Privacy Policy

Effective date: January 3, 2026
‍Last updated: August 11, 2026

For Education & Institutional Privacy Policy [click here]
For Education Security & Privacy [click here]

This Privacy Policy explains how Resso Group Inc., referred to as Resso, we, us, or our, collects, uses, discloses, retains, and protects personal information when people use the Resso website, applications, artificial intelligence features, APIs, integrations, and related products and services, collectively the Services.

1. Scope

This Policy applies to individual and job-seeker accounts, professional and personal-development accounts, Business Customer users, HR Customers, recruiters, Candidates, outplacement participants, website visitors, and people who communicate with Resso for sales, support, partnerships, or other business purposes.

Education Accounts

If you access Resso through a school, school board, college, university, or another educational institution, or use an account designated as an education account, the Resso Education Terms and Policies also apply.

If this Policy conflicts with the Education Terms and Policies regarding an education account, student information, or institution-managed Services, the Education Terms and Policies control.

Resso does not use student personal information or Education Customer confidential information to train general-purpose AI models or for advertising.

2. Resso's Privacy Role

Individual and Job-Seeker Accounts

Resso generally determines the purposes and means of processing personal information used to provide individual, professional, career, and job-search Services, subject to applicable law.

Business Accounts

For information processed at a Business Customer's direction, Resso may act as a processor or service provider for that customer. Resso may separately determine limited purposes for account administration, billing, security, reliability, legal compliance, and other activities described in this Policy.

HR and Candidate Pre-Screening

When an HR Customer invites a Candidate to complete a structured interview, assessment, practice activity, or hiring-related workflow, Resso generally processes Candidate responses and customer-configured assessment information on behalf of that HR Customer.

The HR Customer determines the hiring purpose, role requirements, assessment criteria, authorized reviewers, retention instructions, and final employment decision. Resso may separately process limited information for security, fraud prevention, service reliability, billing, support, legal compliance, and other purposes described in this Policy.

Education Accounts

Resso processes Education Customer information and student information as described in the applicable education agreement and Resso Education Terms and Policies.

Website, Marketing, Sales, and Support

Resso generally determines the purposes and means of processing information collected through its public website, marketing, sales, partnership, and support activities.

3. Information We Collect

3.1 Account and Identity Information

We may collect names, email addresses, usernames, account identifiers, authentication information, organization, role, department, program, language, profile image, preferences, and identity-provider or single sign-on information.

3.2 Profile, Career, and Professional Information

We may collect employment history, education, training, skills, certifications, achievements, career goals, interests, job preferences, target roles, industries, locations, resumes, CVs, cover letters, professional profiles, and information included in submitted documents or forms.

3.3 Conversation and Practice Information

We may collect:

prompts and questions;
typed or spoken responses;
audio and video input, including recordings created, saved, or shared through supported features;
sharing links, access permissions, and activity associated with shared recordings;
transcripts;
scenario content and instructions;
generated responses and AI outputs;
coaching, feedback, scores, and recommendations;
attempt history, completion status, and progress information; and
improvement reports and learning plans.

Resso does not ordinarily store video recordings of practice sessions unless the applicable feature requires recording or the user, Customer, or authorized account administrator chooses to create, save, or share a recording.

In certain situations, Resso may collect and store video or audio recordings. For example, a user may choose to record an interview or practice session and share it with an employer, recruiter, hiring team, educator, coach, or another authorized recipient through a shareable link.

When a recording is created or shared, Resso may process and store:

the video or audio recording;
the recording’s transcript;
questions, prompts, and responses associated with the session;
feedback, scores, reports, and other session results;
the recording date and technical information;
the identity or account information of the person who created or shared the recording;
sharing permissions, link settings, access activity, and related security information; and
any title, description, job information, or other content associated with the shared recording.

Anyone with access to a shareable link may be able to view the recording and related information, depending on the sharing permissions selected. Users are responsible for sharing recordings only with intended and authorized recipients and for managing or disabling available sharing links when access is no longer required.

No video stored by default. Resso does not ordinarily store video from practice sessions. Video may be stored when you or your organization intentionally enables a recording feature, such as creating an interview recording to share through a link.

