Privacy Policy

Account details — name, email, password (stored hashed by our authentication provider), and whether you are a candidate or an employer.

Mobile number — the number you verify by SMS, the country you selected, one-time verification codes (short-lived), and a log of the texts we sent you. We use it to confirm you are a real person, to send the alerts you opt into, and for account security. We never sell it or share it with employers or advertisers. Codes are sent through our SMS provider, Twilio. Message and data rates may apply; reply STOP to any text to opt out, or remove your number in Settings.

Profile content — headline, location, skills, work history, education, links, profile photo, résumé, and the videos you record.

Employer content — company details, roles you post, and the notes and ratings your team records about applicants.

Activity — applications, saved roles, messages, XEN transactions, and basic technical logs (IP address, browser, timestamps) used for security and debugging.

Voluntary self-identification — if an employer enables it and you choose to answer, gender, race/ethnicity, veteran and disability status. These answers are stored separately from your application.

Your application videos are visible to the employer who posted the role you applied to, and to Xenia staff for support and safety review. Videos you explicitly opt into the talent feed are visible to verified employer accounts on Xenia. Nothing on your profile is published to the open web or indexed by search engines, and our video storage is private — every playback uses a short-lived signed link.

Answering is always optional. Employers never see individual answers. They can only see anonymous totals for a role, and only once at least five people have answered — below that threshold we return nothing at all. These answers are never shown alongside your application, never used to rank or filter candidates, and are not visible to the hiring team in any form that could identify you.

To operate your account and the hiring features you asked for (contract); to keep the platform safe and prevent abuse, and to improve the product (legitimate interests); to process payments and keep tax records (legal obligation); and, for voluntary self-identification, on the basis of your explicit consent, which you can withhold or withdraw.

Service providers who process data on our behalf: Supabase (database, authentication, video storage), Stripe (payments — Stripe receives your email and purchase details, not your videos), and our email delivery provider for notifications. We do not sell your personal data and we do not share it with advertisers.

Profile and video content is kept while your account is open. Applications and employer notes are kept for up to two years so hiring teams can meet record-keeping obligations. Payment records are kept for seven years for tax purposes. When you close your account we delete your profile and videos within 30 days, except records we are required to keep.

You can access, correct, export or delete your data. Most of it is editable directly on your profile; for a full export or deletion, email luke@xenia-labs.com and we will respond within 30 days. Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to your data protection authority.

Data is encrypted in transit and at rest. Access is controlled by row-level security rules in our database, so one employer cannot read another’s applications and one candidate cannot read another’s messages. Video buckets are private and served only through expiring signed links.

Xenia is not intended for anyone under 16 and we do not knowingly collect their data.

We will post any material change here and update the date above. Questions: luke@xenia-labs.com. See also our Terms of Service.