Your information, handled with care.

Last updated: 12 October 2026

The short version

• We only collect what you type into our forms, plus a few technical details that keep those forms safe.
• We don’t sell your information, and the public site has no advertising trackers. It does use Google Analytics to count visits (see “Website analytics” below).
• Our staff can see what you submit. Job applications are reviewed by people, and we keep a log of what happens to each application.
• If you apply for a job, staff may use an AI tool to help compare your CV with the role. It is never automatic. It never decides anything on its own. The section “How we use AI” below says exactly what is sent.
• You can ask us to show, correct or delete your information, or to not use AI on your application, by emailing hello@juntosteams.com.

Who this notice covers

This notice covers Juntos Teams (“we”, “us”) and the information we collect through juntosteams.com: from visitors booking a call, candidates applying for roles, and staff using our private admin area. If you have questions, email hello@juntosteams.com.

Information we collect

We only collect information you choose to give us through our forms, plus a small amount of technical data needed to keep those forms secure.

Book a call form. Your name, work email, company, company website, the roles you’re hiring for, team size, timeline, any message you write, and how you heard about us.

Job applications. Your name, email, phone number, location, the CV file you upload (PDF or Word document), and your answers to any questions that role asks, along with which role you applied for. A CV is required to apply.

Technical and abuse-prevention data. For both forms above, we log your IP address, browser/user agent string and the page you submitted from. This is used to protect the forms from spam and abuse and to work out roughly where an application came from (below). It is not used to track you around the site.

Approximate location. For job applications we look up your IP address with a third-party geolocation service (ipwho.is) to work out roughly which city and country you applied from. Only the IP address is sent to that service. We keep the resulting city, region and country with your application.

Confirmation emails. When you submit the Book a call form or a job application, we send a short confirmation to the email address you gave us. We keep a record of that email (who it went to, its content, and whether it was delivered or bounced).

Bot protection (Cloudflare Turnstile). We may use Cloudflare Turnstile to confirm form submissions come from a real person rather than a bot. When it’s switched on, Cloudflare processes some technical signals (such as your IP address and browser characteristics) to issue that verification; we never see the details of that check, only whether it passed. See Cloudflare’s privacy policy. Turnstile only runs on forms once we’ve turned it on.

What we add ourselves. While we handle a job application we record: which interview stage you are at, internal notes written by our team, and, if we decide not to continue, the stage and a reason for that. We also keep an activity log of what happened and when: that you applied, each stage change, rejection or reinstatement, notes added, that an AI review was run, and that a confirmation email was sent, each with the staff member involved and the time.

Audit log. Separately, the system keeps an audit log of every change made in it and of what visitors and candidates do on the site: that a form was submitted, that a test was opened, started or submitted, and what our staff did with your information (for example, moving your application to another stage, or downloading your CV). Each entry has the time, who did it, and for visitors and candidates the IP address and browser the request came from. Entries are kept for two years and cannot be edited.

Candidate tests. If we send you a test, we keep your answers, how long you took, and how often you left the test tab. Some tests have spoken questions: for those we keep the audio you record, which is a recording of your voice. The short clip you record to test your microphone stays on your device and is never sent to us.

Staff accounts. Staff who manage this site have a login (email and a securely hashed password) used only to access the private admin area.

Who can see it inside Juntos Teams

Only logged-in staff. Admins and recruiters can see applications, CVs, answers, notes, test answers and recordings, and the activity log, and can score an application with AI. Only admins can see the log of emails we’ve sent, the system settings (including the AI settings) and the list of staff accounts. CV files are stored outside the public website and can only be downloaded by a logged-in staff member.

How we use it

We use call request details to respond to you and discuss working together. We use application details, including your CV, to review your candidacy, contact you about it, and consider you for the specific role (and, if you tell us so, similar future roles). We don’t sell your information, and we don’t share it with third parties for their own marketing.