Resso may retain a recording for as long as the user or Customer keeps it available, for the period selected through applicable account or organization settings, or as otherwise described in the Data Retention section of this Policy. Deleting a recording or disabling a sharing link may not remove copies previously downloaded, exported, or independently retained by a recipient.

Resso may also temporarily process audio or video when necessary to provide live conversational features, generate transcripts, provide feedback, maintain security, troubleshoot technical issues, or perform other functions requested by the user or Customer. Temporary processing does not necessarily mean that Resso permanently stores the original media.

Where required, Resso will provide an appropriate recording notice or request consent before recording begins. Business Customers, HR Customers, and other organizations using recording features are responsible for providing any additional notices, obtaining any additional consents, and establishing lawful retention and access settings required for their use of recordings.

3.4 Business and Organization Information

We may collect organization and business contact information, administrator information, team or program details, assigned activities, organization settings, feature selections, integrations, permissions, user activity, licences, usage allocations, invoices, purchase orders, billing contacts, and transaction records.

3.5 Candidate and Hiring Information

We may collect Candidate account details, role or opportunity information, invitation and completion status, interview questions, customer-selected criteria, typed or spoken responses, transcripts, scores, rationales, comparisons, reports, recruiter activity, reviewer notes, and accommodation information when an applicable workflow expressly supports it.

HR Customers should avoid submitting sensitive or protected information unless necessary, lawful, and expressly supported by the Service and agreement.

3.6 Job-Search and Resso Agent Information

We may collect job-search queries, filters, desired roles, industries, employers, locations, selected opportunities, career and learning goals, practice preferences, Agent conversation history, generated plans and recommendations, and interactions with job, learning, or practice results.

3.7 Technical, Device, and Usage Information

We may collect IP address, browser, device and operating-system information, device or session identifiers, login and authentication events, pages viewed, features used, clicks, navigation, timestamps, approximate location derived from IP address, diagnostics, security logs, cookies, and similar-technology information.

3.8 Communications and Feedback

We may collect information in support requests, sales communications, partnership communications, surveys, research participation, product feedback, event registrations, and other communications with Resso.

3.9 Information From Customers, Integrations, and Third Parties

We may receive information from Business, HR, and Education Customers; identity providers; applicant-tracking systems; learning-management systems; payment processors; productivity and communication systems; authorized integrations; job-information providers; and service providers supporting Resso.

4. How We Use Information

Resso may use personal information to:

create, authenticate, administer, and secure accounts;

provide AI conversations, practice activities, feedback, coaching, scoring, analytics, and reports;

generate resumes, cover letters, scenarios, learning activities, job suggestions, and improvement plans;

provide business training, candidate pre-screening, outplacement, and organization-management features;

display information to authorized administrators, recruiters, educators, managers, or reviewers;

personalize the Services and remember preferences and progress;

process subscriptions, screening credits, invoices, and transactions;

provide support and respond to requests;

monitor reliability, diagnose errors, and improve performance;

prevent fraud, abuse, unauthorized access, and security incidents;

analyze adoption, engagement, performance, and feature effectiveness;

conduct research, testing, quality assurance, AI evaluation, and service improvement, subject to applicable choices and restrictions;

communicate about Services, transactions, security, policies, and customer relationships;

manage sales, events, partnerships, and marketing preferences;

comply with legal obligations and lawful requests; and

establish, exercise, or defend legal rights.

Resso will not use personal information for a materially different purpose without providing any notice or obtaining any consent required by applicable law.

5. AI Processing and Product Improvement

Resso uses AI systems to provide conversations, content generation, coaching, scoring, recommendations, search assistance, and related features.

For non-Education accounts, Resso may use interaction information and service outputs to evaluate and improve the quality, safety, accuracy, reliability, and usefulness of the Services.

Depending on account type, jurisdiction, contractual terms, notices, consent, and privacy settings, this may include automated evaluation, authorized human review for quality or support, testing prompts and outputs, improving Resso workflows and scoring systems, and evaluating or fine-tuning models and systems controlled by or for Resso.

Resso will:

limit access to personnel and service providers with a business need;

apply reasonable minimization, filtering, de-identification, or aggregation where appropriate;

not use Education Customer information or student personal information for general-purpose AI training;

honour applicable Business and HR Customer settings restricting optional improvement uses; and

provide consent, opt-out, objection, deletion, or other mechanisms where required by law.

