HeyJob AI, Inc. (hereinafter referred to as the “Company”) handles applicants’ personal information in connection with the AI interview service “HeyJob” provided by the Company, based on delegation from client companies (hereinafter referred to as the “Client”). The Company complies with the Act on the Protection of Personal Information and other applicable laws and regulations, and, as a data processor, properly manages personal information as set forth below.
Last update : February 9, 2026
Scope of Personal Information Handled
In providing this service, the Company handles the following personal information:
- Applicants’ contact information, such as name, email address, and phone number
- Information contained in resumes, CVs, and other documents submitted at the time of application
- Video, audio, and response data obtained through AI interviews
- AI-generated analysis and evaluation results (scores, comments, etc.)
2. Purpose of Use
The Company uses personal information entrusted by the Client solely for the following purposes:
- Provision and operation of the AI interview support service
- Generation and provision of reports on interview results and evaluations
- Improvement of service quality and functionality
For improvement purposes, only anonymized data that cannot identify specific individuals will be used.
The Company shall not use personal information beyond the scope of the purposes stated above.
3. Security Management Measures
The Company implements reasonable technical and organizational security measures to prevent unauthorized access, leakage, loss, or damage of personal information.
Key measures include:
- Encryption of stored data and data in transit
- Restriction and management of access rights to personal information
- Collection and monitoring of access logs
- Establishment of internal policies and implementation of information security training for employees
4. Subcontracting
The Company may subcontract the handling of personal information to third parties, such as cloud service providers, to the extent necessary for providing the service.
In such cases, the Company will:
- Verify the information security standards of subcontractors
- Impose personal information protection obligations equivalent to those under this policy
- Properly supervise and manage subcontractors
5. Retention Period and Deletion of Personal Information
The Company retains personal information only for the period necessary during the contract term with the Client and as required by applicable laws or contractual obligations.
After the retention period expires, the information will be promptly deleted or erased using irreversible methods.
6. Response to Incidents
In the event of, or risk of, leakage, loss, or damage of personal information, the Company will promptly investigate the facts and provide the Client with necessary information and corrective actions.
7. Allocation of Responsibility
In this service, the Client bears responsibility as the data controller for managing applicants’ personal information. The Company acts as a data processor and handles personal information in accordance with the Client’s instructions and this policy.