Candidate Privacy Notice

ROUND.1

Version 1.0 | Last updated: 5 November 2026

When this notice changes, candidates with a ROUND.1 account are asked to agree to the new version before they carry on.

This notice explains what happens to your personal data as a candidate on ROUND.1. It also serves as the Personal Information Collection Statement for Hong Kong candidates.

Human Work (HK) Limited, a company incorporated in Hong Kong, of 29/F, 3 Lockhart Road, Wan Chai, Hong Kong (“we”, “us”), runs ROUND.1.

Part A covers your ROUND.1 talent marketplace account. We decide how that data is used, and we are directly accountable to you for it.
Part B covers each interview you take at a company’s invitation (the “Employer”). The Employer decides how your interview data is used, and we process it for them.
Part C covers cookies.

Overview. Your marketplace account exists to find you a job you want. We show your profile to a hiring company only when you say yes, we never sell your data or use it to train AI models, and you can delete your account, and your data, whenever you like.

Part A — Your ROUND.1 account

A1. What we collect, and why we need it

Most of what we hold is simply what you tell us. We would require the following personal information, some of it because the Service cannot work without it and some because the law requires us to collect it:

Your profile: name and contact details, CV, work history, qualifications, skills, and your preferences on roles, locations and salary. This is needed to match you with roles; the Service cannot work without it. You can edit it at any time.
Matching and introduction records: matches proposed to you, your approvals and declines, and the introductions made and their outcomes. These records allow the Service to track the status of each introduction.
Placement records: if you are hired through the Service, we record certain details of the placement, because the law that applies to job placements can require it: your government-issued identification (for example, an identity card or passport number, depending on where the placement is regulated) and your employment date. We ask for the identification details only at that stage, never before.
Technical data: device and log information collected when you log in.
Communications: our correspondence with you.

A2. How we use your data

Everything we do with your data serves the purpose you joined for: matching you with roles and, when you approve, introducing you to hiring companies. In particular, we use your data for:

running your account and our AI-assisted matching (explained in section A3);
making the introductions you have approved;
keeping you posted about matches, introductions and the Service;
keeping the placement records the law requires if you are hired;
keeping the Service secure and improving it, using de-identified data wherever possible.

We do not use your personal data to train AI models, we do not sell it, and we do not send you third-party marketing.

A3. AI-assisted matching

We use artificial intelligence to compare profiles against roles and shortlist matches. What matching does and does not do:

it only determines which opportunities are surfaced; it never rejects you from anything;
no introduction happens without your approval;
no decision with legal or similarly significant effects about you is made solely by automated means;
we do not infer your emotions from your face or voice anywhere in the Service.

A4. Why we are allowed to use it

We use your personal information for the purposes above, on these grounds:

contract: performing the account terms: matching, introductions and communications;
legal obligation: placement record-keeping and responding to lawful requests;
legitimate interests: security and service improvement;
consent: where a specific law requires it, requested separately at the relevant point.

A5. Who sees your data

Hiring companies: only when you approve the introduction, and under contract terms that limit use to evaluating you for that role, prohibit passing it on, and require deletion when the process ends;
Our service providers: the specialised providers that run the platform (video, AI analysis, hosting, email, analytics), processing data on our behalf. The current list and locations are set out below;
Authorities: where the law requires, including the Labour Department;
Other parties: group companies and professional advisers where necessary, and parties to a corporate transaction under confidentiality obligations.

Our service providers today: Anthropic, a US company, whose AI models read your CV when you sign up and run the sign-up chat and your matching; Amazon Web Services, which stores your data in Frankfurt, Germany; Resend, a US company, which sends our emails, including your sign-in links; Sentry, a US company, which receives error reports, from your browser only if you accept analytics cookies; and our job-catalogue service, hosted with Railway, a US company, which receives your job-search preferences without your name or contact details. The providers your interview uses are named on the consent screen before it starts.

A6. Where your data lives

Your data is stored with Amazon Web Services in Frankfurt, Germany, and processed in part in the United States by the providers listed in section A5. By creating an account, you agree to these transfers.

A7. How long we keep it

We keep your account data for as long as your account remains active. If you do not use your account for 18 months, we email you once to ask whether you want to stay. If you do not sign in or tell us to keep the account within 30 days, we close it and delete your data. We will tell you by email before we start doing this. You can delete your account yourself at any time, and your data is deleted with it. Your interview recordings and transcripts are deleted too. Otherwise they are deleted 365 days after each interview, unless you chose to keep them when we asked shortly before that date. Two things stay: if you were introduced to or hired by a company, that company keeps the candidate and hire records it already holds, and we keep a record that the account was deleted.