Resso may use de-identified or aggregated information that cannot reasonably be linked to a person for analytics, benchmarking, research, testing, product development, security, and service improvement. Resso will not attempt to re-identify de-identified information except to test its safeguards or as permitted by law.

6. Candidate and Pre-Screening Information

When an HR Customer invites a Candidate to use Resso, Resso processes Candidate information to provide the Services requested by that HR Customer. This may include administering interviews, recording completion, processing or transcribing responses, applying customer-selected criteria, generating scores or rationales, comparing results, and making reports available to authorized customer representatives.

The HR Customer determines the hiring purpose, role requirements, assessment criteria, authorized reviewers, and final employment decision. Candidates should review both this Policy and the notice provided by the HR Customer.

Unless otherwise disclosed and lawfully permitted, Resso will not use identifiable Candidate pre-screening responses to train general-purpose AI models or for unrelated advertising.

7. Scores, Recommendations, and Automated Processing

Resso may use automated systems to analyze responses and produce feedback, scores, comparisons, rankings, rationales, recommendations, or improvement plans.

These outputs may affect how an HR Customer organizes or reviews Candidate information. Outputs are not guaranteed to be complete, accurate, unbiased, or suitable as the sole basis for an employment decision.

Resso is a decision-support service. The HR Customer is responsible for human review and the final employment decision.

Where applicable law provides rights concerning automated decision-making, profiling, access, correction, objection, explanation, appeal, or human review, users may exercise those rights through the relevant HR Customer or the process described below.

8. How We Disclose Information

8.1 Customers and Authorized Organization Users

Depending on the account and activity, information may be available to organization administrators, educators, program administrators, managers, assigned reviewers, recruiters, hiring managers, talent teams, outplacement administrators, and other authorized customer users.

Available information may include account details, assigned activities, completion status, responses, transcripts, scores, feedback, reports, progress, and usage information, subject to the plan, settings, and agreement.

8.2 Service Providers and Subprocessors

Resso may use providers supporting cloud hosting, AI and model services, speech-to-text, text-to-speech, audio or avatar features, identity and single sign-on, ATS and learning integrations, payment processing, communications, customer support, analytics, diagnostics, security, fraud prevention, legal services, accounting, and professional advice.

These providers may process information only for authorized purposes and subject to applicable contracts and legal requirements.

Subprocessor list: Contact us for subprocessor list.

8.3 User-Directed Disclosures and Integrations

Resso may disclose information when a user or customer directs it, including through an authorized integration, export, sharing feature, or invitation workflow.

8.4 Legal, Security, and Rights Protection

Resso may disclose information where reasonably necessary to comply with law or legal process, protect rights and safety, investigate fraud or security incidents, enforce agreements, or establish and defend legal claims.

8.5 Corporate Transactions

Information may be disclosed as part of a proposed or completed merger, financing, acquisition, reorganization, sale of assets, insolvency, or similar transaction, subject to applicable confidentiality and legal requirements.

8.6 Sale, Sharing, and Integrations

Resso may integrate with third-party products, platforms, applications, and service providers to deliver, support, secure, personalize, analyze, and improve the Services and provide additional functionality.

These integrations may require Resso to disclose personal information to or receive personal information from third parties. When a third party processes information on Resso’s behalf, Resso seeks to require the third party to use the information only for authorized purposes and subject to applicable contractual, security, confidentiality, and legal obligations.

If a user or Customer chooses to enable a third-party integration, Resso may exchange information with that third party as necessary to provide the requested functionality. A third party acting independently may process information under its own privacy policy.

Resso does not sell personal information for money. However, certain disclosures may be considered a “sale” or “sharing” under applicable privacy laws even when no money is exchanged. If Resso participates in an activity that legally constitutes a sale or sharing, Resso will provide any notice, consent mechanism, or opt-out right required by applicable law.

9. Organization Privacy Settings

Certain Business and HR plans may allow authorized administrators to configure retention, access, visibility, feature availability, integrations, optional product-improvement uses, information sharing, and exports.

These settings apply only to the processing covered by the selected control. Resso may continue processing information where necessary to provide or secure the Services, maintain transaction or audit records, prevent misuse, provide support, or comply with legal obligations.

