Your data, explained.

This Privacy Policy describes how Catapult AI, LLC (dba “Great Hire”) (“Great Hire,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you visit great-hire.com, create or use a Great Hire account, communicate with us, participate in a recruiting call or message powered by Great Hire, or use our related applications, APIs, and integrations (the “Services”).

Catapult AI, LLC is a Delaware limited liability company formed on October 24, 2025 (Delaware file number 10378977). Great Hire is its trade name.

When Great Hire decides how data is used

We act as a controller or business for information used to operate our website, manage accounts, provide support, secure the Services, conduct product analytics, and manage our business relationship with customers.

When a customer decides how data is used

Staffing firms, employers, recruiters, and other customers generally decide why and how applicant, candidate, employee, and client information is processed through the Services. For that Customer Data, Great Hire generally acts as a processor or service provider on the customer’s behalf. The customer’s privacy notice and instructions govern that processing. If you are a candidate seeking to exercise rights in data submitted by a Great Hire customer, contact that organization first; we will support verified requests as required by our agreement and law.

This policy does not cover third-party websites or services that have their own privacy policies.

Account and identity information

Name, email address, phone number, employer or organization, job title, user role, profile image, account identifiers, authentication records, preferences, and support communications. If you sign in with Google, we may receive your Google account identifier and basic profile information such as name, email address, and profile image.

Recruiting and Customer Data

Job descriptions and requirements; applicant and candidate names, contact details, resumes, employment history, qualifications, availability, compensation preferences, application status, recruiter notes, interview questions and responses, scorecards, rubrics, recommendations, and hiring-workflow activity. Customers decide what they submit and may include additional information.

Calls, recordings, transcripts, messages, and email

Phone numbers, caller and recipient information, call audio when recording is enabled, transcripts, text and email content, attachments, delivery status, opt-out records, communication timestamps, duration, source and destination, carrier information, and related communications metadata.

Connected-service information

Data you authorize us to read from or write to connected services, such as identity providers, calendars, spreadsheets, applicant-tracking systems, CRMs, job portals, databases, collaboration tools, and automation platforms. The exact data depends on the integration and permissions you choose.

Device, usage, and diagnostics

IP address, browser and device type, operating system, approximate location derived from IP, referring URL, pages and features viewed, clicks and other interactions, session and tenant identifiers, performance and network timing, errors, diagnostic logs, and fraud or security signals.

Inferences and AI-assisted output

Summaries, structured fields, scores, flags, question suggestions, transcript highlights, and other output derived from job, candidate, call, and workflow data. These outputs support human review and may not be accurate or complete.

Sensitive information

Recruiting data may reveal or include information treated as sensitive under some laws. We do not use call audio to identify a person through a voiceprint or other biometric identifier unless we provide specific notice and obtain any authorization required by law. Customers must not submit protected health information, payment-card data, government identifiers, or biometric identifiers unless expressly authorized under a written agreement with appropriate safeguards.

We collect information:

• directly from account users, website visitors, candidates, and call or message recipients;
• from our customers and their authorized users, including staffing firms, employers, recruiters, and administrators;
• from services you or a customer connects, such as Google, Crelate, Airtable, Slack, and other configured applicant-tracking, calendar, spreadsheet, or collaboration systems;
• automatically from browsers, devices, cookies, local storage, analytics tools, communications networks, and use of the Services; and
• from public job postings, customer-directed job portals, service providers, carriers, and fraud-prevention or security sources.

• provide, personalize, maintain, and support the Services;
• create and secure accounts, authenticate users, manage tenant access, and provide customer support;
• conduct and route calls, messages, and email; create recordings and transcripts when enabled; and maintain opt-out and suppression records;
• provide AI-assisted screening, summarization, extraction, scoring, question generation, quality review, and recruiter workflow features;
• connect and synchronize customer-authorized third-party services;
• analyze use, troubleshoot errors, improve performance and accessibility, develop features, and understand customer and tenant activity;
• prevent fraud, abuse, unauthorized access, cross-tenant access, and other security incidents; enforce agreements; and protect people and provider networks;
• communicate about accounts, security, service changes, support, and, where permitted, products or events; and
• comply with law and respond to valid legal requests.

