ReqOps privacy policy.

About this policy

This policy explains how ReqOps Pty Ltd handles personal information when you take a ReqOps assessment, apply for a role we advertise, join our talent pool, or use Recruit Live as an employer. It covers Recruit Live, Praxis assessments, the talent pool, proof cards and our own job ads.

Our governance product, and visits to reqops.com itself, are covered by the REQOPS privacy policy.

We follow the Australian Privacy Principles in the Privacy Act 1988. Where you live outside Australia, we also follow the privacy law that applies to you (section 12).

Who we are. ReqOps Pty Ltd, ABN 70 683 152 034, Level 16, 225 George Street, Sydney NSW 2000.

Privacy contact. Privacy Officer, ReqOps Pty Ltd, at the address above. Email hello@reqops.io.

01The short version

• An employer, or ReqOps for our own roles, invites you to a short assessment. We record how you work on it. An AI model scores it on our standard scoring framework, and we seal the result so it can't be changed without anyone noticing.
• The employer for that role sees your work, score and proof. Nobody else does unless you say yes to something extra at the end, and every extra is optional.
• We hold Praxis assessment data in Singapore, with Render. Some service providers process parts of it overseas (section 8).
• We never charge candidates. We don't sell your personal information, and we won't share your details with employers who pay us unless you separately say yes first (section 6).
• You can see, correct, download or delete your data, and change your mind, at any time: hello@reqops.io.

02What we collect

What you or an employer give us

• Your name, email address, country and city. If you give them, your phone number and anything you add to your profile.
• If an employer invites you: the details they hold from your application to them, usually your name and email, and the role.
• If you apply for a role we advertise: what you put in your application.
• For roles we recruit for ourselves: details from job sites and public profiles where we found you (section 3).

What we record during an assessment

Each assessment's start screen lists exactly what it records, before you begin. Depending on the assessment, this can include:

• what you type and select, the decisions you make and the reasons you give;
• what you paste in, including from AI tools, and how much;
• the order of your steps, timings, and when you leave the assessment page and for how long;
• the work you hand in.
• In some assessments, and only when the start screen says so:
  • your whole screen, captured as one still image a second while the assessment runs;
  • what you say, turned into text by a speech-to-text service.

What we work out

• Your score on each part of the rubric, your overall score and, where there are enough results to calculate it properly, how you compare with others who took a comparable assessment.
• A sealed record of your work (a cryptographic fingerprint) and its verification link.

What we don't collect

• Your camera, or anything on your device outside the assessment page. In assessments that turn speech into text, we use your microphone only while the assessment runs.
• We don't ask for health information, criminal records, or racial or ethnic origin. Please don't include them in your answers.

Employers

• We collect the account holder's name, work email and role, and the organisation's name, ABN or ACN, website and address. We use them to verify the business.
• We also collect job specifications, and records of what the account did.

03How we collect it

• From you, when you take an assessment, apply or contact us.
• From the employer who invites you. They tell us they collected your details lawfully and may share them with us for this purpose. The employer sends you the invitation itself, and the start screen tells you which employer you're being assessed for. If you don't want to take part, don't start. If you never start, we keep your details only as section 9 says.
• From job sites and public profiles, for roles ReqOps recruits for itself. We may note your public details from a job site (such as Upwork) or a public profile. Only a person at ReqOps decides whether to contact you about a role. If you'd rather not hear from us, email hello@reqops.io and we stop.
• Automatically, while you take the assessment, as the start screen describes. If the assessment captures your screen, close other windows first, so we don't capture other people's information.
• Cookies. Recruit Live and our assessments use only the cookies needed to sign you in and keep your session secure. We don't use advertising or analytics cookies.

