Our commitment
Recruitline, operated by Value Create Inc. (株式会社バリュークリエイト), helps match candidates with jobs. We process personal data only for that purpose, minimise what we collect, secure it, and give you control over it. This page summarises how — see our Privacy Policy and Candidate Notice for the detail.
What we process & why
- Candidate data — name, contact details, CV/resume, LinkedIn profile, and attributes our system infers — to match you with suitable roles.
- Recruiter/account data — to operate the service and billing.
- Security logs — to protect the service and meet legal obligations.
How we use AI
We use AI (OpenAI and Google Gemini) to extract information from CVs and to score and rank candidates against job requirements. These scores are advisory only — a human recruiter reviews them and makes the hiring decision. Scores shown in the product are labelled as AI-assisted, and you can ask for a human review of, and an explanation of, any decision.
Where your data lives
Data is stored and processed in Google Cloud in Tokyo, Japan (asia-northeast1). It is encrypted in transit (TLS/HTTPS) and at rest (AES-256).
Sub-processors & international transfers
We use a small set of service providers (hosting, AI, LinkedIn data, email, billing). Some are in the United States; for those transfers we rely on contracts requiring protection equivalent to Japan's APPI (plus standard contractual clauses) and your consent. We notify customers before adding a sub-processor that handles personal data.
Your rights
- Access & portability — candidates can download their data from the portal (Profile → "Download my data").
- Correction — edit your profile, or contact us.
- Deletion / cessation of use — request erasure from the portal (Profile → "Request data deletion"); we review and confirm.
- Email talent@valuecreate.net for any request.
Retention
We keep candidate data for up to 3 years of inactivity, then delete it unless you ask us to keep it. When we delete a candidate, we wipe identifying data and keep only de-identified statistics.
Security
Access is role-based with authentication and least-privilege controls; we log access to personal data, rate-limit our APIs, and keep secrets in a managed secret store. We are working toward SOC 2 Type II and ISO 27001 / 27701; we will publish those attestations here once obtained.
Data breaches
If a breach affecting your data occurs, we will notify Japan's Personal Information Protection Commission and affected individuals as required by APPI (and, for EU/UK data, within 72 hours under the GDPR).
Contact
Value Create Inc. (株式会社バリュークリエイト) · talent@valuecreate.net