We keep personal data only for as long as we need it for the purpose it was collected, or as required by law. The table below sets out, in plain language, how long we retain each category of data and what happens when that period ends. You can always export or delete your data sooner. See your account settings or our Privacy Policy.
| Data type | Retention period | What happens at the end |
|---|---|---|
| Account & profileYour account, login identity, education, skills and contact details. | 3 years from your last activity | After 3 years of inactivity the account and its data are erased (you receive notice beforehand). You can delete it sooner at any time. |
| Resumes & profile dataUploaded resumes, work experience, projects, certifications and achievements. | Kept with your account | Erased together with your account when it is deleted or purged, including the resume files in storage. |
| Assessment responsesYour answers and results from assessments taken on ProSculpt. | Kept with your account | Erased together with your account when it is deleted or purged. |
| Proctoring snapshotsIdentity photos and webcam snapshots captured to protect assessment integrity. | 30 days after the assessment ends | Automatically deleted from storage 30 days after the assessment, and immediately if you delete your account. |
| Assessment-platform candidate dataCandidate name and email held on behalf of an organisation using our assessment platform. | 365 days after the assessment closes | Candidate-identifying details are automatically purged one year after the assessment closes; anonymous, aggregate records may remain. |
| Audit & activity logsRecords of sensitive actions kept for security and accountability. | 30 days | Summarised and then pruned after 30 days. |
| Consent recordsThe history of consents you have granted or withdrawn. | Retained as a legal record | Kept as tamper-evident evidence of lawful basis; not auto-deleted, as the law requires us to be able to show your choices. |
| Grievance & data-rights requestsRequests you make to access, correct or delete your data, and grievances you raise. | Retained as a compliance record | Kept as a record that we handled your request as required by law. |
When data reaches the end of its retention period, or when you delete your account, we delete or irreversibly de-identify it and instruct our service providers to do the same, except where the law requires us to keep specific records for longer. To exercise your rights, visit the grievance page.