A settings change generally applies prospectively and may not remove information already included in de-identified datasets or records Resso is legally required to retain.

Organizations are responsible for selecting lawful settings and explaining applicable settings to users and Candidates where required.

10. Legal Bases for Processing

Where applicable law requires a legal basis, Resso may process personal information based on:

performance of a contract, including providing requested Services and managing accounts;

consent, where requested for a specific activity;

legitimate interests, including securing, operating, supporting, evaluating, and improving the Services where those interests are not overridden by individual rights;

legal obligations, including lawful requests and required records; and

protection of legal rights and safety, including fraud, misuse, and security prevention.

Where Resso processes information on behalf of a customer, the customer is responsible for identifying an appropriate legal basis for the processing it directs unless law provides otherwise.

11. Cookies and Similar Technologies

Resso and its providers may use cookies, local storage, pixels, software development kits, and similar technologies to keep users signed in, remember preferences, deliver functionality, secure the Services, measure use and performance, diagnose errors, and support analytics or marketing where permitted.

Users may manage available choices through Resso's cookie controls and browser settings.

Cookie preferences: [Insert link]

Resso should maintain a separate Cookie Notice identifying categories, providers, purposes, and durations.

12. Data Retention

Resso retains personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide and improve the Services, maintain account and transaction records, comply with Customer instructions, protect the security and integrity of the Services, prevent fraud and misuse, resolve disputes, enforce agreements, and comply with legal, regulatory, tax, accounting, and reporting obligations.

The applicable retention period may vary depending on:

the type, nature, and sensitivity of the information;
the purposes for which the information was collected or processed;
the features, Services, and integrations being used;
whether the account is an Individual, Business, HR, Candidate, or Education Account;
the duration of the account, subscription, Customer relationship, or applicable agreement;
Customer-selected retention, deletion, privacy, and organization settings;
whether information is needed to provide requested features, including saved and shared recordings;
legal, regulatory, contractual, tax, accounting, audit, and reporting requirements;
the time reasonably necessary to investigate security incidents, prevent fraud or misuse, resolve disputes, enforce agreements, or establish, exercise, or defend legal claims;
applicable limitation periods;
whether the user or Customer has requested deletion;
backup, disaster-recovery, and system-integrity requirements; and
whether the information has been aggregated or de-identified so that it is no longer reasonably associated with an identifiable person.

When personal information is no longer reasonably necessary for an identified purpose, Resso may delete it, de-identify it, aggregate it, or securely isolate it from further use, subject to applicable law, contractual obligations, technical limitations, and legitimate security or compliance requirements.

Deletion from active systems may not result in immediate deletion from backups, logs, disaster-recovery systems, or records that Resso must retain for legal, security, billing, audit, fraud-prevention, or dispute-resolution purposes. Information retained in those systems will remain protected and will be deleted, overwritten, de-identified, or isolated in accordance with Resso’s applicable retention and backup practices.

De-identified or aggregated information that cannot reasonably be linked to an identifiable person may be retained and used for analytics, research, benchmarking, security, testing, product development, artificial intelligence evaluation, and service improvement, subject to applicable law. Resso will not attempt to re-identify de-identified information except to test the effectiveness of its de-identification measures or as otherwise permitted by law

12.1. Saved and Shared Recordings

When a user or Customer chooses to record, save, or share a supported interview or practice session, Resso may retain the recording and related information for as long as the recording remains available through the account, shareable link, Customer workspace, or applicable organization settings.

The recording may be retained until:

the user or authorized Customer administrator deletes it;
the applicable sharing period or retention setting expires;
the account or Customer agreement ends;
Resso determines that the recording is no longer reasonably necessary to provide the requested feature; or
deletion is otherwise required by applicable law or contract.

Deleting a recording or disabling a sharing link may not delete copies previously downloaded, exported, or independently retained by an authorized recipient.

12.2 Business, HR, and Education Accounts

Business Customers, HR Customers, and Education Customers may be able to establish retention periods or deletion settings through their agreement, order form, account configuration, or organization-level privacy controls.

