IntervAI Logo

Privacy Policy — IntervAI AI-Powered Hiring Platform

Version: 4.0 — July 2026
Owner: Team IntervAI
Last updated: 09.07.2026

1. Introduction

IntervAI ("we", "our", or "us") respects your privacy and is committed to protecting personal data in compliance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the General Data Protection Regulation (EU Regulation 2016/679 — GDPR), UK GDPR, and other applicable data protection laws. This Privacy Policy explains how we collect, use, process, share, and protect personal data when you use our AI-powered hiring platform.

This policy applies to the digital platform at intervai.net, used to support AI-powered recruitment services and match candidates with potential employers (recruiters). It also covers the IntervAI Talent service: an optional, consent-based talent pool through which candidate profiles may be retained and proactively matched and shared with prospective employers, including for positions the candidate did not directly apply to. KVKK applies to candidates residing in Türkiye; GDPR / UK GDPR applies to candidates residing in the EEA or UK.

2. Data Controller

Company Name: IntervAI (company in the process of legal incorporation)
Legal Status: IntervAI is currently operated by its founding team. Legal incorporation is in progress; this notice will be updated with the registered entity's full legal name, address, and registry details upon incorporation.
Controller Roles: (a) For positions you directly apply to, IntervAI generally acts as a data processor on behalf of the hiring employer. (b) For the IntervAI Talent pool, IntervAI acts as the data controller for the retention, matching, and sharing of pool profiles.
Contact Email: [email protected]
Website: https://www.intervai.net

3. Categories of Personal Data We Process

A. Candidate Identity and Contact Details

B. Application and Background Information

C. Motivation and Interaction

D. Technical and Analytical Data

E. Recruiter User Data

F. Talent Pool Data (only with your separate consent)

4. Purpose and Legal Basis for Processing

We process your data for the following purposes:

PurposeLegal Basis
To enable creation of candidate profilesConsent
To match candidate profiles with recruiter requirementsConsent
To facilitate AI-powered interviewsConsent, Legitimate Interest
To analyze performance and suggest improvements to candidatesConsent
To forward application details to recruitersConsent
To retain your profile in the IntervAI Talent pool beyond a single applicationExplicit Consent (KVKK Art. 5/1; GDPR Art. 6(1)(a))
To proactively match your pool profile against open roles of prospective employers, including roles you did not apply toExplicit Consent
To share your CV, Discovery Assessment answers, and AI evaluation scores with prospective employers for such rolesExplicit Consent
To contact you about matched opportunitiesExplicit Consent
To improve product functionality (anonymized)Legitimate Interest
To comply with legal obligations (e.g., tax, law enforcement)Legal Obligation
Recruiter account management and platform operationContract Performance, Legitimate Interest
Security monitoring and audit logs for recruiter accountsLegitimate Interest
Communication with recruiters (service updates, notifications)Contract Performance

5. How We Collect Your Data

We collect personal data:

6. Automated Processing and Profiling

Our platform may use AI tools to:

These processes constitute AI-based profiling. AI-based profiling is used to provide recruiters with advisory evaluation scores to assist in screening and candidate assessment. These scores are supportive only and do not replace human decision-making. The results are advisory only and do not constitute automated decision-making with legal or similarly significant effects. Final hiring decisions are always made by human recruiters.

If you have given separate consent to the IntervAI Talent pool, your AI-based evaluation scores may also be shared with prospective employers as part of proactive matching. In all cases these scores remain advisory; final hiring decisions are always made by humans.

7. Right to Object to Profiling; Talent Pool Opt-Out

Objection to AI profiling (interviews): AI-based evaluation is an essential part of the IntervAI interview. If you do not wish to be evaluated by AI, you may choose not to participate in the AI interview. Contact [email protected] before participating.

Talent pool opt-out (separate right): Membership in the IntervAI Talent pool is optional and based on your separate explicit consent. You may withdraw this consent and leave the pool at any time, without affecting any application you made directly or your ability to participate in AI interviews for roles you apply to. To leave the pool, contact [email protected] or use the opt-out link in our emails.

8. Data Sharing and Third Parties

We may share your personal data with:

A. Employers / Recruiters

(i) Positions you apply for: When you explicitly apply to a role, we share your submitted profile with that employer. Once shared, the employer acts as an independent data controller.

(ii) IntervAI Talent pool (optional, separate consent): If — and only if — you have given separate, explicit consent, we may retain your profile in the IntervAI Talent pool and proactively match and share it with prospective employers for roles you did not directly apply to. The data shared may include your CV, Discovery Assessment answers, and AI-based evaluation scores. Employers receiving pool profiles act as independent data controllers and are bound by a data sharing agreement with IntervAI. You may withdraw your pool consent at any time; withdrawal does not affect applications you made directly. Consent to the Talent pool is not required to apply for individual roles or to participate in an AI interview.

