Privacy policy
What data Skosh processes, why it does, & the choices you have.
Last updated: 30 September 2026
Who we are
Skosh is an AI sourcer for talent teams, provided by the company below. In this policy, “Skosh”, “we” & “us” mean that company.
- Company
- Skosh
- Registered address
- Bengaluru, India
- Country
- India
- Privacy contact
- support@getskosh.com
Our 2 roles
Skosh serves businesses. The business that uses Skosh is the customer.
- For candidate data, the customer is the controller: it decides why & how the data is used. Skosh processes that data on the customer's instructions, as its processor, under the Data Processing Addendum.
- For account data, & for waitlist & sales requests, Skosh is the controller.
What Skosh processes
Account data
Your name, work email, the Google or Microsoft account you sign in with, & your role in your organisation.
Connected-account data
Data from the accounts a recruiter chooses to connect: the emails Skosh sends from the recruiter's mailbox & the replies to them, calendar events for bookings & the tracking sheet. Google user data below says exactly what Skosh asks for.
Candidate data
Data that the recruiting tools & accounts the recruiter works in or connects show to Skosh, that the recruiter imports, or that Skosh gets for a role's search from public sources, people-data providers & contact data providers: name, profile details such as a headline, work history (current & past roles), location, profile links, contact details, messages exchanged, screening notes & verdicts.
Waitlist & sales requests
When you join the waitlist, book a demo or contact sales: your email, & the name, company, role, team size & message you choose to add, plus which of those forms you used & the page of this site you came from. Your IP address may be used briefly to limit repeated tries & is not stored. A human check service runs on these forms & reads signals from your browser & your IP address to tell people from bots. Skosh uses these details only to contact you about Skosh, & keeps them until you ask for their removal or Skosh opens to you.
Why Skosh processes it
Skosh uses candidate & connected-account data, on the customer's instructions, to:
- screen candidates against a role's criteria,
- draft messages & replies,
- send what a person approves, or what the template & rules a person approved allow,
- mark a call booked when the recruiter's own calendar shows it,
- report on the work.
Skosh uses account data to sign you in, apply your role, show you your approval cards & send you notifications. Skosh is the tool your team uses to reach people. We don't sell data, show ads or build our own database of people. Our AI providers only process your data to answer Sparky, delete it, & can't train on it. Sparky learns your team's way of working; we don't train AI models on your data.
Legal bases
Where data protection law such as the GDPR applies, Skosh relies on these legal bases for the data it controls:
- Contract: to provide Skosh to you & your organisation under our Terms of service.
- Legitimate interests: to run, secure & support Skosh, where your rights do not outweigh those interests.
- Consent, where you give it, such as when you connect an account, join the waitlist or contact sales. You can withdraw it at any time; this does not affect processing that happened before. To withdraw it for a waitlist or sales request, email support@getskosh.com.
- Legal obligation: where the law requires us to keep or share data.
For candidate data, the customer is the controller & chooses its own legal basis.
Google user data
When a recruiter connects a Google account, Skosh asks for these permissions & uses each one only for this:
- Gmail read-only: to read the replies to the emails Skosh sent from the recruiter's mailbox, in those emails' own conversations only, & to check whether 1 of them bounced. Skosh reads no other mail.
- Gmail send: to send the recruiter's own emails from their mailbox: the outreach emails a person approved, or that a template a person approved for the role sends hands-free, the replies a person sends from the Inbox, or that a Replies template a person approved for the role sends hands-free, the booking invite a person approved, or that the role's approved Booking invite template sends, & up to 2 reminders before a booked call from templates a person approved for the role.
- Google Calendar: to see when a person Skosh invited books, moves or cancels a call: Skosh reads the events on the recruiter's own calendar & never creates or changes 1. From each event that changed, Skosh reads its times, whether it repeats, its Google Meet link & its guests' email addresses & answers to the invite, & compares the guests with the people it invited. It never keeps a guest list. Google grants this permission as read & write; Skosh uses only the read. Google's permission covers the person's whole calendar.
- Google Sheets & Drive file access, only when the team chooses to keep a copy in Google Sheets: to create & update the tracking sheets Skosh makes, & to read a sheet the recruiter asks Skosh to import. Google's permission covers every sheet the person can open. Drive access covers only the files Skosh creates.
Skosh does not use Google user data for advertising, does not sell it, & shares it only as needed to provide the service or as required by law.
Skosh's use & transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who receives data
Skosh shares data with these kinds of services, to run Skosh:
- hosting & the database behind the web console,
- AI model providers, on the terms above,
- email delivery, for the console's emails,
- error reports, with personal data removed first,
- product analytics, with no cookies & no candidate data,
- billing & payments,
- the people-data, contact data & public sources Sparky searches, which receive a role's search words & the people it looks up,
- a human check on the site's forms, a logo service & a font service, which receive a visitor's IP address,
- the tools a company connects itself, such as its ATS, Google account or Notion.
Customers can ask for the full list: support@getskosh.com.
Where data is stored
The workspace data behind the web console is stored with Skosh's hosting provider in: EU, Frankfurt.
How long data is kept
Data is kept while the customer uses Skosh. It is deleted or returned when the customer asks, or when the account ends. A candidate's data can be erased on request. Waitlist & sales requests are kept until you ask for their removal or Skosh opens to you.
International transfers
The outside services Skosh uses may process data in other countries, each under its own safeguards. Where the law requires it, transfers rely on appropriate safeguards, such as standard contractual clauses.
Your rights
You can ask to access, correct or erase your data, object to how it is processed, or receive a copy in a portable format.
- Candidates: Skosh processes your data for the recruiting company that holds it. Contact that company; it can have Skosh erase your data.
- Account holders: email support@getskosh.com.
- Not to be contacted again: use Stop messages. It works at once, for every company that uses Skosh if you ask. The form runs the human check, & a keyed hash of your connection's address, never the address, limits repeated tries. Or reply to the recruiter's email & say so: no follow-up goes after a reply.
If you think your data has been handled wrongly, you can complain to the data protection authority where you live or work. We would like the chance to put it right first, so please contact us.
Children
Skosh is a service for businesses & is not meant for anyone under 18.
Changes to this policy
We may update this policy as Skosh changes. The date at the top shows when it last changed.
Contact
- Privacy questions
- support@getskosh.com
- Anything else
- support@getskosh.com
- Company
- Skosh
- Registered address
- Bengaluru, India