Privacy Policy
Kit Privacy Policy
For candidates who have a conversation with Kit as part of a job application.
Last updated: August 2026
Want your data deleted? Email privacy@speaktokit.com — no explanation needed. We'll action it, or pass it to the employer who controls your application, and confirm within 5 business days.
Contents
- What Kit is and whose side it's on
- Who this policy applies to
- Who we are
- What Kit does — and never does
- Filtering vs deciding
- What data we collect and why
- The legal basis for what we do
- Who controls your data
- Your rights
- How long we keep your data
- Who we share your data with
- International transfers
- Security
- A note on AI and automated processing
- If something goes wrong
- Updates to this policy
- Contact
0. What Kit is
Kit is an AI voice agent. If you have just had a conversation with Kit as part of a job application, this policy explains what happens to your information and what you can do about it. Your conversation is recorded and transcribed so the hiring team can review it. Every candidate is asked the same questions against the same criteria. If a voice conversation isn't right for you — for example, if you have a speech or hearing difficulty — contact us at privacy@speaktokit.com and we'll arrange another way to take part.
Kit flags the conversations worth the hiring team's attention, against the criteria they set. The hiring team evaluates the person and decides. No one is hired or rejected on the basis of a Kit conversation alone — a human always reviews the output and makes the decision.
This policy explains what we do with your information, what we never do, and what you can ask us to do or stop doing at any time. If you want your data deleted, email privacy@speaktokit.com — no explanation needed.
1. Who this policy applies to
This policy is for candidates — anyone who has a Kit conversation as part of a job application. It does not currently cover US operations, which will be addressed separately when applicable.
2. Who we are
When an employer uses Kit to screen candidates for their role, the employer decides how that information is used and we act on their behalf. You can reach our privacy contact at privacy@speaktokit.com.
3. What Kit does — and what it never does
What Kit does
- Conducts structured conversations with candidates on behalf of hiring companies
- Flags the conversations worth the hiring team's attention, against the criteria they set
- Surfaces relevant parts of the conversation to the hiring manager to help them make a better-informed decision
What Kit never does
- Makes hiring decisions — a human makes every decision about who to interview or not interview
- Builds negative profiles, blacklists, or adverse assessments of any individual
- Shares an individual's data with any party beyond the company they applied to, without explicit permission
- Uses your data to train AI models without your explicit consent
4. Kit flags; the hiring team decides
Kit flags the conversations worth the hiring team's attention, against the criteria they set for the role. The hiring team evaluates the person and decides. Kit scores your conversation against those criteria in order to flag it — it does not choose who is interviewed or hired.
Kit scores each conversation against the criteria a human set for that specific role. The score simply reflects the hiring team's own stated preferences for that role — it is not a judgment Kit forms about you. Humans decide the criteria, review the answers, and choose who goes to the next stage. Hiring decisions are not made by AI.
Right to work is a separate check, and whether it applies is set by the hiring company — not by Kit. When they set up a role, they say whether they will consider someone who does not currently hold the right to work — for example, whether they are willing to sponsor. Kit asks you directly and records your own answer; it does not infer your status. If the hiring company has made the right to work a firm requirement for the role and you confirm you do not have it, that application will not proceed — because the employer set that requirement, not because Kit judged you. Where the hiring company has said they will consider candidates without it, your answer is simply passed on for them to weigh. We do this because employers are legally required to check the right to work.
The hiring team evaluates the person and makes every interview and hiring decision. Kit does not make that decision.
5. What data we collect and why
What you tell Kit
During a Kit conversation, we collect:
- A recording and transcript of your conversation with Kit
- Your professional background as you describe it — work history, skills, experience
- Your responses to questions relevant to the role you applied for
- Basic contact and identification information provided as part of the application
6. The legal basis for what we do
We only use your information where we are allowed to. In plain terms: to run the screening you applied for and the steps around your application, and to meet legal obligations such as an employer's duty to check the right to work. We keep a record of how we handle information and can explain it if you ask.
