Privacy notice

Effective date: 2026-10-27.

This notice covers ApplyReel, operated by PT ITropical Live Solutions, Alamanda Office, Jl. Bypass Ngurah Rai No. 67, Kedonganan, Kec. Kuta, Kabupaten Badung, Bali 80361, Indonesia. Privacy contact: support@applyreel.com.

ApplyReel is for US employers. For candidate data the hiring employer decides why and how it is used and we process it on the employer's behalf.

Roles: employer as controller, ApplyReel as processor

For candidate data (name, email, recordings, ratings, comments) the employer is the controller (in California terms, the "business") and ApplyReel is the processor (the "service provider"). We process candidate data only on the employer's instructions, to run the screening. We keep it confidential, protect it as described below, use only the sub-processors listed below, help the employer answer candidate requests, tell the employer without undue delay (and within 72 hours of confirming it) about a breach affecting that data, and delete or return it when the employer asks or when the retention period ends. For employer account data (email, workspace name, payment reference) we are the controller. By using ApplyReel the employer accepts these processing terms as its data processing agreement.

Candidates: recording and consent

The candidate page tells applicants, before they record, that their answers are video and audio recordings and that the employer will watch them. Recording only starts after the candidate chooses to start and the browser asks for camera and microphone permission. Candidates who do not want to record video should contact the employer, who must offer another way to complete the first screen. The employer is responsible for any further notice or consent its local law requires.

No biometric or AI analysis

ApplyReel stores recordings as plain video and audio files. We do not do facial recognition, face geometry, voiceprints, emotion or personality analysis, transcription, or any other AI analysis of candidates, and we do not extract biometric identifiers or biometric information from recordings. Because no AI evaluates the videos, the AI notice and consent duties of the Illinois Artificial Intelligence Video Interview Act do not arise from ApplyReel. Under that law videos may be shared only with people whose expertise is needed to judge the applicant, so employers should share review links only with those people. We delete a candidate's recording within 30 days of an employer request.

What we collect

• Employers: email address, workspace name, role titles and questions, review ratings, shortlist or reject decisions and comments, and a payment reference from Paddle. We do not receive card numbers.
• Candidates: name, email address, and the video and audio answers they record (with duration and file type). Employers can invite candidates by email, and we send an invite, one reminder if the interview was started but not finished, and a one-time resume link.
• Technical: the IP address of a request is used as a key for abuse rate limiting. Our hosting provider also keeps request logs. The static website sets no cookies and uses no analytics or advertising trackers. Paddle's checkout, when it opens, is run by Paddle under its own privacy notice.

Why

To run the screening (record, store, play back and review answers), send the emails above, protect the service from abuse, process payments through Paddle, and give support.

Who can see it

The hiring employer, anyone it gives a review link to, and us for support and abuse handling. Our service providers: Cloudflare (hosting, D1 database and R2 video storage), Paddle (payments, merchant of record) and Resend (email delivery). We do not sell personal data and do not share it for advertising. Providers act under their own data processing terms. If we add a provider that handles candidate data we update this list first.

International transfers and Indonesian law

ApplyReel is run by an Indonesian company, so our staff may access data from Indonesia. Cloudflare chooses the storage location and it may be outside the US and outside Indonesia. We transfer data only to providers that commit by contract to protect it at a comparable level, and we handle personal data in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022). If a breach is likely to harm data subjects we notify them and the Indonesian authority within 3 x 24 hours as that law requires. ApplyReel is not offered to employers in the EU or UK.

US state privacy laws

ApplyReel is a service provider to employers under laws such as the California Consumer Privacy Act. We do not sell or share personal data, we do not use it outside the service, and we do not combine it with other data. California and other US state residents can ask the employer, or us, to access, correct or delete their data, and we will not treat anyone worse for asking.

Retention and deletion

Each role has a 30 day live window from activation and a retention period of 30 or 90 days, chosen by the employer (default 30). The retention period starts when the live window ends. An hourly job then permanently deletes the role's videos, candidate records (name, email), comments, ratings, decisions and invite list. A role activated on day 0 is therefore deleted about day 60 (30 day retention) or day 120 (90 day retention).

After deletion we keep only the employer account (email, workspace name), the role title and questions, the payment reference, and abuse-limiting counters. We delete these on request. Roles that were never activated are not purged automatically and are deleted on request. Cloudflare keeps short-lived database recovery copies for a limited time (days, not months) and then drops them. We keep the payment reference as an accounting record for as long as bookkeeping law requires, up to 10 years under Indonesian law.

To ask for access, correction or deletion, email support@applyreel.com or contact the hiring employer. We may need to verify your identity. We confirm receipt within 3 business days and complete the request within 30 days, or tell you why we need longer (at most 45 days in total). Where the law gives a shorter deadline we follow it. A candidate's request about an interview is passed to the employer who controls that data, and we carry out its instruction. We may refuse or limit a request only where the law allows, for example where we must keep a record by law.

No sale, no AI training

We do not sell personal data, do not use recordings for advertising or to train AI models, and do not score or analyse candidates with AI or emotion analysis.

Security

Access to a role works through secret links. Data is stored with Cloudflare and sent over HTTPS. No system is absolutely secure. Employers must explain the screening purpose to candidates and offer an accessible alternative to video.

Scope and changes

ApplyReel is not offered to employers in the EU or UK at this time, and is not directed at children. We update this notice by changing the effective date above.