Privacy Policy

Last updated: 29 October 2026

Who we are

Cruvo is a talent research and candidate sourcing firm based in London, UK. We research and assess candidates for roles our clients are hiring for; the client decides whom to contact and makes all hiring decisions. For the candidate research database described below, Cruvo is the data controller under UK GDPR: we decide what personal data to collect and why. For data our clients upload or share with us about their own people or processes, we generally act as a processor on their behalf.

Contact for anything in this policy: hello@cruvo.app.

If you are a candidate we have researched

We research professionals for specific, named roles our clients are hiring for. That means we may hold information about you even though you have never interacted with Cruvo. This section explains what we hold, where it comes from, and what you can do about it.

What we collect

  • Professional identity: name, current role and company, public professional profile URLs (for example LinkedIn), and headline.
  • Career history: previous roles, employers, and dates, as published on public professional sources.
  • Inferred professional characteristics, such as seniority and potential suitability for a role, derived from your public career history.
  • Business contact details (for example a work email), obtained from licensed B2B data providers, where we or the client engaging us intends to contact you about a role.
  • Notes made by our researchers in the course of an engagement.
  • The status of a client’s outreach to you: whether they contacted you, whether you replied or are interested, and notes they add.

We do not collect special category data (health, beliefs, ethnicity, and so on) and we do not build profiles for any purpose other than recruitment for specific roles.

Where it comes from

Publicly available professional sources (such as public profile pages, company websites, and press coverage), web search, and vetted third-party providers that license professional profile data.

Why, and our lawful basis

We process this data for one purpose: identifying and assessing candidates for specific roles our clients engage us to source for. Our lawful basis is legitimate interests (Article 6(1)(f) UK GDPR) — our and our clients’ interest in identifying strong candidates for hard-to-fill roles, and candidates’ own interest in being surfaced for relevant opportunities. We limit collection to professional data you have chosen to make public or that is licensed for this purpose.

Who sees it

Shortlists including your profile are shared with the specific client hiring for the role. It is the client — not Cruvo — who decides whether to contact you and who makes all hiring decisions. We also use service providers to operate our platform, including AI providers that assist with evaluating role fit — see our service providers below.

Your rights, including removal

You can ask us at any time to access the data we hold about you, correct it, delete it, or object to us processing it. Email hello@cruvo.app with the subject line “Privacy request”. We may need to verify your identity. We respond within one calendar month.

If you ask to be removed, we delete your records and keep only a minimal suppression entry (an identifier such as your profile URL) whose sole purpose is to prevent our research process from re-adding you in future. Deletion without that record would not be effective.

If you are a client or site visitor

For clients, we process business contact details, account credentials (via our authentication provider), and the content of engagements — role briefs, feedback, and notes — to deliver our services under our engagement terms. For site visitors, we use cookies and similar storage as our cookie policy describes: strictly necessary cookies, product analytics (only with your consent), and source attribution — no advertising or cross-site tracking. When you load one of our public pages, our hosting also sends a short record of the request (the page’s address, your browser’s request headers and your IP address) to Tin Analytics, our website analytics provider, so we can tell people apart from automated crawlers and AI assistants. It uses no cookies, does not depend on your cookie choice, and never covers the signed-in product. If you send us your details through a form on our website, we use them to respond to your enquiry.

If you use the Cruvo for LinkedIn browser extension

Cruvo for LinkedIn is a Chrome extension for our clients. It shows, on a LinkedIn profile, whether that person is in one of your organisation’s Cruvo searches and where your outreach with them stands, and lets you update it. It works only while you are signed in to Cruvo on our website.

What it reads on LinkedIn

  • The address of the LinkedIn page you are viewing.
  • On a profile that is in one of your searches: whether you are connected to the person, and the first name shown in the profile heading. Both are used in your browser to draw the badge and are never sent to Cruvo or anyone else.
  • Where your organisation has switched it on: whether you sent a connection request or a message from that profile, which it tells from LinkedIn’s “Invitation sent” notice or your message appearing in the chat. It never reads what a message says.

It does not read or keep any other profile content, and it does nothing on other websites.

What it sends to Cruvo

  • The address of the profile you are viewing, to check whether the person is in one of your searches. We do not store the addresses of profiles that are not.
  • The outreach updates you make (contacted, replied, interested, a note) and, where switched on, that you sent a connection request or a message. These are saved to that person in your organisation’s search, the same as updates made on our website.

Your organisation and the Cruvo team working on your searches can see it, like the rest of the search. We handle it as client engagement data: see “If you are a client or site visitor”, “Retention” and “Your rights and complaints”.

What it keeps in your browser

A copy of your Cruvo sign-in, so you do not have to sign in again, and the day you last answered “Not yet” to the badge’s “Replied?” question, so it is not asked again that day. Removing the extension deletes both from your browser; it does not sign you out of our website.

Service providers

We use service providers to deliver our services, in these categories:

  • Licensed B2B data and web search providers, to find public professional profiles and business contact details
  • AI model providers, to assist with evaluating candidate fit against a role brief
  • Cloud hosting, database and authentication providers
  • Website analytics (only with your consent), also used to log enquiries sent through our website forms
  • Website request logging on our public pages, to tell visitors apart from automated crawlers and AI assistants
  • Customer relationship management, for clients and prospects

Providers may use personal data only to provide their services to us — we do not permit any provider, including our AI providers, to use personal data to train their models. Where a provider is outside the UK, transfers rely on UK adequacy regulations or appropriate contractual safeguards. A current list of our sub-processors is available to clients on request.

Retention

We keep candidate data only as long as it serves the recruitment purpose it was collected for, and we review stored records against that purpose. Suppression entries created by removal requests are kept indefinitely, because their purpose is to make removal stick. Client engagement records are retained for the engagement and as required for legal and accounting obligations.

Security

Candidate and client data is held in access-controlled systems, encrypted in transit, with access limited to Cruvo staff who need it for an engagement. Client report access is scoped to the client organisation.

Your rights and complaints

Under UK GDPR you have the right to access, rectify, and erase your personal data, to object to or restrict processing, and to data portability where it applies. To exercise any of these, email hello@cruvo.app. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk), though we would welcome the chance to resolve any concern directly first.

Changes to this policy

We will update this page when our processing changes and revise the date at the top. Material changes to how we handle candidate data will be reflected here before they take effect.