7. Who controls your data
When Kit conducts a screening conversation on behalf of a hiring company, the hiring company is the data controller for your application data. They set the criteria for the role and are responsible for the hiring decision. We act as their data processor — we process your data on their behalf and under their instructions.
All companies that receive candidate data from Kit are bound by our Data Processing Agreement, which restricts how they may use that data and prohibits sharing it further without your consent.
8. Your rights — and how to use them
Under UK data protection law you have the following rights.
Access
Ask us what information we hold about you. For candidates, this specifically includes a copy of how your Kit conversation was summarised and presented to the hiring company — you have the right to see exactly what was shared about you.
Correction
If something we hold is inaccurate, ask us to correct it. If Kit misunderstood something you said, tell us and we will put it right and inform the hiring company.
Deletion
Ask us to delete your data. We will delete your application data on request, subject to any retention obligation owed to the hiring company.
Restriction
Ask us to stop actively using your data while we resolve a dispute about its accuracy or lawfulness.
Objection
Where we rely on legitimate interests, you can object to the processing. We will stop unless we can demonstrate compelling grounds that override your rights.
Portability
Where we have processed your data by automated means on the basis of consent or a contract, you can ask for a copy in a structured, machine-readable format.
How to exercise your rights
Email privacy@speaktokit.com with the subject 'Rights Request'. We will acknowledge within 5 business days and respond fully within 30 days. We may ask you to verify your identity before processing the request — this is to protect you, not to delay you.
9. How long we keep your data
We keep your information — including the recording and transcript of your conversation — for as long as it is needed for your application, and no longer than 36 months of inactivity, unless you ask us to delete it first. You can ask us to delete it at any time and we will. If the hiring company keeps you in its process, or has its own retention terms in its agreement with us, those apply for that role.
10. Who we share your data with
We share your data only in the following circumstances:
- With the hiring company you applied to, as part of the recruitment process they have engaged Kit to support. They are the data controller for this purpose.
- With the technical service providers that run the service — including voice-processing, AI, cloud-hosting and security providers — who process data on our instructions under appropriate data-protection agreements. A current list is available from our privacy contact.
- With regulators or law enforcement where we are legally required to do so.
We do not sell your data. We do not share your data with other employers, marketplaces, or any third party for advertising or commercial purposes. We do not use your data to build products or services for anyone other than the company you applied to.
11. International transfers
We are based in the UK. Some of the providers that help run the service may process your information outside the UK; where that happens, we make sure appropriate safeguards are in place to protect it.
If you are based outside the UK or EU and Kit has been used in your application process, the policy that governs your data is that of the jurisdiction in which the hiring company is based. Please contact us if you have questions about your specific situation.
12. Security
Our measures include:
- Encryption of all data in transit and at rest
- Access controls ensuring only authorised personnel can access personal data
- Regular security testing proportionate to our scale
- A documented incident response procedure — if a breach occurs that requires notification, we will inform affected individuals and the ICO within the required timeframes
13. A note on AI and automated processing
Kit is an AI voice agent. Your conversation with Kit is recorded and transcribed so the hiring team can review it — Kit tells you this at the start. Kit also uses AI to organise and present information to hiring teams. We want to be clear about what this means in practice.
Kit does not make hiring decisions. Every decision about whether to invite someone for interview, or not, is made by a human at the hiring company. Kit's role is to help candidates represent themselves fully and to help hiring teams have better information — not to replace their judgment.
Kit scores each conversation against the criteria the hiring team set, and flags the ones worth their attention, to help the team decide who to speak to. Kit does not make the judgment about you — a human at the hiring company does.
14. If something goes wrong
If you have a concern about how we have handled your data, please contact us first. We want to resolve issues directly and promptly.
Email: privacy@speaktokit.com
We aim to respond to complaints within 5 business days.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
15. Updates to this policy
We may update this policy from time to time on a reasonable basis. The current version is always the one published on our website.
16. Contact
- Email: privacy@speaktokit.com
- Rights requests: Response within 30 days
- Complaints: Response within 5 business days
- Governing law: England and Wales, without prejudice to mandatory protections under applicable law.