JEDAH
← Back
Privacy Policy
Effective date: June 2026 — Last updated: June 30, 2026

1. Who we are

Jedah is operated by Twenty Holdings, Inc. ("Twenty Holdings," "we," "us," or "our"), a Delaware corporation. We provide an AI-assisted interview platform for hiring teams. Our primary contact address is privacy@jedah.ai.

2. What data we collect

We collect the minimum data necessary to provide the platform:

  • Account data: name, email address, password hash (bcrypt), workspace affiliation, role.
  • Interview data: audio transcripts (text only, no raw audio retained after transcription), rubric scores, panelist notes, candidate profiles entered by your team.
  • Usage data: page views, API calls, error logs. We do not use third-party analytics trackers.
  • Billing data: Stripe customer and subscription IDs. Card numbers are never stored on our servers.
  • Engagement metrics (Zoom panel only): gaze direction and on-camera flags from MediaPipe. No raw video is captured or retained.

3. How we use your data

  • To provide, operate, and improve the Jedah platform.
  • To send transactional emails (interview confirmations, team invitations, verification links).
  • To generate AI-assisted scoring and insights using Anthropic's Claude API. Prompts sent to Claude include transcript excerpts and rubric criteria but never personally identifiable information beyond what your team entered.
  • To comply with legal obligations.

4. AI and automated decision-making

Jedah uses AI to assist interviewers — not to replace human judgment. Scores and recommendations generated by the platform are always presented to a human interviewer for review. Jedah does not make final hiring decisions autonomously. Jurisdictions with specific AI employment law requirements (e.g. NYC Local Law 144) are handled per applicable regulations.

5. Subprocessors

  • Anthropic (claude.anthropic.com) — AI inference. Prompts are not used to train Anthropic models under our API agreement.
  • Deepgram / OpenAI Whisper — Audio transcription. Audio is processed in real-time; we do not retain audio files.
  • Stripe — Payment processing.
  • Resend — Transactional email delivery.
  • Fly.io — Cloud hosting (US-East region by default).

6. Data retention

We retain candidate data for the duration of your active recruiting relationship plus a configurable retention period. The default retention period is 90 days from a candidate's last activity. After 90 days without activity, inactive unhired candidates are automatically moved to an archived state where they are no longer visible in the active candidates list but remain recoverable by workspace admins. After a further 30 days in the archived state (120 days total), candidate records are permanently deleted.

  • Configurable per workspace: Workspace administrators may configure the archive window from 30 days to 365 days, or disable auto-archiving entirely, subject to their subscription plan.
  • Exemptions: Hired candidates are retained indefinitely for performance correlation. Candidates in active pipeline stages (interviewing, offered, etc.) are not auto-archived. Admins may bookmark individual candidates with a "Keep" flag to exempt them for up to one year.
  • Anonymized aggregates: After a candidate's personal data is deleted, anonymized statistical information (interview count, role family, anonymized outcome) may be retained for product-improvement and legal compliance purposes.

Workspace account data is retained for the life of the workspace plus 90 days after account cancellation, then permanently deleted.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, or to object to or restrict processing. To exercise any of these rights, email privacy@jedah.ai. We will respond within 30 days.

Right to erasure (GDPR Art. 17 / CCPA): Candidates may request immediate deletion of their personal data via the unsubscribe link in any email Jedah has sent them. Verified deletion requests are reviewed by the workspace administrator and processed within 30 days. On approval, all personally identifying information is removed from active systems. A deletion-confirmation email is sent to the candidate. Anonymized statistical aggregates may be retained for legal compliance.

California residents: please see our Terms of Service for CCPA disclosures. EU/EEA residents: Jedah is the data controller for workspace admin data; your organization is the controller for candidate data processed on its behalf.

8. Cookies

We use a single httpOnly session cookie (jedah_session) to keep you signed in. We do not use advertising cookies, pixel trackers, or cross-site tracking. No cookie consent is required for strictly necessary cookies under GDPR Recital 25.

9. Security

All data is encrypted in transit (TLS 1.2+). Passwords are hashed with bcrypt (cost factor 12). HMAC-signed tokens are used for all email links. We perform access control checks on every API route. If you discover a security issue, please disclose it responsibly to security@jedah.ai.

10. Changes to this policy

We will notify workspace admins by email at least 14 days before material changes take effect. Continued use after the effective date constitutes acceptance.

11. Chrome browser extension

Jedah distributes a Chrome browser extension that lets you add LinkedIn profiles to your Jedah workspace as candidate records. The extension is published on the Chrome Web Store under the name "Jedah — Add to workspace."

When the extension collects data. Only when you explicitly click the Jedah toolbar icon or the "Add to Jedah" button injected on a LinkedIn profile. The extension does not read pages in the background, does not monitor your browsing, and does not transmit anything until you take a direct action.

What the extension collects. The name, headline, current role, and work history visible on the LinkedIn profile you are actively viewing at the moment of click. The extension never reads other tabs, other websites, or any LinkedIn page you did not actively open.

Where the data goes. Only to the Jedah workspace you are signed into at app.jedah.ai. The extension authenticates via your existing app.jedah.ai session cookie, set via standard HTTPS by the Jedah web app. Imported candidates appear in your workspace's candidate list immediately. No data is sent to any third party.

What the extension stores locally. chrome.storage.local is used to remember your last-selected Jedah workspace ID and your authenticated session preferences. No candidate data, no LinkedIn data, and no personal identifiers are stored in chrome.storage.local. Clearing your Chrome storage signs you out of the extension; it does not delete any data already imported to your Jedah workspace.

Permissions explained.

  • activeTab — read the LinkedIn page you are currently viewing, only when you click the extension. Required to extract profile data on demand.
  • Host permissions (linkedin.com, app.jedah.ai) — read profile data from LinkedIn; send imports to your Jedah workspace. Both are required for the single advertised feature.
  • storage — remember which workspace you imported to last, so you don't have to re-select on every import.
  • No remote code — the extension does not download or execute code at runtime. All scripts ship inside the extension package as reviewed by the Chrome Web Store.

To remove the extension and any local storage, uninstall it from chrome://extensions. To remove candidates already imported via the extension, sign into app.jedah.ai and delete them from the candidates list — the extension itself does not retain candidate data outside your workspace.

12. Contact

Twenty Holdings, Inc.
Privacy inquiries: privacy@jedah.ai
Support: support@jedah.ai