How we use AI

When it runs. Only when a member of our staff opens a job application and clicks “Score with AI”. It doesn’t run when you apply, it doesn’t run in bulk, and it doesn’t run in the background. It is used for job applications only, never for the Book a call form.

What it’s used for. The AI compares your CV and answers with the job description and our internal requirements for the role, and returns a score from 0 to 100, a short summary, and lists of strengths and gaps. We save that result on your application so our team can read it.

What is sent.

• The text of your CV, taken from the file you uploaded, and your answers to the role’s questions.
• The role’s title, description and our internal requirements for it.
• Your general location: the city, region and country only.

What we remove first. Before anything leaves our server, our system automatically removes from the CV text and your answers: your name, email addresses, phone numbers, street address and postal code, website and profile links (such as LinkedIn or GitHub), and social media handles. It also removes references sections and lines that are clearly personal contact details. They are replaced with neutral placeholders such as “[name]” or “[email]”. We keep general location (city, region and country), because it matters for time zones and hiring rules.

What is never sent. The CV file itself, your name, email address and phone number as stored with your application, your street address, your links and profiles, and your IP address.

This removal is automatic, so it isn’t perfect. Details like the names of employers or schools, job titles and dates stay in, because the review needs them, and they can sometimes make a person identifiable. Unusual CV layouts can also hide a detail from the removal. As a safeguard, if the system can still find your name, email address or phone number in the text after removal, nothing is sent at all. Staff can see exactly what the AI would receive for any application before it is sent.

Who receives it. The AI service that our admins have configured: OpenAI or Anthropic, reached through their business interfaces (APIs). They process the text to produce the result and send it back. Both are based in the United States and may process data outside your country. By their own published terms, API data is not used to train their models by default, and it can be kept for a limited period (up to about 30 days) for abuse monitoring, and longer where the law requires it or a safety violation is flagged. See OpenAI’s data controls and Anthropic’s data retention. Those terms are theirs and can change.

A person decides. The AI result is a guide for our team and nothing more. We don’t reject, shortlist or hire anyone based on an AI result alone, and every hiring decision is made by a person who reads your application. AI can be wrong or biased, which is another reason we don’t rely on it by itself.

Your choice. If you’d rather we don’t use AI on your application, email hello@juntosteams.com and we won’t. It won’t count against you.

Candidate tests. If we send you a test as part of an application, the written answers you give may be graded by AI against the model answer or grading guide our team wrote. This happens automatically right after you submit the test. Only the question, our grading guide and your answer are sent: never your name, email address, CV or anything else about you. Multiple choice questions are marked without AI. A person can always change any score, and no decision is made on a test score alone.

Spoken answers. If a test has spoken questions, the recording you make may be sent to OpenAI, either to an audio model that listens to it and grades it against our grading guide (content, and when the guide asks for it clarity of pronunciation, fluency and tone) or to its Whisper speech-to-text service to be turned into text that an AI then grades. Only the audio and the question are sent, never your name, email address or CV, but a voice recording can identify a person. A member of our staff can listen to the recording and change the score. Recordings are stored outside the public website and can only be played by logged-in staff.

We don’t use your information to train AI models ourselves.

Who we share it with

We don’t sell or rent your information. We share it only with these companies and only for the reason given:

• Our hosting providers, which run this website and its database for us, under confidentiality obligations.
• Postmark, the email service we use to send you a confirmation after you submit a form. It receives your name, email address and the content of that message.
• ipwho.is, for the approximate-location lookup. It receives your IP address only.
• Cloudflare, for the bot check, only once Turnstile is enabled.
• Google, which runs Google Analytics. It receives technical details of your visit to the public pages (see “Website analytics”).
• OpenAI or Anthropic, only when staff run an AI review of a job application or a test is graded with AI (OpenAI also receives recordings of spoken test answers to turn them into text), as described in “How we use AI”.
• The client company a role belongs to, if your application moves forward with them.
• Other systems our team connects to this website (for example a recruiting or customer-management tool run by us or by a client). They are told when something happens, such as that an application was received, that a test was started or submitted, that a candidate moved to another stage, or that a call was requested. At least one of these connections also receives the name, email address and phone number (or, for a call request, the name, email address and company) of the person concerned. CVs, notes, test answers and recordings are never sent this way.

