Attain · Connector privacy
Connector Privacy Policy
At Attain, your privacy is important to us. This policy explains how we collect, use, disclose and safeguard your information when you connect Attain to Claude, ChatGPT or another AI assistant. By connecting, you consent to the practices described here.
1Information we collect
We collect the following types of personal data when you connect to and use the Attain connector.
Information you provide
- Your work email address, which is how you sign in.
- Your name, your company's name and the country your company is based in, when you give them at sign-up. Name and company are optional.
- The searches you run: the role you describe, the skills you ask for, and filters such as years of experience, working hours or notice period.
- Notes you add when you request an introduction to a candidate or ask for access to a feature.
Information we collect automatically
- Your IP address when you sign in, which we use to limit repeated sign-in attempts. At sign-up we also keep it, with the approximate location it maps to (country, region and city) and your browser's time zone.
- The AI app you connected from, such as Claude or ChatGPT, and its version.
- A record of each request your AI assistant makes to the connector: the time, the tool used, whether it succeeded, how long it took, how many results came back, the references of the candidates returned and the filters used.
- Daily counts of your requests and of the candidates you viewed, which is how daily limits are applied.
Information from third parties
- If you sign in with Google, your name and email address from your Google account.
What we do not collect
Attain does not see your conversation with your AI assistant. We receive only the request the assistant sends when it uses an Attain tool. We do not read your assistant's memory, chat history or files. The plain-language role description in a search is used to run that search and is not written to our request records. The connector's own sign-in pages set no cookies and carry no analytics or advertising trackers. That applies to the connector, not to the attainhq.ai website, which uses cookies as its cookie notice describes.
2How we use your information
We use personal data to:
- Sign you in and keep your connection secure.
- Match your search with candidates using AI and structured data, and show you their profiles.
- Pass your introduction requests to an Attain account manager, who follows up with you.
- Decide and manage which features you can use, and apply daily limits.
- Communicate with you, for example sign-in codes, access decisions and replies to your requests.
- Understand which roles and skills are in demand, and improve the service.
- Prevent abuse, scraping and fraud, and comply with legal obligations.
4Candidate information in search results
The connector shows you profiles from Attain's vetted candidate pool. What a profile contains is deliberately limited.
| Candidate information | |
|---|---|
| What you see | A reference such as AT-7Q4K, first name and photo, work history by years and sector, skills with ratings, screening interview scores, notice period and working hours. |
| What is never returned | Surnames, contact details, employer names and salaries. |
References are unique to your account. The same candidate has a different reference for everyone else, so results cannot be matched across companies.
To meet a candidate, request an introduction. Attain makes the introduction. Contact details are not released through the connector.
If you are a candidate
If your profile is in Attain's candidate pool and you want to know how it is shown, or to ask that it is not shown through the connector, email [email protected].
5Your rights and choices
Depending on your location, you may have rights to:
- Access, correct or delete your personal data.
- Object to or restrict certain processing.
- Withdraw consent, where applicable.
- Lodge a complaint with a data protection authority.
You can disconnect at any time from the connector settings in your AI app. To exercise any of these rights, or to have your access and your records removed, contact us at [email protected].
6Data security
We use reasonable technical and organisational measures to protect your personal data. However, no system can guarantee absolute security.
- Sign-in uses OAuth 2.1 with PKCE. There is no API key to copy or leak.
- Sign-in codes and access tokens are stored only as one-way hashes.
- Your access is checked again on every request, so a person who is removed loses access within about a minute.
- Candidate data is cut down to a fixed list of fields before it leaves our systems.
7Data retention
We retain your information as long as necessary for the purposes outlined in this policy or as required by law. These are the periods that apply today.
| Information | Kept for |
|---|---|
| Sign-in code | 10 minutes, and it works once. |
| Access token | 1 hour. The connection renews itself for up to 90 days, after which you sign in again. |
| Record of each search, profile view and request | 400 days. |
| Routine connection records | 30 days. These are the background calls an app makes to stay connected. |
| Daily usage counts | 400 days. |
| Search text cache | A numeric form of the search text, filed under a one-way hash and kept for 30 days after it was last used. The text itself is not stored. |
| Sign-up details, access decisions and introduction requests | For as long as you have access, and afterwards as a record of who had access, until you ask us to delete them. |
8International transfers
Your information may be transferred to and processed in countries outside your own, including the United States. We implement safeguards to ensure an adequate level of data protection.
9Children's privacy
The Attain connector is a business tool and is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children.
10Changes to this policy
We may update this policy periodically. When we do, we will update the effective date at the top of this page and notify users where required.
11Contact us
If you have questions or concerns about this policy, contact:
- Attain, operated by Hirexe Inc.
- Bedford Street, New York, NY 10014
- Email: [email protected]