How oryx technologies handles your data
This notice explains what oryx technologies collects when you apply for a role, why, how long it is kept and what you can ask for. It applies to every application you make to oryx technologies through this site.
Who is responsible
oryx technologies is the controller of your application data: it decides why and how your data is used. oryx (oryx.so) provides the hiring platform and processes your data only on oryx technologies's instructions, as its processor.
What is collected
The application form asks for:
- First name
- Last name
- Phone
- Resume
- Notice period
- Your question
- Salary expectations
If you take part in interviews, oryx technologies also records interview notes and scores. Emails you exchange with the hiring team are kept with your application.
Why, and on what basis
To assess your application for the role you applied to, which is a step towards a possible employment contract, and to meet legal duties that apply to hiring. Where the law of the role's country allows it, oryx technologies may also keep your application on file so it can get back in touch about future roles; the section below says how long, and where your explicit consent is needed for that.
How long it is kept
The period depends on the country of the role you applied to, not on where you live. Anonymised means your name, contact details, resume and answers are removed and only the stages reached, the dates and the scores remain, without anything that identifies you. Deleted means the whole record is removed.
- Other EU, EEA and Switzerland: your application is kept for up to 12 months from the date you last applied, then anonymised. About 30 days before that date you receive one email asking whether to keep your details on file for future roles; keeping them needs your explicit reply, and no reply means they are anonymised on the date.
- United States: your application is kept for 24 months from the hiring decision on the role, then anonymised. Employment law requires the application record to be kept for at least 12 months from the hiring decision, so a deletion request is honoured by removing your answers and resume at once and deleting the record when that minimum has passed.
Applying again restarts the period for every application you have with oryx technologies. Silence is never treated as consent.
Who else processes it
oryx technologies uses these providers to run the process. Each acts on instructions and under a contract:
- oryx (oryx.so): the hiring platform that runs this application process on the employer's behalf
- Supabase: database and file storage for applications and resumes
- Vercel: hosting of the application pages
- SendGrid (Twilio): sending and receiving email with candidates
- Daily: video calls for interviews, where used
The current list, with locations and safeguards for any transfer outside your country, is published at https://oryx.so/privacy-policy.
Your rights
You can ask oryx technologies for a copy of your data, ask for it to be corrected, ask for it to be deleted (subject to any legal minimum retention named above), object to it being kept on file, and withdraw a consent you gave at any time. Where you are in the EU, the UK or another country with a data protection authority, you can also complain to that authority.
How to contact us
Write to the hiring team by replying to any email you receive from oryx technologies, or through https://oryx.so.
