Privacy Policy.

1. Overview

This Privacy Policy explains how ExpoSQL AI Labs (“ExpoSQL”, “we”) collects, uses, and shares information when you use Spoon. We built Spoon to be privacy-respecting by design: companies evaluate candidates on skills and interview performance, and a candidate’s identifying details are withheld from companies until the candidate advances to the connect stage.

2. Information we collect

Candidates: your name, email (via Google sign-in), phone number, photo, location, the role you do best, skills, work experience and education (with dates), salary expectations, and the answers and voice transcripts you provide during AI interviews.

Companies: your name and work email, company name, the roles and interview questions you create, billing details, and usage of credits.

Automatically: basic device/log data needed to operate and secure the service. Payment card details are collected and stored by Stripe, not by us.

3. How we use information

To create and run your account; to match candidates to roles; to conduct and score AI interviews; to validate dictated transcripts; to process payments and credits; to provide support; to keep the platform safe; and to improve the service. We do not sell your personal information.

4. AI processing

Interview questions, your answers/transcripts, and anonymized profile data are processed by our AI provider (Anthropic) to conduct interviews, validate transcripts, and generate matches, scores, and summaries. Only anonymized candidate data is used for matching — never your name or contact details.

5. What companies can and can’t see

Before the connect stage, companies see a candidate’s skills, experience, region, interview score and summary — but not name, email, phone, or photo. A company can access a shortlisted candidate’s contact details only after taking the deliberate connect step. This boundary is enforced in our application.

6. Sharing and subprocessors

We share data with service providers who help us run Spoon, under appropriate safeguards: Google (sign-in), Neon (database hosting), Vercel (application hosting), Stripe (payments), and Anthropic (AI processing). We may also disclose information if required by law or to protect rights and safety. Anonymized candidate data is shared with companies as described above.

7. Data retention

We keep your information for as long as your account is active and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. You can ask us to delete your account and associated personal data (see “Your rights”).

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Candidates can edit their profile at any time. To exercise other rights, email hello@exposql.com and we’ll respond within a reasonable time.

9. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and access controls. No system is perfectly secure, so we can’t guarantee absolute security.

10. International transfers & children

Your information may be processed in countries other than your own, including the United States and the EU, with appropriate safeguards. Spoon is not intended for anyone under 18, and we do not knowingly collect data from children.

11. Changes & contact

We may update this policy; material changes will be posted here with a new “last updated” date. Questions or requests? Email hello@exposql.com.