Trust & Privacy
How Anh collects, uses, and protects personal data. Last updated 2026-09-02.
1. Who we are
Anh (“we”) provides a Big Five (OCEAN) personality assessment and related team-development and recruiting tools. Our role depends on why the data is processed. Contact us at info@goanh.com.
| Purpose | Roles and what happens |
|---|---|
| Account and public test | Anh is the controller. We provide your account, score a test you choose to take, show your result and let you save, share or delete it. |
| Recruiting for an organisation | The hiring organisation is the controller and Anh is its processor. The organisation decides the recruiting purpose and lawful basis. Anh processes applications, assessments, notes and scorecards on its behalf. |
| Product norms and reliability | Anh is the controller. We pool eligible test results to calculate percentiles and internal reliability figures. Results created through an employer's assessment stage are excluded. A result that a person chooses to share through the post-hire team handoff remains eligible. |
| Anonymous talent marketplace | Anh is the controller. If a person separately opts in, we operate the cross-customer marketplace and define the weighting used to match anonymous profiles with roles. Identity and contact details remain hidden until the person approves a specific contact request. |
| Post-hire team handoff | Anh is the controller. The person decides for themselves whether to share their work-style profile with the named team through a separate consent flow. |
| Marketplace placement billing | Anh is the controller. If a marketplace introduction leads to a hire, we record the organisation, person, hire date and agreed flat fee so we can administer and invoice that fee. We rely on legitimate interests to document and collect the fee. The placement record remains after the candidate record is anonymised, but no longer identifies the person. |
2. What we collect
- Anonymous assessments. By default the test is anonymous. We store only your answers, computed scores, and percentiles - no name, email, or account is required.
- Accounts (optional). If you create an account: your email, display name, a securely hashed password, and session tokens. If you sign in with Google, we receive your email address and name from Google to create or match your account.
- Recruiting candidates. When an organisation invites you to apply or assess, we process your name, email, optionally your phone number and an uploaded CV/resume file, a record of when you confirmed that you had been informed, assessment results, and any interview notes or scorecards the organisation adds.
- External ATS candidates. An organisation may send candidate data to Anh from its own ATS through the inbound API. We store the name, email, assessment request and the organisation's own reference ID for that person as recruiting data on its behalf.
- AI coaching (optional). If you use Anh Coach or Advisor, your Big Five scores and the questions you type are sent to our AI provider to generate a response. We do not use these conversations to train models.
- Cover letters (optional). If you use the cover-letter generator, the job ad and CV text you provide - and, if you pick one, your Big Five scores - are processed once by an AI model to draft the letter and are not stored; your scores shape the writing style only and never appear in the letter. Only the finished letter and a short title are saved to your account, where you can edit or delete them at any time. They are included in your data export and deleted with your account.
- Candidate profiles & talent marketplace (optional). If you create a candidate profile: your headline, summary, skills, experience entries, location, and work preference. If you import a CV, its text is processed once by an AI model to prefill these fields and is not stored - only the fields you confirm are saved. Listing on the marketplace is a separate, explicit opt-in and is anonymous by default: employers see your work style, skills, role titles and location, but never your name or contact details until you approve a specific contact request. You can change visibility or delete the profile at any time.
- Payments. Stripe handles organisation subscriptions and assessment-credit purchases, and individual purchases such as the Anh Plus and cover-letter subscriptions and one-time PDF exports. Anh also issues employer invoices for flat marketplace placement fees. We do not receive card details. We store payment status, subscription state, credit balances and the records needed to administer purchases and invoices.
- Technical. Basic request logs needed to run and secure the service. We do not run advertising or cross-site tracking.
3. Why we process it (legal bases)
- Recruiting. The hiring organisation, as controller, decides its lawful basis. The application and assessment confirmations record that the candidate was informed; they do not state that consent is the organisation's lawful basis. Ask the hiring organisation about its purpose, lawful basis or use of your recruiting data.
- Consent (Art. 6(1)(a)) - where you choose to take and store a public test, join the anonymous talent marketplace, or share a profile through the post-hire team handoff. You may withdraw consent at any time.
- Contract (Art. 6(1)(b)) - to provide an account or organisation workspace you signed up for.
- Legitimate interests (Art. 6(1)(f)) - to keep the service secure and working, balanced against your rights.
4. No automated decisions
Anh does not make automated hiring or rejection decisions. Assessment scores are decision support only - a human always reviews and decides (Art. 22). Benchmarks and fit views are guidance, never an automatic filter.
An employer may use AI to summarize an assessment, compare assessed applicants for human review, prepare interview questions, compare a person with a team, or draft outreach. The relevant factors are Big Five work-style scores, an employer-defined role benchmark and, for talent matching, skills and experience the person chose to share. These outputs are advisory. Candidate status pages provide a direct way to contest a result or an AI-assisted decision. While a contestation is open, that result is excluded from AI actions, matching and norms.
Anh is the provider of the AI system. A customer using it in recruitment is the deployer and remains responsible for its hiring process and decisions. Anh's MCP connection exposes aggregate role and team information only. It exposes no tool that ranks, recommends, hires or rejects a person, and no individual personality profile.
5. Sharing & processors
We do not sell personal data. Recruiting data is visible only to authorised members of the hiring organisation. We use a small number of processors, strictly to run the service and under data-processing agreements:
- Cloudflare - hosting, database, and the AI models behind Anh Coach/Advisor and the cover-letter generator.
- Resend - to send transactional email (e.g. your results link, application updates).
- Stripe - to process purchases and employer invoices (card data goes directly to Stripe).
- Google - if you choose “Sign in with Google”, to verify your identity.
- Cloudflare Turnstile - the anti-bot check on sign-up and on public application forms. Your IP address is sent to Cloudflare for that check.
Anh uses your device's built-in system fonts and loads nothing from a font CDN, so loading a page does not disclose your IP address to one.
6. Retention
We keep personal data only for as long as its purpose requires. The periods below are the ones the service actually enforces: an expired link, session or invitation stops working immediately, and its record is removed by a daily retention job.
| Data | Retention period |
|---|---|
| Test results | Until you delete them via their delete link. When you delete an account you choose whether its results are deleted too or kept, detached from any identity. |
| Candidate data held for an organisation | The retention period the organisation sets. When it lapses, the candidate's personal data is automatically anonymised. |
| Sign-in sessions | 30 days from sign-in. |
| Email verification links | 7 days. |
| Password reset links | Valid for 1 hour; the record is removed after 1 day. |
| Organisation invitations | 14 days; an invitation can only be used once. |
| Team handoff invitations | 14 days. |
| Marketplace contact requests | 21 days without an answer, then the request expires. |
| Anonymous AI usage counters (pseudonymised IP) | 12 months without use. |
| Purchased top-up packs | 6 months after the subscription they belong to is cancelled; packs on a live subscription do not expire. |
| Email sending counters | 1 day. |
For candidate data it is the hiring organisation that, as controller, sets the period and can delete a candidate earlier. Placement records are kept to administer the fee as described in section 1, but no longer identify the person once the candidate record has been anonymised.
7. International transfers
Some of our processors (Cloudflare, Stripe, Resend, Google) are US-based, so data may be processed outside your region. Where that happens we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
8. Security
Passwords are hashed, sessions are token-based and revocable, access to organisation data is role-restricted, and administrative actions are audit-logged.
9. Changes & contact
We will update this notice as the product evolves and revise the date above. Questions or requests: info@goanh.com. You also have the right to lodge a complaint with your local data-protection authority.