Otherwise your information stays internal to Juntos Teams. We may also disclose information if the law requires it.

Where your information lives

Form submissions, CVs, notes and logs are stored in our own database and file storage on the servers that host this website, not in a third-party CRM or spreadsheet tool. Some of the companies listed above are based in, or process data in, the United States, so information you give us can be transferred outside the country where you live. If you are in the European Economic Area, the United Kingdom or elsewhere with similar rules, we rely on the safeguards those companies offer for such transfers, such as standard contractual clauses.

Why we’re allowed to use it

Where the GDPR or similar laws apply: we use job application details to take steps you ask for before a possible contract (considering your application) and for our legitimate interest in recruiting well and fairly. We use Book a call details for our legitimate interest in responding to business enquiries. Where we rely on your consent (for example, to keep your application for future roles), you can withdraw it at any time.

How long we keep it

We don’t delete records automatically, with two exceptions: the audit log is removed after two years, and the record of what was sent to connected systems after 30 days. Call requests and job applications are kept for as long as they’re useful to that conversation or hiring process, and for a reasonable period afterward in case you or we follow up. We review older records by hand and remove those we no longer need. If you ask us to delete your application, we delete the application, your CV file, your answers, the notes and activity log about you, the personal details in the audit log entries about you, and the logged confirmation email. Copies in backups can remain for a short time until they are overwritten. Staff account data is kept for as long as that person has access to the admin area.

Security

Access to the admin area is limited to Juntos Teams staff and protected by a login with a securely hashed password. CV files are stored outside the public website and can only be downloaded by a logged-in staff member. Forms are protected against automated abuse and cross-site request forgery. The site is served over HTTPS in production. No system is perfectly secure, and if something happens that affects your information we will tell you as the law requires.

Website analytics

We use Google Analytics 4, a service of Google LLC, to understand how many people visit the public pages of this website (not the staff area and not candidate tests) and which pages they read. Google receives your IP address and details of your visit: the page, the time, the address that sent you here, your browser, device and approximate location. Google Analytics 4 does not store IP addresses. We use the results as totals to improve the site; we don’t use them to identify you, and we don’t combine them with your forms or applications.

It sets cookies in your browser to tell visits apart. You can block them in your browser settings, or install Google’s opt-out add-on. See Google’s privacy policy. Google is based in the United States.

Cookies

The public website uses Google Analytics, which sets cookies (such as “_ga”) to tell visits apart and count them. We don’t set advertising cookies. A short-lived cookie protects our forms against cross-site request forgery. In our private admin area a session cookie keeps staff logged in, and staff who use two-step sign-in can choose to trust a browser for 30 days, which stores one more cookie there. If Turnstile is enabled, Cloudflare may set a cookie as part of its bot check.

Your rights and choices

You can ask us, at any time, to:

• show you what information we hold about you, and give you a copy;
• correct anything that is wrong;
• delete your information, including withdrawing a job application and its CV;
• stop or limit how we use it, including not using AI on your application;
• give you your information in a portable format.

Email hello@juntosteams.com and we’ll respond promptly, and in any case within one month. We may need to confirm it’s really you first. Depending on where you live you may have further rights under laws like the GDPR or CCPA; we’ll honor them regardless of location on a best-effort basis. If you’re unhappy with how we’ve handled your information, you can also complain to your local data protection authority.

Children’s privacy

Our forms are intended for business contacts and job applicants, not children. We don’t knowingly collect information from anyone under 16.

Changes to this notice

If we make meaningful changes to how we handle your information, such as adding a new form, enabling a new third-party tool, or changing how AI is used, we’ll update this page and its “last updated” date.

Contact us

Questions about this notice or your information? Email hello@juntosteams.com.