
• Our hosting provider processes your IP address and standard request information to deliver pages and protect the service.

• To provide the service: hosting application pages, routing applications, scheduling and hosting interviews, storing recordings, sending the messages a business has set up, and showing each business its own records.
• To keep the service secure and working: authenticating users, separating each business's data, limiting request rates, reviewing a new free-plan business's first job listing before it goes live, and handling reports about listings.
• To apply plan limits, bill subscriptions and provide support.
• To tell a business's team about activity in their account, such as a new application, a finished recorded interview, a handoff, or the 90-day retention question.
• To keep the compliance records described above and to meet legal obligations.
• To follow up with people who ask us for information about Core Value Recruiting.
• To understand and improve the product, using counts and content-free events.

We do not sell personal information, and we do not share it for targeted (cross-context behavioral) advertising. We do not use applicant information to advertise to applicants, and we do not use applicant information to train AI models.

Core Value Recruiting offers optional AI features that write drafts for a business. They use OpenAI's models through OpenAI's API, under our account. They work only for a business on one of our plans, including the free plan within its allowance, and only after an Owner or Admin has accepted our equal employment opportunity terms. The allowances are set out in our Terms of Service, and we can switch AI off for everyone at any time.

What the AI features do, and what they receive

• Drafting a job ad. Sent to OpenAI: the role title, industry, location and company name, the business's chosen core values with their descriptions, and the role details the business states (such as work arrangement, employment type, schedule, pay and benefits). If the business leaves industry or location blank, those two come from its business profile.
• Suggesting core values. Sent to OpenAI: the business owner's answers to the discovery questions, which may describe a real team member. We ask owners not to include information they would not want shared with our AI provider. Each business can request at most 20 suggestions a day.
• Drafting interview questions (on plans that include recorded video interviews). Sent to OpenAI: the business's core values and, if given, the role title.

No applicant information is sent to an AI provider. The business's revenue range is never sent either.

People make the decisions

• Every AI output is a draft the business reviews and edits. A job ad cannot be published without passing a rule-based wording check and the business's own attestation. AI-drafted interview questions are saved only if the business chooses to save them.
• Core Value Recruiting does not use AI to screen, score, rank or decide on applicants. Interview scores and hiring decisions are entered by people at the hiring business.
• Screening questions are yes/no rules the business writes. The service applies them automatically to route an application, for example to interview scheduling or to the business for review. An application that does not meet a business's screening rules is sent to the business for review; the service does not send a rejection on its own.
• Recorded video interviews are watched and scored by people. We do not analyze them with AI.

Text messages (SMS)

The Core Value Recruiting service does not itself send text messages. When you apply, you are asked to agree to receive non-marketing text messages from the hiring business about your application, such as appointment confirmations and scheduling updates. We record that consent (the time and the exact wording) and make it available to the business. Any texts are sent by the business, usually through its own messaging or CRM system.

• Message frequency varies. Message and data rates may apply.
• Reply STOP to any text to opt out, or HELP for help. You can also ask the business directly to stop texting you.
• We do not share your mobile number or your text-message consent with third parties or affiliates for their marketing or promotional purposes.

Email

Applicants receive emails about their application, such as interview invitations, reminders and outcome messages. These are sent on the business's behalf, either by us through our email provider (with the business's name, and replies going to the business) or by the business's own GoHighLevel account. They are not marketing. If you receive marketing email from us after contacting us, every such email lets you unsubscribe.

With the business you apply to. Everything described in the applicant section is available to the business and the team members it gives access to.

