1. Who does what: controller & processor roles
For candidate data processed through the Celper platform, our customer (the hiring organization) is the data controller and Vizionieriai, MB (“Celper”, “we”) is the data processor, acting on the customer’s documented instructions under a Data Processing Agreement (DPA). For website visitors and our own business contacts, Celper is the data controller.
2. Data we collect
- Website: contact-form details you submit (name, work email, company, team size, message, optional phone number) and strictly necessary technical data. The homepage demo-call field processes the phone number you type solely to place the requested demo interview call.
- Platform (on behalf of customers): CVs and application data, interview recordings and transcripts, AI-generated scores and reports, and related candidate contact details.
3. Purposes & legal bases (GDPR Art. 6)
We process website data to respond to enquiries and provide requested demos (legitimate interest / steps prior to a contract) and to operate the site securely (legitimate interest). Candidate data is processed on behalf of the controller to run first-stage recruitment; the controller is responsible for its lawful basis and for informing candidates.
4. AI processing & profiling transparency
Celper uses AI to conduct first-round interviews and to score and summarize candidate performance. This constitutes profiling-style analysis, but no decision producing legal or similarly significant effects is made solely by automated means: the platform technically prevents a candidate from being set to Selected or Rejected until a human reviews the AI analysis (GDPR Art. 22; EU AI Act Art. 14 human oversight).
5. EU data residency
Customer and candidate data is stored in the European Union on Google Cloud / Firebase infrastructure located in Belgium and the Netherlands.
6. Security
Data is encrypted in transit (TLS) and at rest. Access is role-based and limited to personnel who need it to provide the service. We maintain technical and organizational measures appropriate to the risk, as described in the DPA.
7. Retention
Candidate data is automatically deleted 12 months after collection, unless the controller deletes it earlier or instructs otherwise within the bounds of the DPA. Website enquiry data is kept only as long as needed to handle your request and reasonable follow-up.
8. Sub-processors
We use a limited set of sub-processors (including Google Cloud / Firebase for EU hosting and telephony/AI infrastructure providers necessary to deliver interviews). A current list is available on request and is referenced in the DPA; customers are notified of changes in line with the DPA.
9. Your rights
Data subjects have the rights of access, rectification, erasure, restriction, portability, and objection under the GDPR. Candidates should direct requests to the hiring organization (the controller); we support our customers in fulfilling them. Website visitors can contact us directly at info@celper.ai. You may also lodge a complaint with the Lithuanian State Data Protection Inspectorate (VDAI) or your local supervisory authority.
10. Cookies
We use only strictly necessary cookies/storage (for example, to remember your theme preference). We do not use advertising or marketing cookies.
11. International transfers
Data is stored in the EU. If a sub-processor ever requires a transfer outside the EEA, it takes place only with appropriate safeguards (such as adequacy decisions or Standard Contractual Clauses) as set out in the DPA.
12. Data Processing Agreement
A DPA implementing GDPR Article 28 is executed with every customer. Request a copy or a countersigned version at info@celper.ai.
13. Your homepage demo call
The homepage “call me a sample interview” feature is a separate, self-service demo. Because it is not run on behalf of a hiring organization, Celper is the data controller for it (unlike candidate data on the platform, where our customer is the controller).
- Recording & consent. When you request a demo call you tick a consent box and we place a short outbound call to the number you provide. The call is recorded, and the transcript plus an AI-generated scorecard are processed so we can show you the same recruiter view a hiring team would see. The legal basis is your consent, which you can withdraw at any time. This demo-call notice is version 2026-07-03, and that version is stored alongside your consent as proof of what you agreed to.
- Separate CRM / lead processing. If a demo call takes place, a minimized record of it (your name, phone number, the role you chose, the call outcome and the scorecard ratings — never the raw recording, transcript, IP address or device identifiers) may be stored in a separate Celper CRM system and used to follow up with you about Celper. This sales follow-up is a distinct purpose, carried out on the basis of our legitimate interest in contacting people who asked to try the product.
- Retention. Demo-call data is automatically deleted 30 days after the call — a much shorter window than the 12-month platform retention in section 7. A pseudonymized record that consent was given (with your phone number stored only as a one-way hash, never in the clear) is kept as proof of consent after the rest of the data is erased.
- Requesting erasure sooner. You can delete a demo call at any time: a call that is still ringing or in progress can be cancelled and deleted directly from the homepage, and you can ask us to erase your demo data early by emailing info@celper.ai. Erasure removes your demo record and cascades the deletion into the separate CRM system.
14. Contact
Privacy questions and requests: Vizionieriai, MB, Girulių g. 10, LT-12112 Vilnius, Lithuania · info@celper.ai · +370 682 82299.
15. Changes to this policy
We will post any changes on this page and update the “Last updated” date. Material changes affecting platform processing are additionally notified to customers.