How long we keep your data

This is a plain-language summary of section 12 of our privacy policy, which sets out how long we keep each kind of information. The privacy policy is what applies.

When you close your account

Closing your account deletes it and the personal information it holds, across all our systems, for every user on the account. See Close your Virtual CV account or Close your Orbit account.

We keep only these records afterwards:

• A record that the account was deleted, and of data exports you asked for. It contains your email address, so we can show what we did if we’re asked.
• A one-way hash of your email address, so closing an account and signing up again can’t be used to claim free credits again. It can’t be turned back into your address.
• Credit and usage records, as financial records.
• Referral records, if you were referred, to prevent referral fraud.
• Invoices and payment records, for as long as Australian record-keeping law requires. Stripe and Xero hold these.

Your contact in our email provider (Brevo) and your analytics history (PostHog) aren’t deleted automatically. Email privacy@wipperoz.com and we’ll delete them.

Deleted information stays in our database backups for up to 35 days, and in our system logs for up to 30 days, before it’s overwritten.

If you stop signing in

If nobody signs in to an account for 3 years, we delete it. We email the account’s admins 30 days before, and signing in during those 30 days keeps the account. We don’t delete an account for inactivity while it has a paid balance or an active subscription, or, for Orbit, while it has open roles.

Virtual CV: some fixed periods

• The CV file you upload: deleted once we’ve read it, or within 7 days if reading it fails.
• Try-it-out CVs you never saved: deleted when they expire. One you try on our website expires after 14 days.
• Views of your Virtual CV: for the life of your account.
• Community Board posts: 14 days, or 1 day after you close the post.
• Endorsement requests nobody answers: 30 days.
• AI screening interview transcripts: 90 days.
• Your data export file: 7 days after it’s ready.
• ID document photos and face videos: never stored.

Orbit: some fixed periods

• A closed Orbit account: deleted straight away, with its hiring records. A record of the deletion, with the team’s email addresses, is kept for 90 days.
• Applicants to a role that has closed: 12 months after the role closes, then de-identified. An admin can set this anywhere from 6 to 24 months.
• An employer’s access to a candidate’s Virtual CV: while the role is open and for 90 days after it closes, unless the candidate ends it sooner.
• AI screening interview transcripts: 90 days. Findings are kept until the employer closes its account.

The privacy policy lists every period, including identity verification, unclaimed CVs created on your behalf, and imported CVs.

Questions

Email privacy@wipperoz.com. We respond within 30 days.