B. Sub-Processors / Vendors

We use third-party providers for hosting, AI processing, analytics, communications, and infrastructure. These include:

VendorPurposeData Location
AWSHosting, data storageEU region
AzureSpeech Recognition (SR)EU region
OpenAILLM processing (resume parsing, AI interviewer)US (SCC applied)
SendGrid (Twilio)Email deliveryUS (SCC applied)

All processors operate under GDPR-compliant terms. International data transfers are protected by Standard Contractual Clauses (SCCs).

9. International Transfers

Certain processors used by IntervAI (such as OpenAI and SendGrid) may process data outside the EEA and Türkiye, including in the United States. Where possible, EU-based data centers are selected (e.g., AWS, Azure).

For candidates residing in Türkiye: personal data may be transferred abroad — including to the hosting, AI processing and communication providers listed in Section 8.B, and, under the IntervAI Talent pool, to prospective employers located abroad where applicable — in accordance with Article 9 of Law No. 6698 (KVKK). Such transfers rely on: (i) your explicit consent to cross-border transfer, obtained as part of your registration or Talent pool consent; and/or (ii) the appropriate safeguards recognized by the Turkish Personal Data Protection Board, including standard contractual clauses, which will be executed and notified to the Board where required. All transferred data remains subject to the security measures described in Section 10.

For candidates residing in the EEA/UK: transfers outside the EEA/UK are protected by Standard Contractual Clauses (SCCs) under GDPR / UK GDPR.

10. Data Security Measures

We employ the following safeguards:

Further details are provided in our Security Measures document.

11. Data Retention and Deletion

Candidate Data

Recruiter Data

Recruiter account data is retained during the business relationship and deleted within 12 months after account closure. Related audit logs are retained for 6 months for security and compliance purposes.

12. Your Rights

As a data subject, you have the following rights:

To exercise these rights, contact [email protected]. Requests will be handled within 1 month.

Candidates residing in Türkiye (KVKK Art. 11): you additionally have the rights to learn whether your data is processed; request information; learn the purpose and whether data is used accordingly; know third parties to whom data is transferred (in Türkiye or abroad); request correction, deletion or destruction; request notification of these to third parties; object to results produced exclusively by automated systems; and claim compensation for damages. Applications: [email protected]. Responses within 30 days per KVKK.

Supervisory Authority (Türkiye):
Kişisel Verileri Koruma Kurumu (KVKK)
https://www.kvkk.gov.tr

Supervisory Authority (Austria/EU, for candidates residing in the EEA):
Datenschutzbehörde (DSB)
Barichgasse 40-42, 1030 Wien
https://www.dsb.gv.at

13. Recruiter Personal Data Handling

Data Collected

We collect and process the following personal data from recruiter users:

Purposes and Legal Basis

We process recruiter data for:

Data Retention

Recruiter account data is retained during the business relationship and deleted within 12 months after account closure. Related audit logs are retained for 6 months for security and compliance purposes. Records may be retained longer if required by law (e.g., tax, legal obligations).

Sub-Processors

Recruiter data may be processed by the same third-party vendors listed in Section 8.B (AWS for hosting, SendGrid for email communications, etc.). All processors operate under GDPR-compliant Data Processing Agreements (DPAs). International transfers to the US are protected by Standard Contractual Clauses (SCCs).

Your Rights

Recruiter users have the same GDPR rights as candidates, including: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. To exercise these rights, contact [email protected]. Requests will be handled within 1 month. Note that exercising certain rights (e.g., erasure) may result in account closure and inability to use the platform.

Employers receiving Talent pool profiles: act as independent data controllers from the moment of receipt and must process candidate data only for the recruitment purpose for which it was shared, under a data sharing agreement with IntervAI.

14. Cookies and Analytics

Essential Cookies (Consent not required)

Retention: Session or 30 days max

Analytics Cookies (Requires consent)

Retention: 26 months (Google default)
Data processor: Google LLC (US) - covered by DPA

You can use our platform with essential cookies only. Analytics cookies help us improve the service but are optional.

15. Changes to This Policy

We may update this Privacy Policy as our platform evolves or legal requirements change. Major changes will be communicated via email or in-app notification. Where an update introduces a new processing purpose that relies on your consent (such as the IntervAI Talent pool), we will not apply that purpose to your existing data without obtaining your renewed, explicit consent. The latest version is always available at https://www.intervai.net.

16. Contact

Team IntervAI
Email: [email protected]
KVKK data subject applications (Türkiye): [email protected] — please include "KVKK Başvurusu" in the subject line.

