Trust & Privacy
How Anh collects, uses, and protects personal data. Last updated 2026-08-10.
1. Who we are
Anh (“we”) provides a Big Five (OCEAN) personality assessment and related team-development and recruiting tools. Our role depends on why the data is processed. Contact us at info@goanh.com.
| Purpose | Roles and what happens |
|---|---|
| Account and public test | Anh is the controller. We provide your account, score a test you choose to take, show your result and let you save, share or delete it. |
| Recruiting for an organisation | The hiring organisation is the controller and Anh is its processor. The organisation decides the recruiting purpose and lawful basis. Anh processes applications, assessments, notes and scorecards on its behalf. |
| Product norms and reliability | Anh is the controller. We pool eligible test results to calculate percentiles and internal reliability figures. Results created through an employer's assessment stage are excluded. A result that a person chooses to share through the post-hire team handoff remains eligible. |
| Anonymous talent marketplace | Anh is the controller. If a person separately opts in, we operate the cross-customer marketplace and define the weighting used to match anonymous profiles with roles. Identity and contact details remain hidden until the person approves a specific contact request. |
| Post-hire team handoff | Anh is the controller. The person decides for themselves whether to share their work-style profile with the named team through a separate consent flow. |
| Marketplace placement billing | Anh is the controller. If a marketplace introduction leads to a hire, we record the organisation, person, hire date and agreed flat fee so we can administer and invoice that fee. We rely on legitimate interests to document and collect the fee. The placement record remains after the candidate record is anonymised, but no longer identifies the person. |
2. What we collect
- Anonymous assessments. By default the test is anonymous. We store only your answers, computed scores, and percentiles - no name, email, or account is required.
- Accounts (optional). If you create an account: your email, display name, a securely hashed password, and session tokens. If you sign in with Google, we receive your email address and name from Google to create or match your account.
- Recruiting candidates. When an organisation invites you to apply or assess, we process your name, email, optionally your phone number and an uploaded CV/resume file, a record of when you confirmed that you had been informed, assessment results, and any interview notes or scorecards the organisation adds.
- External ATS candidates. An organisation may send candidate data to Anh from its own ATS through the inbound API. We store the name, email, assessment request and the organisation's own reference ID for that person as recruiting data on its behalf.
- AI coaching (optional). If you use Anh Coach or Advisor, your Big Five scores and the questions you type are sent to our AI provider to generate a response. We do not use these conversations to train models.
- Candidate profiles & talent marketplace (optional). If you create a candidate profile: your headline, summary, skills, experience entries, location, and work preference. If you import a CV, its text is processed once by an AI model to prefill these fields and is not stored - only the fields you confirm are saved. Listing on the marketplace is a separate, explicit opt-in and is anonymous by default: employers see your work style, skills, role titles and location, but never your name or contact details until you approve a specific contact request. You can change visibility or delete the profile at any time.
- Payments. Stripe handles assessment-credit purchases by organisations and one-time premium AI or PDF purchases by individuals. Anh also issues employer invoices for flat marketplace placement fees. We do not receive card details. We store payment status, assessment-credit balances and the records needed to administer purchases and invoices.
- Technical. Basic request logs needed to run and secure the service. We do not run advertising or cross-site tracking.
3. Why we process it (legal bases)
- Recruiting. The hiring organisation, as controller, decides its lawful basis. The application and assessment confirmations record that the candidate was informed; they do not state that consent is the organisation's lawful basis. Ask the hiring organisation about its purpose, lawful basis or use of your recruiting data.
- Consent (Art. 6(1)(a)) - where you choose to take and store a public test, join the anonymous talent marketplace, or share a profile through the post-hire team handoff. You may withdraw consent at any time.
- Contract (Art. 6(1)(b)) - to provide an account or organisation workspace you signed up for.
- Legitimate interests (Art. 6(1)(f)) - to keep the service secure and working, balanced against your rights.
4. No automated decisions
Anh does not make automated hiring or rejection decisions. Assessment scores are decision support only - a human always reviews and decides (Art. 22). Benchmarks and fit views are guidance, never an automatic filter.
An employer may use AI to summarize an assessment, compare assessed applicants for human review, prepare interview questions, compare a person with a team, or draft outreach. The relevant factors are Big Five work-style scores, an employer-defined role benchmark and, for talent matching, skills and experience the person chose to share. These outputs are advisory. Candidate status pages provide a direct way to contest a result or an AI-assisted decision. While a contestation is open, that result is excluded from AI actions, matching and norms.
Anh is the provider of the AI system. A customer using it in recruitment is the deployer and remains responsible for its hiring process and decisions. Anh's MCP connection exposes aggregate role and team information only. It exposes no tool that ranks, recommends, hires or rejects a person, and no individual personality profile.
5. Sharing & processors
We do not sell personal data. Recruiting data is visible only to authorised members of the hiring organisation. We use a small number of processors, strictly to run the service and under data-processing agreements:
- Cloudflare - hosting, database, and the AI models behind Anh Coach/Advisor.
- Resend - to send transactional email (e.g. your results link, application updates).
- Stripe - to process purchases and employer invoices (card data goes directly to Stripe).
- Google - if you choose “Sign in with Google”, to verify your identity.
- Cloudflare Turnstile - the anti-bot check on sign-up and on public application forms. Your IP address is sent to Cloudflare for that check.
Fonts are self-hosted, so loading a page does not disclose your IP address to a font CDN.
6. Retention
Anonymous results persist until deleted via their delete link. When you delete an account, its results are kept and detached unless you also choose to delete them. Organisations set a candidate-data retention period; when it lapses, candidate personal data is automatically anonymised.
7. International transfers
Some of our processors (Cloudflare, Stripe, Resend, Google) are US-based, so data may be processed outside your region. Where that happens we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
8. Security
Passwords are hashed, sessions are token-based and revocable, access to organisation data is role-restricted, and administrative actions are audit-logged.
9. Changes & contact
We will update this notice as the product evolves and revise the date above. Questions or requests: info@goanh.com. You also have the right to lodge a complaint with your local data-protection authority.