Last updated: July 21, 2026
This Privacy Policy describes how MyRecruiter LLC ("Company," "we," "us," or "our") collects, uses, discloses, and safeguards information when you visit or use our website, chat widget, connected messaging channels, and related services (collectively, the "Service"). It also explains your privacy rights and how the law protects you.
By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
Words with capitalized initial letters have meanings defined below. These definitions apply whether the terms appear in singular or plural form.
MyRecruiter operates in two distinct roles, and your rights depend on which applies.
When we act as a Processor (Service Provider). In most End User interactions, MyRecruiter processes Personal Data on behalf of a Customer. For example, when you use a nonprofit's chatbot, submit a form, or message that nonprofit through Facebook Messenger or Instagram, the Customer is the Data Controller and MyRecruiter is a Processor acting on the Customer's instructions and under our agreement with them. In these cases:
When we act as a Controller. When you interact directly with MyRecruiter's own website, marketing, sales, or account functions (for example, requesting a demo, corresponding with us, or administering a Customer account), MyRecruiter is the Data Controller for that information.
The Service is built around interactive conversations. When you use a chatbot or message a Customer through a Messaging Channel, we collect and process:
Please avoid submitting information you do not wish to share. Because conversations are open-ended, they may contain Personal Data you choose to include.
When a Customer connects Facebook Messenger or Instagram and you message that Customer, we receive from Meta:
We do not request or receive your Facebook or Instagram profile, friend list, or public content through this integration. See "Messaging Channels — Facebook Messenger and Instagram" for how this data is handled and "Your Privacy Rights and Choices" for deletion.
Usage Data is collected automatically and may include:
When accessing the Service via a mobile device, additional information such as device type, operating system, and mobile browser type may be collected.
We use Cookies and similar technologies to operate and improve the Service.
| Type | Category | Purpose |
|---|---|---|
| Essential | Session | Enable core functionality and security |
| Acceptance | Persistent | Record cookie-consent preferences |
| Functionality | Persistent | Remember user preferences and settings |
You can control cookie preferences through your browser settings. Refusing cookies may limit certain features of the Service.
We use Personal Data to:
Where we act as a Processor, we use End User data only to provide the Service on the Customer's behalf and per the Customer's instructions.
The Service uses automated systems and Artificial Intelligence to generate responses, analyze interactions, and improve functionality.
Our Customers may connect their Facebook Page or Instagram professional account to the Service so that messages sent to them through Facebook Messenger or Instagram are answered automatically on their behalf.
What we receive and how we use it. When you message a Customer through these channels, we receive the data described in "Messaging Channel Data" above (a platform-assigned user ID, your message content, and message metadata). We use it solely to generate and deliver a response on behalf of the Customer you contacted, using the AI systems described in "Artificial Intelligence and Automated Processing." Message content is processed by our AI service provider to produce a reply, which is then delivered back to you through Meta's platform.
Compliance with Meta terms. Your use of Facebook Messenger and Instagram is also governed by Meta's own Privacy Policy and terms. We handle Meta Platform Data in accordance with the Meta Platform Terms and Developer Policies. Specifically:
Requesting deletion of messaging data. See "Deletion of Messaging Channel Data" under "Your Privacy Rights and Choices" for how to request deletion of data associated with your Messenger or Instagram conversations.
If you provide a phone number, you may receive SMS messages related to the Service. Message and data rates may apply. Message frequency varies. You may opt out at any time by replying STOP or following the instructions provided in the message; reply HELP for help. Where required, we record your consent to receive messages, including the time and the language of the consent shown to you. SMS opt-in consent is not shared with third parties for their own marketing.
We do not sell your Personal Data. We share Personal Data only as described here:
Where a Customer directs data to a downstream destination it controls (for example, its own CRM, spreadsheet, email, or webhook endpoint), that transfer is made at the Customer's direction and under the Customer's own privacy practices; such destinations are not our Subprocessors.
