Privacy, for hiring

The employer decides. They choose to interview you, write the questions and the criteria, receive the result, and make the hiring decision. In data-protection terms they are the controller. Larpy is their processor: we run the interview and the scoring on their instructions, and we do not decide what a role asks for or who gets hired.

What that means in practice is that the employer is who to ask about why you were interviewed, what they do with the result, and how long they keep their own copy. Everything below describes what we hold and for how long.

• The email address the employer invited, and your name if you give one.
• The audio and video of the interview, and a transcript of what was said.
• For a coding screen: the code you write, what it produced when it ran, and the record of any AI assistance used inside our editor.
• For a take-home assessment: a recording of your screen and your webcam, for the length of the assessment. A take-home is done on your own machine, so this is required rather than optional and the task is not handed over until it is running. Your browser asks before anything is captured and names what you are sharing; share the single window you are working in rather than your whole desktop if you would rather not have the rest of it on film. You can stop the recording at any moment from your browser, and the record will say that you did, at the minute it happened. If your webcam is missing or broken the assessment carries on with the screen alone.
• The evaluation itself: scores against the employer’s criteria, and the quotes from your own answers that each score is based on.
• Technical information needed to run a live call, such as device and connection quality and timing measurements.
• A resume, only if you upload one.

Recordings are deleted after 90 days. Both kinds: the interview, and the screen and webcam capture from a take-home. They are the most sensitive thing we hold, they are what nobody opens once a hire is made, and they are removed automatically on that schedule. This is not on request; it is a nightly job.

The transcript and evaluation are deleted after 12 months. Text is lower risk than video, and it is the record an employer needs if a hiring decision is ever questioned, which is why it outlives the recording.

Both are ceilings, not minimums. You or the employer can delete sooner, and the employer keeps their own copy of the result under their own policy.

• No candidate is rejected by the system. Larpy can move someone forward automatically when they clear the employer’s own bar. It cannot reject anyone. Every other outcome is a recommendation that waits for a person, and the interviewer is never told the disqualifying criteria, so it has nothing to judge you against and forms no view.
• We refuse to screen on a protected characteristic. Criteria touching immigration status, health, age, sex, family status, race, religion, accent or criminal record are refused when an employer writes them, with the protection named. That refusal is enforced in code, not asked for in a prompt.
• We do not sell candidate data, and we do not use it for advertising.
• We do not keep a deleted recording. When a deletion is requested the file itself is removed, not just the link to it, and if the file cannot be removed we report a failure rather than confirm a deletion that did not happen.

You can ask for your recordings, transcript and evaluation to be destroyed at any time, from the link the employer sent you. That deletes our copy, including the take-home screen and webcam capture if there was one. You can also ask us for a copy of what we hold, or for it to be corrected.

Depending on where you live you may also have the right to withdraw consent, to receive your information in a portable form, or to complain to a regulator. In Quebec that is the Commission d’accès à l’information. Requests to privacy@getlarpy.com, which reaches the person responsible for privacy here.

A small set of providers, by category rather than by name so this list cannot quietly go out of date:

• AI model providers that conduct the interview and produce the evaluation
• Speech recognition and voice synthesis for the live conversation
• Real-time audio, video and avatar infrastructure
• A sandboxed code execution service, for coding screens
• Cloud hosting, object storage, authentication and database providers
• A transactional email provider

Each is bound to use the data only to provide their service to us. Processing and storage take place in Canada and the United States, so information may be handled outside the province or country you are in. Every one of them is named here, with what they receive and where. “Available on request” was the old answer and it is the wrong one: a security review asks for this list, diffs it against the last version, and assumes a vendor who will only send it privately has something to be private about.

Recordings sit in private storage that is not publicly readable; the product reaches them through links that are minted for one viewer and expire in minutes. Interview content is written only by our own backend, never by a browser. An employer sees only their own roles and their own candidates.

No system is perfect, and we would rather say that than imply otherwise. If something goes wrong that affects you, we will tell the employer and, where the law requires it, you and the regulator.

If this changes materially we will update the date above and tell employers using the product. Questions to privacy@getlarpy.com.