RigelLog in

Privacy Policy

Last updated: April 16, 2026

This Privacy Policy explains how Rigel ("we", "us", "our") collects, uses, and protects information when you use the Rigel platform at rigelsignal.com (the "Service"). By using the Service, you agree to this Policy.

1. Information we collect

1.1 Information you provide

  • Account information: name, email address, role (candidate or recruiter), company name (recruiters only), and password.
  • Candidate profile: the CV you upload, and the structured profile we extract from it (contact details, summary, education, work experience, skills, and extras).
  • Job data (recruiters): job title, location, employment type, required and preferred skills, experience and education requirements, and scoring weights.
  • Communications: any messages you send to us or to other users through the Service.

1.2 Information collected automatically

  • Usage data: pages viewed, actions taken, timestamps, and referrer information.
  • Device data: IP address, browser type, operating system, and device identifiers.
  • Cookies and similar technologies: we use cookies to keep you signed in and to understand how the Service is used. See Section 6.

2. How we use your information

  • To provide and operate the Service — parsing CVs, matching candidates to jobs, and displaying explainable scores to both sides.
  • To authenticate you and maintain account security.
  • To communicate with you about your account, the Service, and relevant opportunities.
  • To improve the Service — including refining our matching algorithms and detecting abuse.
  • To comply with legal obligations.

3. CV processing and AI

When you upload a CV, we extract structured information from it using a combination of deterministic parsing and large language models (currently Google Gemini 2.5 Flash, hosted on Google Cloud Vertex AI). Your CV and extracted profile are stored on our infrastructure and used only for the Service — they are not used to train third-party AI models. For full details, see our AI Transparency statement.

4. How we share information

Rigel is double-blind by design. We do not share your identity with counterparties until you choose to reveal it.

  • Candidates: recruiters see anonymized profiles (no name, no contact information) until you apply to a specific role or accept outreach.
  • Recruiters: candidates see anonymized company profiles (role, sector, team context) until both sides opt in to reveal identities.
  • Service providers: we use Google Cloud Platform (hosting, database, AI inference), Vercel (frontend hosting), and transactional email providers. These vendors access data only to operate the Service on our behalf.
  • Legal requirements: we may disclose information when required by law, subpoena, or to protect rights and safety.
  • Business transfers: if Rigel is involved in a merger, acquisition, or asset sale, your information may be transferred subject to this Policy.

We do not sell your personal information.

5. Data retention

  • Candidate profiles: retained while your account is active. You can delete your profile at any time from Settings — deletion is permanent.
  • Recruiter jobs: retained while your organization's account is active, plus up to 12 months after a job is closed for auditing.
  • Guest applications (Quick Apply): retained for 90 days unless you create a full account, at which point they are merged into your profile.
  • Account deletion: request via settings or by emailing support@rigelsignal.com. We delete within 30 days, except where retention is required by law.

6. Cookies

We use:

  • Essential cookies — required to sign you in and keep the Service working.
  • Analytics cookies — help us understand usage. You can block these in your browser settings without breaking the Service.

We do not use advertising cookies.

7. Your rights

Depending on where you live, you may have rights to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your account and associated data.
  • Export your data in a machine-readable format.
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, email privacy@rigelsignal.com.

8. Security

We protect your data with encryption in transit (TLS 1.2+) and at rest, access controls, and regular security reviews. No system is perfectly secure, but we take reasonable steps to protect your information. If we discover a breach that affects you, we will notify you within 72 hours where legally required.

9. International transfers

Rigel is operated from the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US. By using the Service, you consent to this transfer.

10. Children

The Service is not directed to anyone under 18. We do not knowingly collect information from children. If you believe we have, please contact us and we will delete it.

11. Changes to this Policy

We may update this Policy. We will notify you of material changes by email or through the Service at least 30 days before they take effect. The "Last updated" date at the top shows when the Policy was last revised.

12. Contact

Questions about this Policy or your data? Email privacy@rigelsignal.com.