Last updated June 12, 2026
Privacy Policy
Who we are
Gemsift (operated by XFounders Accelerator Ltd) helps recruiters sort incoming resumes into ranked shortlists. For candidate data, the recruiter using Gemsift is the data controller. Gemsift acts as a processor on the recruiter's behalf.
What we store
Recruiter account data (email address). Candidate data uploaded or forwarded by recruiters: resume files, the structured profiles we extract from them (name, contacts, work history, skills, education), and AI-generated evaluations against the recruiter's open positions.
How long we keep it
Until you delete it. We never delete or expire data automatically. Recruiters can permanently delete any single candidate, or all candidate data at once, from inside the product at any moment. Deleting a candidate removes them from your workspace immediately and irreversibly (a record that a deletion happened is kept for audit purposes, without the deleted content).
How AI is used
Resumes are parsed and evaluated by large language models (Anthropic Claude, with OpenRouter as a fallback provider). Model providers do not train on this data. AI output is advisory only: Gemsift never rejects a candidate automatically, and every screen in the product reminds the recruiter that the final call is theirs.
Where data lives
Data is stored with Supabase (database and file storage, US region, encrypted at rest and in transit). Other subprocessors: Vercel (hosting), Anthropic and OpenRouter (AI processing), Resend (email receiving and sending), Inngest (background job queue).
Candidate rights
If a recruiter has uploaded your resume to Gemsift and you want it removed, contact the recruiter directly, or email us at privacy@inbox.gemsift.com and we will identify and delete your data within 30 days.
Contact
privacy@inbox.gemsift.com