Legal

Privacy Policy

Last updated 18 June 2026

This Privacy Policy explains how Teamcast, Inc. (“Teamcast”, “we”, “us”) collects, uses, shares, and protects personal data when you use our website and our AI-led interview and measurement platform (the “Service”). We built Teamcast around a simple rule: the system measures, people decide. This policy reflects that.

1.The two roles we play

Our responsibilities depend on whose data is involved:

  • As a processor (service provider). When an employer (our “Customer”) runs interviews and assessments, the Customer decides what is collected and why. For that candidate data, the Customer is the controller and Teamcast processes it on their instructions under our Data Processing Agreement. Candidates should direct rights requests to the employer they applied to; we will assist that employer.
  • As a controller. For account registration, billing, website analytics, and our own communications, Teamcast is the controller and this policy governs directly.

2.Information we collect

  • Account & workspace data: name, work email, company, job title, hashed password, role, and workspace settings.
  • Candidate interview data (on a Customer’s behalf): résumé/CV content you or the candidate provide, audio and video of the interview, transcripts, the candidate’s responses, and derived measurement outputs — per-competency coverage and the behavioral evidence traced to specific transcript moments.
  • Communications: emails, support requests, and verification one-time codes.
  • Technical & usage data: IP address, device/browser, log and diagnostic data, and limited cookies needed to run the Service.

We do not use the Service to infer emotions or affective state, and we do not perform biometric identification — consistent with the EU AI Act’s limits on emotion recognition in the workplace.

3.How we use personal data

  • Provide the Service — conduct the structured interview, transcribe it, and produce competency coverage and evidence for the Customer.
  • Authenticate users and candidates, secure accounts, and prevent abuse.
  • Operate, maintain, debug, and improve the Service (using aggregated or de-identified data where feasible).
  • Communicate about the Service, including security and transactional notices.
  • Meet legal, regulatory, and contractual obligations.

Where the GDPR/UK GDPR applies and we are the controller, our legal bases are: performance of a contract, our legitimate interests (running and securing the Service), consent (where required), and compliance with legal obligations. Where we are a processor, the Customer is responsible for its own legal basis and for providing candidates with required notices and choices.

4.AI, automated processing, and human oversight

Teamcast uses AI to conduct interviews and to score responses against a fixed competency rubric. Scoring is deterministic and produces coverage and evidence — not a hire/no-hire decision. Teamcast does not make, and does not output, an automated employment decision.

  • Human in the loop. A person at the employer reviews the evidence and makes every hiring decision. You have the right not to be subject to a decision based solely on automated processing (GDPR Article 22); because a human decides, that safeguard is built in.
  • Transparency & logging. Outputs are traceable to the exact transcript moment, and interview/scoring activity is logged, supporting the EU AI Act’s requirements for high-risk recruitment systems.
  • Employer obligations. Employers using the Service may have their own duties — for example candidate notice, EU AI Act deployer obligations, or independent bias audits and notices under laws such as NYC Local Law 144 for automated employment decision tools. Customers are responsible for meeting those obligations for their hiring process.

5.When we share data

We do not sell personal data. We share it only as needed to run the Service:

  • With the employer whose role the candidate interviewed for.
  • Subprocessors that power the Service under contract — including Google Cloud (speech-to-text, text-to-speech, model inference, and recording storage) and our hosting and email providers. A current list is available on request.
  • Legal & safety — to comply with law, enforce our terms, or protect rights and security.
  • Business transfers — in a merger, acquisition, or asset sale, subject to this policy.

6.International transfers

We are based in the United States and may process data there and in other countries. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7.Retention

When Teamcast acts as a processor, we keep candidate data for as long as the Customer instructs and then delete or return it per our agreement. For data we control, we keep it only as long as needed for the purposes above or as required by law, after which it is deleted or de-identified.

8.Security

We use technical and organizational measures appropriate to the risk — encryption in transit, access controls and role-based permissions, tenant isolation, hashed credentials, and least- privilege service accounts. No method of transmission or storage is perfectly secure, but we work to protect your data and to notify affected parties of incidents as required by law.

9.Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict your personal data, to object to certain processing, to withdraw consent, and — under the GDPR — to request human review of automated processing. California residents (CCPA/CPRA) may request access and deletion and may opt out of “sale” or “sharing”; we do not sell personal data.

To exercise rights for data we control, email hello@teamcast.ai. If you are a candidate, contact the employer you applied to (the controller); we will help them respond. We will not discriminate against you for exercising your rights.

10.Cookies

We use only the cookies and similar technologies needed to sign you in, keep the Service secure, and remember basic preferences. You can control cookies through your browser; disabling essential cookies may break parts of the Service.

11.Children

The Service is for workplace use and is not directed to children. We do not knowingly collect data from anyone under 16. If you believe a minor has used the Service, contact us and we will delete the data.

12.Changes to this policy

We may update this policy as the Service or the law evolves. We will post the new version here with a revised “Last updated” date and, for material changes, provide additional notice. Your continued use after an update means you accept the revised policy.

13.How to reach us

Questions or requests about privacy? Contact us using the details below, or see our Terms of Service.