Where a law requires a legal basis, we rely on performance of a contract, legitimate interests in operating and securing the Services, consent, and compliance with legal obligations, depending on the context. You may withdraw consent where consent is the basis, but withdrawal does not affect earlier lawful processing.

We may disclose personal information to:

• the customer that directed the interaction, including its authorized recruiters, administrators, clients, and other users according to configured roles;
• service providers and subprocessors that provide hosting, storage, databases, authentication, analytics, AI processing, communications, email, monitoring, support, and security;
• customer-directed integrations when an authorized user connects or instructs us to exchange data with another service;
• telecommunications carriers and network partners as necessary to route calls and messages, prevent spam or fraud, and meet communications rules;
• professional advisers and transaction parties under appropriate confidentiality protections for financing, due diligence, merger, acquisition, reorganization, or sale of assets; and
• government authorities or other parties when reasonably necessary to comply with law or valid legal process, enforce agreements, investigate abuse, or protect rights, safety, and the Services.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising or use Google user data, recruiting data, call content, or message content to serve targeted advertising.

The providers used for a particular customer or feature may vary. Current or supported providers include:

These companies process information under their own privacy terms when acting independently and under contractual restrictions when acting for us or our customers. Carrier routing may require data to pass through additional network operators.

When you choose Google Sign-In, Great Hire requests basic account information used to authenticate you and provision your authorized account. If you later connect a Google service such as Calendar or Sheets, the authorization screen will identify the specific scopes and data requested. We access, use, store, and share that data only to provide or improve the user-facing feature you authorize.

Great Hire’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. In particular:

• we do not sell Google user data or use it for advertising, credit, or lending;
• we transfer it only as necessary to provide the authorized feature, for security, to comply with law, or with the consent required by Google’s policy;
• people do not read Google user data except with your affirmative permission, when necessary for security or support, to comply with law, or when data is aggregated and used for permitted internal operations; and
• we request only the scopes needed for the feature you choose.

You can disconnect Google access in your Great Hire integration settings where available or through your Google Account connections. To request deletion of Google-derived data held by Great Hire, email [email protected]. Revoking access stops future API access but does not automatically remove data that must be retained for security, legal, or customer-account obligations.

We use cookies, local storage, and similar technologies across great-hire.com and its subdomains. Necessary storage supports sign-in, security, demo access, tenant selection, and your privacy choice. It cannot be disabled through our preference tool because the requested Services would not function properly without it.

PostHog analytics and session replay are optional and remain off unless you select “Allow analytics” in our consent panel. When enabled, PostHog helps us understand how the website and product are used. We collect page views, clicks, copied-text events, navigation, feature interactions, device and approximate location data, performance and network timing, errors, and session replay. Our current replay configuration masks page text and element attributes before capture. Diagnostic console logs may be included. Signed-in users may be associated with an account identifier, email, name, and tenant so we can support users and understand account-level use.

Masking reduces exposure but cannot eliminate every risk. Do not enter highly sensitive data into fields that do not request it. We do not use PostHog for cross-site targeted advertising.

You can accept or decline analytics when the consent panel first appears and change that choice later through Cookie preferences in the site footer. Browser controls can block or delete storage, but blocking necessary cookies may prevent sign-in or demo features from working.

We honor browser privacy signals as follows. A Global Privacy Control signal keeps analytics off and cannot be overridden from our consent panel; the panel tells you when this applies. A Do Not Track header keeps analytics off until you make a choice, but it does not override a choice you make — if you select “Allow analytics”, we treat that specific, informed decision as the more recent one.

A Great Hire-powered call or message is initiated on behalf of the organization identified in the communication. Calls may use an AI-generated voice and may be transcribed or recorded when enabled. We and the customer use communications data to conduct screening, produce recruiter-facing records, deliver and troubleshoot the communication, maintain consent and opt-out records, prevent abuse, and comply with law.

