Skip to content
Keystone
Menu

Privacy policy

Last updated September 28, 2026

Who is responsible

Keystone is responsible for the personal data you submit through this website. Send questions about your data through the contact form.

What we collect

When a company contacts us: name, company, email, phone if you provide it, and the message.

When you apply for a role or create a profile: name, email, phone and a link to your profile if you provide them, what you tell us about yourself, and the roles you are interested in.

When you sign in: your email address and a one-time code, which we only store as a hash.

Why we process it

We answer requests on the basis of our legitimate interest in replying to people who contact us.

We keep your profile in our candidate bank on the basis of your consent, which you give when you tick the box in the form. You can withdraw it at any time by deleting the profile on My profile.

How long we keep it

We keep requests while the conversation is ongoing and for at most 12 months after the last contact.

We keep profiles for at most 24 months from your consent, or until you delete the profile. A sign-in code is valid for ten minutes and a sign-in for 30 days.

Who we share it with

We never present you to an employer without asking you first.

The data is stored with providers that run the service for us: Vercel (website), Neon (database) and Resend (email). They process it under data processing agreements.

Visitor statistics

We count page views with Vercel Web Analytics. It uses no cookies and stores nothing that identifies you.

Cookies

The website sets one cookie only: the one that keeps you signed in after you create a profile or sign in. It is needed for signing in and is used for nothing else.

Your rights

You have the right to know what data we hold about you, to have it corrected or deleted, to restrict processing and to object to it. You can change or delete your profile yourself on My profile. For anything else, get in touch through the contact form.

You can also file a complaint with the Swedish Authority for Privacy Protection (IMY).