04Why we use it

1. To assess you for the role you were invited to. We score your work and give the employer for that role your work, score and sealed proof.
2. To run and secure the service. This covers helping employers send invitations, answering your emails, preventing cheating and fraud, and fixing problems.
3. To keep scoring fair and accurate, and to match people with roles better. We use results with names, contact details and free-text answers removed (de-identified) to calibrate the scoring, check it for bias, show how a score compares with others who took the same assessment, and improve how we match candidates with roles, including from whether employers interviewed or hired people. We take steps so that de-identified data can't reasonably be linked back to you.
4. Only if you tick an optional box on the assessment screens:
   • to keep your proof in our talent pool and recommend you for other roles;
   • to show your proof, without your name or contact details, to employers in ready-made shortlists;
   • to pass your first name, email, country and assessment name to a career partner for job help (section 6).
   • apply for me: to find jobs that fit your proof, draft applications for you (AI helps, with your personal details removed except your first name), and, once you approve each one, send it to that employer or get it ready for you to submit yourself on job boards such as SEEK and Indeed.

Each is a separate, unticked box. Saying no never changes your score or your application.

1. To meet our legal obligations, for example tax records for employers' payments.

We use your information only for these purposes, or for a purpose you would reasonably expect that is directly related to them, or where the law requires or allows it.

05How scoring works, and automated decisions

What is used. Your decisions, the reasons you give, your answers (including speech turned into text, where the assessment uses it), what you paste in, and your timings.

How it is scored.

• An AI model, Jev, run through OpenRouter, reads your answers and sets a score for each part of our standard scoring framework: how well you understood the brief, your reasoning at each decision, how your answers fit together, how clearly you explain them, and how you direct AI tools. Before it sees anything, we remove your name, email, phone number and links to your profiles on sites such as LinkedIn, Upwork, Facebook, Instagram and GitHub.
• In Recruit Live, the same framework applies to every candidate for every role, and no person checks a score before the employer sees it. If your answers include instructions aimed at the scorer, such as asking for full marks, your result is capped and marked for the employer.
• Praxis assessments use a rubric written for each role, and the AI model suggests the score.
• Scores are labelled provisional until there are enough comparable results to calibrate them. We show a percentile only when we can calculate it from real results.

Decisions a computer program makes or helps make.

• Your score. In Recruit Live, the AI model sets it, as above. In Praxis, it suggests it.
• Shortlisting or closing an application. By default, a person at the employer decides. But an employer can switch on automatic decisions for a role. Then the system shortlists applications at or above the employer's score threshold and closes those below it. The employer tells you the outcome. If an employer switches this on, the start screen tells you before you begin.
• Reading your emails. An AI model reads your replies to work out what you're asking for, for example a new time or to withdraw. Anything that can't be undone waits for a person.

For ReqOps's own ready-made shortlists, a person at ReqOps checks every shortlist before an employer sees it.

Your options. You can ask for a person to review your score or an automatic decision, and ask how it was worked out: hello@reqops.io.

Other AI use. AI also helps us write emails about your assessment, with your personal details removed except your first name. It also turns a job description into assessment scenarios; that step uses only the job description.

06Who we share it with

• The employer for the role you were invited to: your name, contact details, work, score and sealed proof. They may use it only to assess you for that role.
• Employers you apply to through apply-for-me: the application you approved, with your name, contact details and a link to your proof. Nothing goes without your yes.
• A partner recruiter, if one handles the role. We tell you the recruiter's name before your result is shared with them.
• Our staff and contractors, including our team in Vietnam, who need it to run the service. They are bound by confidentiality.
• Service providers who host or process data for us (section 8). All of them are under contract, except your browser's own speech service if you choose to answer by voice.
• If you joined the talent pool: employers see your skills, score band and sealed results in ready-made shortlists, without your name or contact details. They learn who you are only after you approve that introduction.
• Paid introductions: not offered today. If we start a service where employers pay to contact candidates, we'll update this policy first and ask you separately. You won't be included unless you say yes.
• If you ticked the career-partner box:
  • Our career partners get your first name, email, country and the name of the assessment, so they can offer job help and career advice. Squad Institute's help is free for you, and neither company pays the other for your details.
  • Today our only career partner is Squad Institute. It is a separate company with the same founder and owner as ReqOps.
  • Squad Institute's own privacy policy then covers what it does with your details.
• Anyone you share your proof link with. If you create a proof card, anyone with the link can see the details you picked for it. You can switch the link off.
• Authorities, only where the law requires it.

We don't sell your personal information.