Where required, notice or consent must be provided before recording, transcription, or automated outreach. You can end a call at any time. For applicable text messages, reply STOP to opt out or HELP for help. You may also contact the staffing firm or employer identified in the communication. Message and data rates may apply; frequency varies.

We retain personal information for as long as reasonably necessary to provide the Services, follow customer instructions, maintain security and audit records, comply with legal and provider obligations, resolve disputes, and enforce agreements. The period depends on the data, feature, customer settings, contract, and legal context.

• Account and Customer Data is generally retained while the relevant account or customer relationship is active and for a limited period afterward.
• Recordings, transcripts, and communications records follow customer settings and agreements, subject to carrier, backup, security, and legal requirements.
• Authentication, consent, opt-out, security, billing, and audit records may be kept longer where needed to demonstrate compliance or prevent abuse.
• Backups and provider systems may retain residual copies until their normal deletion cycles complete.

We may retain aggregated or de-identified information that no longer reasonably identifies an individual.

Depending on where you live and our role, you may have rights to request access, correction, deletion, portability, restriction, or objection; to withdraw consent; and to appeal a denied request. You may also have the right not to receive discriminatory treatment for exercising privacy rights.

• Account information: update available information in the Services or ask your organization’s administrator.
• Customer-controlled candidate data: contact the staffing firm, employer, or other organization that collected your information.
• Google access: revoke Great Hire in Google Account connections and contact us to request deletion of data we retain.
• Email: use the unsubscribe link in marketing email. We may still send transactional, account, or security messages.
• Texts: reply STOP to an applicable thread. We may retain the number on a suppression list so the opt-out is honored.
• Requests to Great Hire: email [email protected].

We may need to verify your identity and authority. Authorized agents may submit a request where permitted, subject to proof of authorization. Rights can be limited by law—for example, when we must retain information for security, legal claims, or another person’s rights. If we process data only for a customer, we may forward the request to that customer.

This section supplements the policy for residents of U.S. states with comprehensive privacy laws. In the preceding 12 months, we may have collected and disclosed for a business purpose the following categories, depending on the Services used:

We collect these categories from the sources in “Sources of information” and use them for the purposes in “How we use information.” We do not sell these categories or share them for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of people under 16. Because we do not sell or share personal information for those purposes, a browser-based opt-out preference signal does not change those practices.

Great Hire and our providers may process information in the United States and other countries where privacy laws may differ from those where you live. Where required, we use contractual or other recognized transfer safeguards. Customers that need specific transfer terms should contact us about an applicable data processing addendum.

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including access controls, tenant scoping, encryption in transit, authentication protections, logging, and provider security controls where appropriate. No security measure is perfect, and we cannot guarantee absolute security. Protect your credentials, use appropriate role access, and notify [email protected] promptly if you suspect unauthorized access.

The Great Hire website and administrative Services are not directed to children under 13, and we do not knowingly collect their personal information directly through those Services. A customer may use Great Hire in connection with a lawful application from a minor old enough to work. In that case, the customer is responsible for required notices, consent, and age-appropriate safeguards. Contact us if you believe we have processed a child’s information contrary to law.

We may update this policy as our Services and legal obligations change. We will post the updated policy here, revise the effective date, and provide additional notice when required by law or applicable Google API requirements.

Questions, complaints, or privacy requests may be sent to Catapult AI, LLC (dba “Great Hire”) at [email protected]. If you are an EEA, UK, or other covered resident, you may also have the right to complain to your local data protection authority.

You may also write to Catapult AI, LLC (dba “Great Hire”), 215 N Payne St, STE 33067, Alexandria, VA 22314.

For formal service of process, our registered agent is Legalinc Corporate Services Inc., 131 Continental Drive, Suite 305, Newark, Delaware 19713. This is our registered agent’s address, not a customer-support or operating-office address.