Where Resso processes personal information on behalf of a Customer, Resso may retain and delete that information according to the Customer’s documented instructions and the applicable agreement, subject to legal, security, backup, and technical requirements.

Users of an Organization Account should contact the organization that provided or manages the account for information about organization-selected retention settings.

12.3 Candidate and Pre-Screening Information

Candidate responses, transcripts, recordings, scores, rationales, reports, reviewer activity, and related pre-screening information may be retained according to the instructions and settings of the HR Customer that invited the Candidate, the applicable Customer agreement, and Resso’s legal and security requirements.

HR Customers are responsible for selecting retention periods that are appropriate for their hiring purposes and applicable employment, human rights, privacy, accessibility, and record-keeping obligations.

Candidates may contact the HR Customer that invited them or Resso to request information about applicable retention and deletion practices.

13. Security

Resso uses administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, and disclosure.

Safeguards may include access controls, authentication, encryption, logging, monitoring, secure development, vendor controls, and incident-response procedures, as appropriate.

No security measure is perfect, and Resso cannot guarantee absolute security. Users and customers are responsible for protecting their credentials, devices, integrations, and authorized-user access.

Security contact: contact (--at--) resso.ai

14. Cross-Border Processing

Resso and its service providers may process personal information in countries or regions other than where the user resides. Information processed in another country may be subject to that country's laws and accessible to courts, law enforcement, national-security authorities, or regulators in accordance with local law.

Resso uses contractual, technical, organizational, and other safeguards required by applicable law.

Principal hosting locations

Material processing countries or regions

Applicable transfer safeguards

Process for requesting additional information

15. Your Privacy Rights

Depending on location and applicable law, a person may have the right to:

request access to personal information;

obtain information about categories, sources, purposes, and recipients;

correct inaccurate information;

request deletion;

withdraw consent where processing relies on consent;

object to or restrict certain processing;

request portability of certain information;

opt out of sale or sharing where applicable;

limit certain uses of sensitive personal information where applicable;

opt out of certain profiling or automated-decision uses where applicable;

request information about or human review of a covered automated decision;

appeal a denied request where applicable;

receive equal service and not be discriminated against for exercising rights; and

complain to an appropriate privacy regulator.

Rights may be subject to identity verification, legal exceptions, and the role in which Resso processes the information.

Organization Account Requests

If Resso processes information on behalf of a Business, HR, or Education Customer, Resso may direct the request to that customer or assist it in responding.

Candidates should generally contact the HR Customer that invited them about hiring criteria, recruiter decisions, or customer-controlled Candidate records. Candidates may also contact Resso.

Submit a Request

Privacy request form: www.resso.ai/contact

Email: contact (--at--) resso.ai

Mailing address: 5151 New St. #101, Burlington, ON L7L 1V3 Canada

Resso may take reasonable steps to verify identity and authority. Authorized agents may submit requests where permitted and may be required to prove their authority.

16. Marketing Communications

Resso may send service, security, account, billing, and transactional communications necessary for the Services.

Where permitted, Resso may also send product, event, sales, or marketing communications. Recipients may unsubscribe through the message or by contacting Resso. Unsubscribing from marketing does not prevent necessary service or transaction messages.

17. Children and Minors

The general Services are not intended for children below the minimum age legally permitted for independent use in their jurisdiction unless access is provided through an authorized Education Customer, parent, guardian, or another legally permitted arrangement.

Education-managed student use is governed by the Resso Education Terms and Policies and applicable education agreement.

If Resso learns that information was collected from a child through the general Services without required authorization, Resso will take appropriate steps consistent with applicable law.

18. Third-Party Links and Services

The Services may contain links to third-party websites, job listings, tools, integrations, or content. This Policy does not govern independent third-party privacy practices. Review third-party notices before providing information or using their services.

19. Changes to This Policy

Resso may update this Policy to reflect changes to the Services, law, technology, vendors, or business practices. Resso will post the updated Policy and revise the Last updated date. Where required, Resso will provide additional notice or obtain consent before a material change takes effect.

20. Contact Resso

Privacy Officer

Resso Group Inc

5151 New St. Unit 101
Burlington, ON
L7L 1V3 Canada

Email: contact (--at--) resso.ai

Website: Resso website

Individuals may also have the right to contact their local privacy or data-protection regulator.