Privacy notice
OryxenLabs (“we”, “us”) runs oryxenlabs.com and its careers portal, and decides how the personal data collected there is used. This notice explains what we collect, why, who helps us process it, how long we keep it and what you can ask us to do. Questions go to [email protected].
What we collect and why
- Contact form. Your name, work email, company, chosen focus area and message. We use them to reply to you and to discuss any work that follows. We ask only for what we need to answer.
- Emails you send us at info@, support@ or [email protected], and our replies, so we can answer and keep a record of the conversation.
- Job applications. Your name, email, phone, location, CV, answers to screening questions, assessment answers (including code and any video recordings) and interview bookings. We use them only to assess your application fairly and, if you agree, to consider you for future roles. You give your consent when you apply.
- Technical data. Like any website, our servers and Cloudflare (below) receive your IP address and basic request details. We use these only to deliver the site and keep it secure.
How AI is used in hiring
AI helps us read CVs and score assessment answers against fixed rubrics. Before any text is sent to the AI provider, we remove your name, email, phone number, address, links, photo, institution names and other personal or demographic details. Video answers are transcribed on our own servers; the recordings never leave them, and only the transcript (with personal details removed) is scored. Each open answer is scored twice independently, answers where the two scores disagree go to a person, and a person makes every hiring decision. No application from someone who completed the assessment is rejected without a person reviewing it.
Who processes your data
- Hetzner (Germany): the servers that host the site, the careers portal, its database and file storage.
- Cloudflare: delivers the site and protects it from attacks.
- Brevo (France): delivers the emails we send.
- Our AI provider, currently DeepSeek (servers in China): receives application text only after the personal details above have been removed.
- Google Calendar: when you book an interview, your name and email are added to the calendar invitation.
These providers act on our instructions. Some are outside your country, so your data may be processed abroad; we send each one only what its job requires. We do not sell your data or share it for marketing.
Cookies
The site sets no advertising or analytics cookies and does not track you across other sites. Candidates are not given cookies; assessment and booking links work on their own. Our team’s sign-in to the hiring dashboard uses strictly necessary cookies, and Cloudflare may set a security cookie to tell people from bots.
How long we keep it
- Contact enquiries and emails: for as long as we need them to answer you and handle any work that follows, then deleted.
- Job applications: deleted automatically 12 months after the role closes, including CVs and recordings, unless you ask to join our talent pool. Talent pool details are kept for 12 months and you can leave at any time.
Your rights
You can ask for a copy of your data, a correction, its deletion, or to stop a particular use of it, and you can withdraw your consent at any time. Email [email protected], or [email protected] for anything about an application. We reply within 30 days. If you are not satisfied, you can also complain to the data protection authority where you live.
Changes
We update this notice when the way we handle data changes, and show the date at the top.