With our service providers, who process information for us to run the service:

• Clerk: sign-in, user accounts, organizations and team invitations.
• Supabase: our database, which stores the service's records, and the encrypted vault for connected-account tokens.
• Vercel: hosts the website and application, and derives approximate location from IP addresses on applications.
• Stripe: subscription checkout, billing and payment processing.
• Resend: sends the service's emails and reports deliveries, bounces and complaints.
• Mux: uploads, stores and streams recorded video interviews.
• OpenAI: the optional AI drafting features described above, which receive business information only.
• LiveKit open-source software, which runs Core Value Recruiting's own live interview room on a server we operate with a hosting provider. Audio and video pass through that server during the call.
• Zoom: for interview sessions set up as Core Value Recruiting-hosted Zoom meetings, we create the meeting through Zoom; participants who join are subject to Zoom's terms.
• GoHighLevel (HighLevel): our own account stores inquiries from our website. Separately, if a business connects its own GoHighLevel account, we send applicant information to that business's account (such as name, email, phone, application details, consent time, approximate location, interview times and links, and tags reflecting screening and hiring outcomes). The business's own workflows there may send you emails or texts; the business controls them.
• Google Fonts: every page of the application loads fonts from Google, including the client portal, sign-in and sign-up, application and interview pages, and these policies, so your browser sends a request (including your IP address) to Google. Our marketing pages host their own fonts and do not.

For legal reasons and business transfers. We may disclose information when required by law or legal process, to protect the rights, safety and security of people or the service, or as part of a merger, acquisition or sale of assets, subject to this policy.

The service is intended for businesses and applicants in the United States, and our service providers may process information in the United States and other countries.

• Our sign-in provider sets cookies that keep you signed in to the portal. They are required.
• The portal keeps interview scores and notes in your browser's storage until they are saved, so an interrupted connection does not lose them.
• The application and scheduling pages keep your place in your browser's session storage between steps.
• We do not use advertising cookies.

The service does not currently delete information on an automatic schedule. We keep it while the business's account exists, or until it is deleted as described here. If a paid subscription ends, the account moves to our free plan and its information is kept.

• An Owner or Admin can delete an applicant. That removes the applicant's record and the records linked to it from our database, and asks the business's connected GoHighLevel account to delete the matching contact.
• Recorded interview videos are stored with Mux. When an applicant re-records an answer, the replaced recording is deleted. Deleting an applicant does not currently delete their recordings from Mux; we delete them on request.
• Equal employment opportunity acceptances and publication attestations are kept permanently, as described above.
• Our providers keep backups, so deleted information may remain in backups for a limited time before it is overwritten.
• A business that wants its account and information deleted can ask us at privacy@servicelevers.com.

Depending on where you live, US state privacy laws (for example in California, Colorado, Connecticut, Virginia and other states) may give you the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, and to opt out of its sale, its use for targeted advertising, or certain kinds of profiling. We do not sell personal information or use it for targeted advertising.

• To make a request, email privacy@servicelevers.com or write to us at 4612 S. Carmine, Mesa, AZ 85212.
• We will ask for information to verify your identity before acting. You may use an authorized agent, and we may ask the agent for proof of your authorization.
• Applicants: your application records belong to the business you applied to, and we act on that business's instructions. We will direct your request to that business or help it respond.
• If we decline your request, you can appeal by replying to our decision. We will not treat you differently for exercising your rights.

Core Value Recruiting is not directed to children under 13, and we do not knowingly collect their personal information. Applicants must meet the minimum working age set by law and by the hiring business. If you believe a child under 13 has given us personal information, contact us and we will delete it.

• Information is encrypted in transit between your browser and the service.
• Each business's records are separated at the database level by its organization, and team roles limit who can change what.
• Links sent to applicants for scheduling, recorded interviews and interview rooms are signed and expire. Recorded interviews play through time-limited signed links.
• Connected-account tokens are stored encrypted, and the public application pages are rate-limited.

No system is perfectly secure. If a security incident affects your personal information, we will notify you or the business as the law requires.

We may update this policy as the service changes. We will post the new version here with a new "Last updated" date, and tell client businesses about material changes by email or in the portal before they take effect.

Service Levers LLC
4612 S. Carmine, Mesa, AZ 85212
privacy@servicelevers.com