07Emails from us

• Messages to candidates are sent only by a person: the employer for the role, or someone at ReqOps. AI tools may help draft a message, but they never send one on their own.
• The employer sends you the invitation and tells you your result. ReqOps doesn't send emails to candidates today.
• If you join the talent pool, we may later contact you about roles that match your proof. We don't send these emails today. When we do, every one will have an unsubscribe link, and we'll stop within 5 working days of your request.
• We keep a short list of people who asked us to stop emailing them, so we don't email them again.

08Where your data is kept and who processes it

Praxis assessment data is stored in Singapore, with Render. Applications for roles ReqOps recruits for itself are held on ReqOps's own computers in Australia. Our team in Australia and Vietnam may access it to run the service.

Some service providers process parts of it outside Australia:

We choose providers that protect personal information to a standard comparable to the Australian Privacy Principles, and we bind them by contract to use it only to provide their service to us. The one exception is your browser's own speech service (above): ReqOps has no contract with it, so we ask for your agreement before it's used. You can ask us for the current list.

09How long we keep it

We keep personal information only while we need it for the purposes in this policy. Your assessment record is kept with no fixed end date, because these purposes continue after the role closes:

• your sealed proof, so you, the employer and anyone you share it with can keep checking it, including any dated copy an employer has bought or downloaded;
• the employer's record of how it assessed and chose candidates for the role;
• the talent pool and apply-for-me, if you joined them;
• answering questions, complaints and legal claims about the assessment.

What we de-identify instead. Our benchmark, score calibration and matching use only de-identified results, so they never need your name or contact details. Screen images and voice transcripts aren't needed for your sealed proof once the role has closed. At the yearly review, those are the first things we delete or de-identify.

Yearly review. At least once a year we check, record by record, whether a purpose above still applies. If none does, we delete the record or de-identify it, and we log what we did.

You can ask us to delete it. At any time you can ask us to delete your data, or to see or correct it (section 11). We'll do so unless the law requires us to keep something, and if so we'll tell you what and why. Deleted data can stay in our encrypted backups for up to 30 days, until they're overwritten. We don't restore it or use it in that time.

10How we protect it

Your data is encrypted in transit. Each employer can see only its own candidates. We limit staff access to what each role needs and log access. We use strong sign-in and review our security regularly.

If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

11Your choices and rights

You can, at any time:

• see the personal information we hold about you, and get a copy;
• correct it if it's wrong;
• delete it, or ask us to;
• withdraw any consent you gave:
  • leave the talent pool;
  • stop the career-partner hand-off (we tell the partner to stop);
  • switch off a proof card;
  • stop an assessment before you hand it in, which also stops the recording;
• unsubscribe from emails;
• ask a person to review your score.

Email hello@reqops.io, or use the privacy link on the assessment page. We may need to confirm who you are. It's free. We reply within 30 days, or sooner where your local law requires.

Withdrawing doesn't undo what was already done with your permission. For example, an employer who already received your result keeps it for that role. If we can't do what you ask (for example, because the law requires us to keep a record), we tell you why.

12If you live outside Australia

• Vietnam. Your data is stored outside Vietnam: Praxis assessment data in Singapore, and applications for roles ReqOps recruits for itself in Australia. The Recruit Live start screen asks for your separate consent to storage outside Vietnam, as Vietnam's Personal Data Protection Law requires. It also tells you that, if you take part, we keep your details and results after the role, even if you aren't hired, to consider you for other roles ReqOps recruits for, until you ask us to delete them. You can complain to the Ministry of Public Security's personal data protection authority.
• India. The Recruit Live start screen asks for your consent to your data being stored and processed outside India by the providers named there.
• Other countries. Some countries give you further rights. Ask us and we'll help.

13Age

Our assessments are for people aged 18 or older.

14Complaints

Tell us first at hello@reqops.io. We acknowledge a complaint within 5 business days and aim to resolve it within 30 days.

If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992, or to the privacy regulator where you live.

15Changes to this policy

When we change this policy we update the version and date at the top. If a change affects how we use data you already gave us, we tell you and, where the law requires, ask again.