Synatra Ltd is registered in England & Wales. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Data Controller: Synatra Ltd, Coventry, United Kingdom
Contact: info@synatra.co.uk
We previously operated the Skreening AI platform, an AI-powered recruitment screening and interview tool used by hiring organisations in the UK. This service has been discontinued; the sections below describe how data was processed while it was operating.
2. What Data We Collect
2.1 Platform Users (Employers / Recruiters)
- Name and email address (registration)
- Company name and role
- Login history and IP addresses (security)
- Billing information (processed via Stripe — we do not store card details)
- Job listings and screening configurations
2.2 Candidates (Job Applicants)
- Name and email address
- CV / resume content (uploaded by the employer)
- Interview responses (text, audio, or video)
- AI-generated screening scores and summaries
- Consent records (timestamp and IP address)
2.3 Website Visitors
- Cookies (see Section 8)
- IP address and browser information (server logs)
3. Lawful Basis for Processing
| Data Type | Lawful Basis |
|---|---|
| User account data | Contract performance (Article 6(1)(b)) |
| Candidate CV & interview data | Legitimate interests of the hiring employer (Article 6(1)(f)) + candidate consent captured before interview |
| AI-assisted screening | Legitimate interests — AI assists human decision-making only; no solely automated decisions are made |
| Billing data | Contract performance; legal obligation |
| Security & audit logs | Legitimate interests (fraud prevention, security) |
4. AI Processing & Automated Decision-Making
Skreening AI uses artificial intelligence to analyse CVs and interview responses to generate suitability scores and summaries. This processing:
- Assists human recruiters — it does not make final hiring decisions automatically
- Is powered by Anthropic Claude (CV screening and analysis) and Groq (interview transcription)
- Candidate data is sent to these sub-processors under Data Processing Agreements
- Candidates are informed of AI screening before their interview and must consent
Under UK GDPR Article 22, candidates have the right to request human review of any AI-assisted assessment. Contact the hiring employer to exercise this right.
5. Data Sub-Processors
We use the following third-party processors. Each is bound by a Data Processing Agreement with Synatra Ltd:
| Processor | Purpose | Location | Safeguard |
|---|---|---|---|
| Anthropic | AI CV analysis & interview scoring | USA | Standard Contractual Clauses (SCCs) |
| Groq | Audio transcription of interviews | USA | Standard Contractual Clauses (SCCs) |
| Resend | Transactional email delivery | USA | Standard Contractual Clauses (SCCs) |
| Stripe | Payment processing | USA / EU | SCCs; PCI-DSS compliant |
| OVH | Server hosting & data storage | UK / EU | UK adequacy; GDPR-compliant |
| OAuth sign-in (optional) | USA | SCCs |
6. Data Retention
- User accounts: retained while account is active; deleted within 30 days of deletion request
- Candidate CV & interview data: retained for up to 12 months from collection date by default; configurable by the employer
- Billing records: retained for 7 years (legal obligation)
- Security logs: retained for 90 days
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access (Article 15): request a copy of all data we hold about you
- Right to rectification (Article 16): correct inaccurate data
- Right to erasure (Article 17): request deletion of your data
- Right to restriction (Article 18): restrict processing in certain circumstances
- Right to data portability (Article 20): receive your data in a machine-readable format
- Right to object (Article 21): object to processing based on legitimate interests
- Rights related to automated decision-making (Article 22): request human review of AI assessments
To exercise any right, contact us at info@synatra.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Cookies
Our marketing website uses the following cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| synatra_cookie_consent | Records your cookie consent choice | 12 months |
| hireai_token | Authentication token for the app (app only) | Session / 7 days |
We do not use analytics, advertising, or third-party tracking cookies on our marketing site.
9. Data Security
- All data transmitted over HTTPS (TLS 1.2+)
- Passwords hashed using bcrypt
- Authentication via JWT tokens with short expiry
- Server access restricted by SSH key-only authentication and fail2ban
- Database not exposed to the public internet
- Admin access requires separate authentication
10. International Transfers
Some sub-processors are based in the United States. We ensure all such transfers are protected by Standard Contractual Clauses (SCCs) approved by the UK ICO, providing equivalent protection to UK GDPR.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users. The "Last updated" date at the top of this page indicates when it was last revised.
12. Contact Us
For any privacy-related queries or to exercise your rights:
Synatra Ltd
Coventry, United Kingdom
Email: info@synatra.co.uk