Privacy Policy

This Privacy Policy explains how EyeStream Visions Inc. ("EyeStream," "we," "us") collects, uses, and shares personal information when you use the EyeStream Visions website and services (the "Service"). EyeStream is a video‑first hiring platform where job seekers record short video answers ("Visions") and recruiters and hiring teams discover and review them.

1. Information we collect

• Account information — your email address, password (stored only as a salted hash), and, for recruiters, your company name. Names and phone numbers are optional.
• Profile & resume data (job seekers) — headline, location, desired role, years of experience, work authorization, skills, summary, links (e.g. LinkedIn, portfolio), and any résumé file you upload.
• Video and audio recordings — the Visions you record or upload contain your image, likeness, and voice. This is sensitive personal information; see Section 5.
• Transcripts & captions — we automatically transcribe your video answers so they can be captioned, searched, and quoted; the transcript is part of your profile data.
• Viewing activity (recruiters) — when you view a candidate's Vision we record the visit and basic engagement (which sections and videos were opened, and for how long). Candidates see this only in aggregate, or with your name if you haven't turned on anonymous viewing.
• Usage & device data — IP address, browser type, and log/security events (e.g. sign‑in attempts) we record to operate and secure the Service.
• Cookies — see our Cookie Policy.
• Payment information — if and when paid subscriptions are offered, payments are handled by our payment processor (Stripe). We do not collect or store full card numbers on our servers.

2. How we use your information

• To create and operate your account and provide the Service;
• To let recruiters and hiring teams discover, view, and contact candidates, and to let candidates share their Visions;
• To process and optimize uploaded videos for cross‑browser playback;
• To send transactional email (email confirmation, password resets, notifications);
• To secure the Service, prevent abuse and fraud, and enforce our Terms;
• To comply with legal obligations.

How we use AI. We use third‑party AI providers for three things: transcribing your video answers (speech‑to‑text), extracting a list of your qualifications from your own resume and transcripts (every extracted fact must carry a verbatim quote from your materials — nothing is inferred or invented), and writing short summaries and suggested first‑conversation questions that recruiters see. AI never makes or scores hiring decisions on our platform: candidate‑to‑job matching is deterministic arithmetic over those quoted facts, and where a qualification isn't mentioned we show "no evidence found," never a negative mark. We do not use facial‑recognition, emotion‑analysis, or biometric‑identification technology.

Blind review. Recruiters can choose (or their team can require) blind review, which hides candidates' names, photos, and contact details during evaluation. When a recruiter reveals an identity we record the date, creating an audit trail that supports fair‑hiring compliance.

3. How we share your information

• With recruiters and viewers you choose — when you publish a Vision or share its link/QR code, the people you share it with (and, if published, recruiters using the Service) can view your profile, resume, and videos. Recruiters may forward a Vision to colleagues, and may export your profile (including transcript excerpts and your resume) as a PDF or send it into their own applicant‑tracking system to consider you for roles.
• Service providers — hosting, email delivery, video processing, bot/abuse protection, AI processing, and (for paid plans) payment processing, acting on our behalf under contract.
• Legal & safety — when required by law, to enforce our Terms, or to protect the rights, safety, and security of users or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information, and we do not share it for cross‑context behavioral advertising.

4. Legal bases (EEA/UK users)

Where the GDPR applies, we process personal data to perform our contract with you (providing the Service), based on your consent (which you may withdraw), to comply with legal obligations, and for our legitimate interests in operating and securing the Service.

5. Video, image, and voice

Your Visions contain your image and voice, which may be considered sensitive or biometric‑adjacent information in some jurisdictions. You record or upload them voluntarily so that recruiters and hiring teams can evaluate you, and we create text transcripts of them (used for captions, search, and the quoted qualification facts described in Section 2). We do not use facial‑recognition or biometric‑identification technology on your videos. You can delete individual answers or unpublish your Vision at any time from your dashboard, and deleting an answer deletes its transcript.

6. Data retention

We keep your information for as long as your account is active or as needed to provide the Service, and afterward only as required for legitimate business or legal purposes. You can delete your content or request account deletion at any time (see Section 7); on deletion we remove or anonymize your personal data and media, except where retention is legally required.

7. Your rights and choices

• Access, correct, update, or delete your personal information;
• Download or request a copy of your data (portability);
• Unpublish or delete your Visions, resume, and profile at any time;
• Object to or restrict certain processing, and withdraw consent;
• For California residents (CCPA/CPRA): the rights to know, delete, correct, and to not be discriminated against for exercising them. We do not sell or share personal information as those terms are defined under California law.

You can exercise the two big ones yourself, instantly: Download my data and Delete my account are on your Profile page (job seekers) or Account page (recruiters). Deletion is immediate and permanent — your videos, transcripts, extracted facts, and files are removed. For anything else, contact us at privacy@eyestream.blaineland.net; we may need to verify your identity first.

8. Security

We protect the Service with measures including encrypted transport (HTTPS), hashed passwords, access controls that gate private media behind authentication, rate limiting, and other safeguards. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International transfers

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards for such transfers.

10. Children

The Service is not intended for anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. We will post the new version here with a revised "Last updated" date, and where appropriate notify you.

12. Contact us

EyeStream Visions Inc.
Attn: Privacy — [Company mailing address]
privacy@eyestream.blaineland.net