Privacy Policy

Version 1. In effect from .

1. Who We Are

Agentic Blue is a recruiting platform operated by BlacNox Sdn. Bhd. (registration number 202501033093 / 1634503-H), a company incorporated in Malaysia ("Agentic Blue", "we", "us" or "our"). You can contact us at hello@agenticblue.ai.

2. Scope of This Policy

This policy explains how we handle personal data for which we are the data controller: the people who use Agentic Blue for their work, such as recruiters and hiring managers ("Users"); visitors to agenticblue.ai; people who contact us; members of the Agentic Blue Talent Network; and people whose public profile details are kept in Shared Profiles.

Candidates. When you apply for a job through Agentic Blue, or a recruiter finds you through Agentic Blue's candidate search, the organisation that is recruiting is the data controller of your data and handles it under its own privacy notice. We process your data on its behalf as its data processor. Requests to access, correct or delete that data should be sent to the recruiting organisation. If you contact us, we will forward your request to it. If you ask not to appear in Agentic Blue's search results, we will act on that request.

3. Information We Collect

Account information: your name, work email address, company, job title and login details, or the name and email address Google shares with us when you sign in with Google, and the seats and features of your workspace.

Usage information: how you use the Services, such as pages viewed, actions taken, page and AI response times, and the AI searches you use.

Searches before sign-up: anything you type into the search box on our home page before you create an account.

Website analytics: pages visited, measured by Cloudflare Web Analytics without cookies and without identifying you.

Communications: the content and contact details of messages you send us, and the business contact details of customers, suppliers and partners.

4. How We Use Information

We use personal data to provide and operate the Services and your workspace, to run searches you start before signing up, to secure, bill and improve the Services, to understand which pages are used, to respond to your messages, and to manage our relationships with customers, suppliers and partners. We do not sell personal data, and we do not use it for advertising.

We process personal data with your consent, which you give when you create an account, use the Services or contact us, or where the law permits processing without consent, for example to perform our contract with your organisation or to comply with a legal obligation.

5. Cookies and Similar Technologies

We use essential cookies to keep you signed in; the Services cannot work without them. The Services store preferences in your browser, such as your theme and open panels, and these remain on your device. Cloudflare Web Analytics measures page visits without cookies. We do not use advertising or cross-site tracking cookies.

6. How We Share Information

Service providers. We share personal data with service providers that host and operate the Services for us and may use it only to provide their services to us: Supabase (database and file storage, Singapore), Railway (application hosting, Southeast Asia), Cloudflare (website delivery, global), Resend (email delivery, sent through Japan, with message content and logs stored in the United States for 30 days), Exa (people search, United States), and AI model providers, mainly in the United States: Groq, OpenAI, Google, Together AI and OpenRouter. Under the terms that apply to our use, the AI model providers do not use your data to train their models.

Your workspace. Your name and activity are visible to other Users in your workspace, as the Services show.

Legal and business transfers. We may disclose personal data to professional advisers and authorities where required by law or to protect our rights, and to a successor if our business is acquired, who must continue to protect it in line with this policy.

7. International Transfers

Our database is located in Singapore. Some of our service providers process personal data in other countries, including Japan and the United States. We transfer personal data outside Malaysia only as permitted by section 129 of the Personal Data Protection Act 2010.

8. Data Retention

We keep account information while your workspace is open and delete it within 12 months after the workspace closes, unless we are required by law to keep it longer. We keep usage information and messages sent to us for 24 months.

Candidate applications and candidates saved from search are kept by the organisation that holds them, for as long as that organisation decides. AI Interviewer video recordings are deleted 30 days after the interview.

9. Security

We protect personal data with encryption in transit and at rest (AES-256), separate each organisation's workspace from every other, and limit staff access to what their work requires.

If a personal data breach for which we are responsible is likely to cause significant harm, we will notify the Personal Data Protection Commissioner within 72 hours, and the affected individuals within 7 days after that, as required by section 12B of the Personal Data Protection Act 2010 and the Commissioner's guideline.

10. Your Rights

You may ask us to give you a copy of the personal data we hold about you, to correct it, to stop using it for direct marketing, to withdraw your consent where we rely on it, and to transfer it to another organisation where technically feasible. To make a request, email hello@agenticblue.ai. We will respond within 21 days and may ask you to verify your identity.

If you are not satisfied with our response, you may complain to the Personal Data Protection Commissioner, Malaysia.

11. Agentic Blue Talent Network

The Talent Network is optional. You join only by ticking a box on an application page and confirming by email, or by accepting an emailed invitation. The Talent Network notice at agenticblue.ai/tn/notice explains what employers see (a profile without your name), who sees it, that it is shown for 12 months and deleted within 30 days after you leave or the 12 months end, and how you can leave at any time.

12. Shared Profiles

When a recruiter saves a public search result, we may keep the name, headline and location shown in that result. Other workspaces that use Shared Profiles see it only for a person already in their own records. We do not keep who saved the profile or any contact details. A profile that no one saves again for 12 months is deleted. Anyone can request removal of a profile at agenticblue.ai/remove-profile.

13. Automated Decision-Making

Agentic Blue's AI features rank, summarise and interview candidates, but do not reject anyone. Hiring decisions are made by people at the recruiting organisation.

14. Children

The Services are intended for people aged 18 or older.

15. Changes to This Policy

We will post any changes to this policy on this page with the date they take effect. If a change materially affects how we use your data, we will notify Users by email or in the Services. This policy is written in English.

16. Contact Us

For any question about this policy or your personal data, email hello@agenticblue.ai.