Legal
Privacy Policy
Draft version — last updated September 2026
Placeholder legal text. This policy was drafted to be a realistic starting point, not reviewed or approved counsel. Because Mamtah handles hiring and candidate data — a sensitive category under laws like GDPR, CCPA, and various state/national employment regulations — have an actual privacy attorney review and finalize this before it governs a live product.
1. What this policy covers
This Privacy Policy explains how Mamtah ("we," "us") collects, uses, and protects information when you use our website and product to build role architectures and screen candidates.
2. Information we collect
- Account information — name, email address, and company details you provide when you sign up, including via Google or Microsoft sign-in.
- Role and hiring content — the hiring needs, role architectures, and job descriptions you create using Mamtah.
- Candidate data you submit — any candidate profiles, resumes, or summaries you paste into Mamtah for screening. This may include personal information about third parties who have not directly consented to our processing — you are responsible for having a lawful basis to submit it.
- Billing information — handled by our payment processor; we do not store full card numbers ourselves.
- Usage data — how you interact with Mamtah, for product improvement and to enforce plan limits (like monthly role counts).
3. How we use this information
- To provide and operate the Mamtah product, including generating role architectures and candidate rankings.
- To enforce plan limits and billing tied to your subscription tier.
- To improve the quality and accuracy of our AI-generated outputs.
- To communicate with you about your account, product updates, or support requests.
- To meet legal and regulatory obligations, including those specific to AI use in hiring contexts.
4. Candidate data — special handling
- Candidate data is used only to generate the screening output you requested — not for training shared models across customers, and not sold to third parties.
- You, as the account holder, are responsible for ensuring you have a lawful basis to submit candidate data — for example, under applicable recruitment or employment data rules in your jurisdiction.
- Where required by law (such as NYC Local Law 144 or similar automated-hiring regulations), we aim to support the disclosures and audit information you may need to provide to candidates.
5. Data sharing
We do not sell your personal information. We share data only with:
- Service providers who help us operate Mamtah (hosting, payment processing, AI model providers), under contractual confidentiality obligations.
- Law enforcement or regulators, only where legally required.
- A successor entity, in the event of a merger or acquisition, with notice to you.
6. Data retention
We retain role and candidate data for as long as your account is active, or as needed to provide the service. You can request deletion of your data at any time, subject to legal retention requirements.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to certain processing. Contact us to exercise these rights.
8. Security
We use industry-standard safeguards to protect your data, including encryption in transit. No system is completely secure, and we encourage you not to submit highly sensitive personal data (like government ID numbers) through candidate screening fields.
9. Cookies
We use essential cookies to keep you logged in and remember your preferences. We do not currently use third-party advertising cookies.
10. Changes to this policy
We may update this policy as Mamtah evolves. We'll notify active account holders of material changes.
11. Contact us
Questions about this policy or your data can be sent via our contact page.