Disclaimer: IntervAI is operated by its founding team while legal incorporation is in progress. This Privacy Policy is effective from the date of publication and will be updated with the registered entity's details upon incorporation.
End of Document — Version 4.0 — July 2026


Kişisel Verilerin İşlenmesine İlişkin Aydınlatma Metni (KVKK m.10)

Veri Sorumlusu: IntervAI (kuruluş süreci devam eden şirketimiz; kuruluşla birlikte ticaret unvanı ve adres bilgileri bu metinde güncellenecektir). İletişim: [email protected]

İşlenen kişisel verileriniz: Kimlik ve iletişim bilgileri (ad-soyad, e-posta, telefon); özgeçmiş, eğitim ve iş deneyimi bilgileri; Discovery Assessment yanıtlarınız; AI destekli mülakat yanıtlarınız ve bunlardan üretilen değerlendirme skorları; kullanım ve teknik veriler (IP adresi, cihaz/tarayıcı bilgisi).

İşleme amaçlarımız: (1) Başvurduğunuz pozisyon için değerlendirmenizin yapılması ve başvurunuzun ilgili işverene iletilmesi; (2) ayrı açık rızanız varsa: profilinizin IntervAI Talent aday havuzunda 12 ay süreyle saklanması, doğrudan başvurmadığınız pozisyonlarla eşleştirilmesi, uygun müstakbel işverenlerle paylaşılması ve size fırsat bildirimi yapılması; (3) platformun geliştirilmesi ve güvenliğinin sağlanması; (4) hukuki yükümlülüklerimizin yerine getirilmesi.

Hukuki sebepler (KVKK m.5): Açık rızanız; bir sözleşmenin kurulması veya ifasıyla doğrudan ilgili olması; hukuki yükümlülüğün yerine getirilmesi; temel hak ve özgürlüklerinize zarar vermemek kaydıyla meşru menfaatimiz (yalnızca platform güvenliği ve anonimleştirilmiş ürün geliştirme ile sınırlı).

Verilerin aktarılması: Verileriniz; (i) başvurduğunuz pozisyonun işvereni ile, (ii) ayrı açık rızanız varsa Talent havuzu kapsamında müstakbel işverenlerle, (iii) barındırma, yapay zekâ işleme ve e-posta hizmeti aldığımız tedarikçilerle (AWS, Azure, OpenAI, SendGrid) paylaşılabilir. Bu tedarikçilerin bir kısmı yurt dışında yerleşiktir; yurt dışına aktarım KVKK m.9'a uygun olarak açık rızanıza ve/veya Kişisel Verileri Koruma Kurulu'nca öngörülen güvencelere (standart sözleşme dâhil) dayanılarak yapılır. Veriyi alan işverenler, aldıkları andan itibaren kendi sorumluluklarında bağımsız veri sorumlusudur ve IntervAI ile aralarındaki veri paylaşım sözleşmesine tabidir.

Toplama yöntemi: Verileriniz; platforma kaydolmanız, CV yüklemeniz, AI mülakatına katılmanız, Discovery Assessment formunu doldurmanız veya bizimle iletişime geçmeniz (örneğin LinkedIn üzerinden) yoluyla, otomatik ve kısmen otomatik yöntemlerle toplanır.

Yapay zekâ ile değerlendirme: Mülakat ve değerlendirme yanıtlarınız yapay zekâ ile analiz edilerek tavsiye niteliğinde skorlar üretilir. Bu skorlar karar değil destek amaçlıdır; nihai işe alım kararları her zaman insanlar tarafından verilir. Münhasıran otomatik sistemler vasıtasıyla analiz edilmesi suretiyle aleyhinize bir sonucun ortaya çıkmasına itiraz hakkınız saklıdır.

KVKK m.11 kapsamındaki haklarınız: Kişisel verinizin işlenip işlenmediğini öğrenme; işlenmişse bilgi talep etme; işlenme amacını ve amacına uygun kullanılıp kullanılmadığını öğrenme; yurt içinde veya yurt dışında aktarıldığı üçüncü kişileri bilme; eksik/yanlış işlenmişse düzeltilmesini isteme; silinmesini veya yok edilmesini isteme; bu işlemlerin aktarıldığı üçüncü kişilere bildirilmesini isteme; münhasıran otomatik sistemlerle analiz sonucu aleyhe çıkan sonuca itiraz etme; kanuna aykırı işleme nedeniyle zarara uğramanız hâlinde tazminat talep etme.

Başvuru: Haklarınızı kullanmak için [email protected] adresine "KVKK Başvurusu" konusuyla yazabilirsiniz. Başvurunuz en geç 30 gün içinde ücretsiz olarak sonuçlandırılır. Kişisel Verileri Koruma Kurumu'na (https://www.kvkk.gov.tr) şikâyet hakkınız saklıdır.

Talent havuzundan ayrılma: Havuz üyeliği ayrı açık rızanıza bağlıdır ve dilediğiniz an geri çekilebilir. Rızanızı geri çekmek için [email protected] adresine yazabilir veya e-postalarımızdaki bağlantıyı kullanabilirsiniz; bu, doğrudan yaptığınız başvuruları etkilemez.