We engage the following categories of Subprocessors to operate the Service. Personal Data is shared with them only as needed to provide the Service.
| Subprocessor | Role | Data processed |
|---|---|---|
| Amazon Web Services (incl. Amazon Bedrock) | Cloud infrastructure and AI model hosting | Hosting, storage, encryption, and AI processing of message content and related data |
| Anthropic PBC (Claude, via Amazon Bedrock) | AI model provider | Message content and knowledge-base context used to generate responses; not used to train its models |
| Meta Platforms, Inc. | Messaging Channel delivery | Platform-assigned user IDs and message content, to deliver messages via Messenger/Instagram |
| Telnyx LLC | SMS delivery | Recipient phone number and message content |
| Clerk | Authentication (Customer administrators) | Administrator email and account identifiers |
| Google LLC (Calendar API) | Scheduling (where enabled) | Attendee name, email, appointment time, and meeting link |
| Firecrawl | Knowledge-base content preparation | Customer website content (not End User Personal Data in ordinary use) |
| Stripe | Billing | Customer (organization) billing data; no End User Personal Data |
A current list of Subprocessors is available on request. We remain responsible for our Subprocessors' handling of Personal Data as required by applicable law and our agreements.
We retain Personal Data only as long as necessary to fulfill the purposes described in this Policy, provide the Service to our Customers, comply with legal obligations, resolve disputes, and enforce agreements.
Where we delete Personal Data, residual copies may persist for a limited additional period in encrypted backups and point-in-time recovery snapshots before they expire. Customers may specify retention settings that apply to their data.
We use commercially reasonable administrative, technical, and physical safeguards to protect Personal Data, including encryption in transit and at rest, access controls, tenant isolation, and encryption of sensitive credentials with managed keys. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Depending on where you live and our role (Controller or Processor), you may have the rights below. Where MyRecruiter acts as a Processor for a Customer, we will assist the Customer in fulfilling your request or refer you to the Customer as the Controller.
You may request to:
We will not discriminate against you for exercising these rights.
Contact us at privacy@myrecruiter.ai. We will verify your request as required by law before acting on it. You may use an authorized agent where permitted.
To request deletion of data associated with your Messenger or Instagram conversations, contact us at privacy@myrecruiter.ai. Because these channels identify you only by a platform-assigned ID (not your name or email), please include enough detail — such as the organization you contacted and the approximate date — for us to locate your messages. If we cannot reasonably associate a request with stored data (for example, where no identifying detail is provided), we may be unable to complete the request. Messaging Channel content also ages out automatically as described in "Retention of Your Personal Data."
If you are a California resident, you have the right to know, access, correct, and delete your Personal Information, to opt out of "sale" or "sharing" of Personal Information, and to limit use of Sensitive Personal Information. We do not sell your Personal Information, and we do not "share" it for cross-context behavioral advertising. We do not knowingly sell or share the Personal Information of individuals under 16.
To exercise these rights, contact us as described in "How to Make a Request." You may designate an authorized agent.
If you reside in a state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, or others), you may have rights to access, correct, delete, obtain a portable copy of, and opt out of targeted advertising, sale, or certain profiling of your Personal Data. We do not sell Personal Data or use it for targeted advertising. Submit requests as described in "How to Make a Request"; you may appeal a denied request by replying to our response.
Our Service is directed to the United States. If you are located in the European Economic Area or the United Kingdom and interact with the Service, you may have rights to access, rectify, erase, restrict, and object to processing, and to data portability, under applicable law. Where we act as a Processor, the connecting Customer is the Controller and directs these requests.
The Service is intended for adults. Information submitted through the Service — including volunteer inquiries and family referrals — is provided by adults, such as a parent or guardian; minors do not interact with the Service. We do not direct the Service to children and do not knowingly collect Personal Data from children under 13. If we learn that we have collected Personal Data from a child under 13, we will delete it promptly. If you believe a child has provided Personal Data, contact us at privacy@myrecruiter.ai.
Your information may be processed and stored in the United States or other locations where we or our Subprocessors operate. By using the Service, you consent to such transfers. Where required, we take reasonable steps to ensure appropriate safeguards are in place.
Our Service may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies.
We may update this Privacy Policy periodically. Changes will be posted on this page and the "Last updated" date revised. Material changes will be communicated as required by law. Continued use of the Service after an update constitutes acceptance of the updated Policy.
If you have any questions about this Privacy Policy, you may contact us:
By email: privacy@myrecruiter.ai
If you are an End User exercising rights over data collected through a Customer's implementation, we will route or refer your request to that Customer as the Data Controller.