A8. Your rights

Because we are responsible for this data, you can exercise your rights directly with us via [email protected]:

access your data and get a copy;
correct anything inaccurate;
delete your data.

If you are unhappy with how we have handled something, you can complain to the Privacy Commissioner for Personal Data in Hong Kong (pcpd.org.hk). We encourage you to contact us first so that we can address your concern.

Part B — Interviews at a company’s invitation

You are talking to an AI. Your interviewer is an AI, not a person. It asks the questions and follows up on your answers. AI models then score your interview and write a report for the Employer. The Employer’s own privacy notice tells you how it uses your data outside ROUND.1.

B1. What we collect

B1.1 Your details: your name, email address and phone number, from you or the Employer.

B1.2 Your application: your CV and what it says about your work history, education and skills, and any answers you give in writing.

B1.3 Your interview: a video and audio recording of the interview, a written transcript, and the time and length of the session.

B1.4 Your results: the scores, levels and written report that the AI models produce.

B1.5 Integrity check: during the interview, your browser checks on your own device whether your mouth movement matches your speech and how many faces are on camera. Only summary figures leave your device. We do not analyse your facial expressions or emotions, and we do not use your face or voice to identify you.

B1.6 Technical data: your IP address, browser and device information, and logs of your session.

B1.7 Messages: emails we send you about the interview and anything you write to us.

B1.8 Your answers may reveal sensitive information, such as your health or beliefs. We do not ask for it. If it appears, it is recorded and scored with the rest of your interview.

B2. How we use it

We use your data to:

(a) send you the interview invitation, reminders and a notice when the interview is received;

(b) run the interview, record it and transcribe it;

(d) show the Employer your details, your CV, your results, and, where the Employer has playback, your recording and transcript;

(e) keep the Platform secure and stop misuse; and

(f) create data from which no one can be identified, to improve our products.

We do not use your personal data to train AI models, and we do not use it for our own marketing.

B3. Who decides about your application

B3.1 The AI scores you, but it does not decide. The Employer’s staff decide whether to move you forward, shortlist you, hire you or reject you. Each of those steps is an action a person at the Employer takes on ROUND.1.

B3.2 If you do not take the interview before your invitation runs out, ROUND.1 marks you as not having responded.

B3.3 AI scores can be wrong. If you think your result is wrong, tell the Employer.

B4. Who sees your data

B4.1 The Employer’s staff who use ROUND.1.

B4.2 Our suppliers:

(a) Tavus runs the AI interviewer. It receives the work history, skills and education from your CV, and your name, so it can ask about your experience. It turns your speech into text.

(b) Daily carries the video call.

(d) Amazon Web Services stores your CV, recording, transcript and scores in Frankfurt, Germany, encrypted at rest.

(e) Resend sends your emails, and Sentry receives error reports.

Tavus, Daily, Anthropic, Resend and Sentry are US companies and may process and keep copies of your data in the United States. If the Employer connects its applicant tracking system (Greenhouse or Lever), your results go there too.

B4.3 Our professional advisers where needed, regulators and courts where the law requires, and a buyer of our business under confidentiality.

B4.4 We do not sell your personal data.

B5. How long we keep it

B5.1 Your recording is deleted 365 days after the interview. Your transcript and scores are deleted 365 days after the interview. You can ask for them to be deleted sooner. Shortly before that date we may ask whether you want to keep your interview; if you say yes, we keep it until you ask us to delete it.

B5.2 Your details and CV stay on the Employer’s account until the Employer deletes them or closes its account.

B6. What you can ask

B6.1 You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted.

B6.2 Ask the Employer first, because it decides how your data is used. You can also write to [email protected]. We will answer or pass your request to the Employer, and we may ask you to confirm the email address your invitation went to.

B6.3 If you are not satisfied, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (www.pcpd.org.hk).

Part C — Cookies

We use only strictly necessary cookies, which keep you signed in and remember your language and your cookie choice, and analytics cookies (PostHog, the campaign link that brought you to us, and browser error reports to Sentry), which are set only after you click Accept. We use no advertising cookies. The full list and how to change your choice are in the Cookies section of our Privacy Policy at https://round1.work/legal/privacy#cookies.

Security, changes and contact

We protect your data with access controls, encryption in transit and at rest, and logging. No system is completely secure.

ROUND.1 is for people aged 18 and over.

If this notice changes, we post the new version at https://round1.work/legal/candidate-privacy with a new date and tell account holders about anything material.

Questions or requests: Privacy Officer, Human Work (HK) Limited, 29/F, 3 Lockhart Road, Wan Chai, Hong Kong, [email protected].