How we protect candidate data, recruiter accounts, and the platform. Last updated October 2026.
Security controls
- Every query for searches, outreach drafts and API tokens is scoped to the signed-in account on the server. A recruiter only ever sees their own runs.
- Passwords are stored as bcrypt hashes (cost 12). Sign-in, sign-up and password reset are rate-limited, and changing the password signs out every other session.
- API tokens for the MCP server are stored as SHA-256 hashes; the full token is shown once.
- Credits and subscription state change only on the server, from Stripe webhooks and server-side checks, never from the browser.
- Secrets and API keys live in server environment variables and never reach the browser. All traffic is HTTPS, behind Cloudflare.
Authentication
Sign in with email and password, an emailed link, Google or GitHub. Sessions are signed, httpOnly cookies. The admin area is limited to an allow-list of verified addresses configured on the server.
Data hosting and sub-processors
- Hosting and database: a VPS provider in the European Union.
- Network and protection: Cloudflare.
- AI inference: Anthropic or OpenAI, under their API terms (no training on our data).
- Source data: public GitHub profiles via the GitHub API.
- Payments: Stripe (PCI-DSS Level 1).
- Email: Resend.
- Analytics: Google Analytics, only with cookie consent.
- Error monitoring: Sentry, when enabled, without personal identifiers.
What we collect
Recruiters: email, name, password hash (or Google/GitHub ID), searches, usage events, billing identifiers.
Developers: public GitHub profile data (username, bio, public repositories and their stats, public profile README). Contact routes are only what the developer published themselves (profile links and public commit email), looked up when a recruiter asks. No private data, no other sites. Any developer can opt out for good, see contact below.
Privacy, GDPR and the AI Act
ViewSkill is the data controller for recruiter accounts and for the developer data it reads from GitHub. Legal bases: contract for accounts, legitimate interest for public professional data, consent for analytics cookies and the newsletter. The full notice, including retention periods and transfers, is in the Privacy policy.
Account holders can download their data and delete their account themselves on the account page. Other requests, including a developer's objection, are answered within 30 days.
ViewSkill is a decision-support tool. All scores, rankings and AI-generated evaluations are starting points for your recruiting process; final hiring decisions remain the responsibility of the human recruiter. See the Terms of Use.
Contact
Privacy requests and developer opt-outs: [email protected]. Security and vulnerability reports: [email protected]
We answer every message within one business day. Data-subject and security requests within 30 days, usually much faster.
This page describes controls implemented by ViewSkill. It is not an independent certification or third-party attestation.