This policy explains what personal information CIPHER collects, why we collect it, who we share it with, and the choices you have. CIPHER is a product of DigitalRecruiter™.
The short version. You give us your career history so we can assess it and build positioning materials from it. We use trusted service providers — several based overseas — to host, process and deliver that. We don’t sell your information to anyone. You can access, correct or delete it by emailing us.
This site and the CIPHER platform are operated by Digital Recruiter Pty Ltd (ABN 92 619 174 720), trading as DigitalRecruiter™ (“we”, “us”, “our”). You can contact us at info@digitalrecruiter.com or by post at Level 1, 22–28 Edgeworth David Ave, Hornsby NSW 2077.
This policy applies to both ciphersignal.io and the CIPHER application at cipher.digitalrecruiter.com.
We handle personal information in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). Some small businesses are not legally bound by the Privacy Act, but we apply the APPs as our standard regardless, because the information you trust us with is detailed and personal.
Subscription payments are processed by Stripe. We do not see, receive or store your full card number. We receive a payment reference, the last four digits, the card brand and the status of the transaction.
A CV can contain sensitive information as the Privacy Act defines it — for example health details, racial or ethnic origin, religious beliefs, political opinions, union membership or criminal record.
We do not ask for sensitive information and we would rather you left it out. If you choose to include it in a document you upload, you consent to us handling it for the purposes described in this policy. You can remove it and re-upload at any time.
Your decode is produced by automated analysis of the information you provide. The output is an assessment and a set of recommendations. It is not a decision made about you by an employer, recruiter or any third party, and it does not determine access to any job, credit or service. You are free to disagree with it, re-run it, or disregard it.
Automated analysis can be wrong or incomplete. Scores may vary between runs on the same input. Treat the output as one informed perspective, not as fact about you.
We do not sell your personal information, and we do not disclose it to recruiters, employers or advertisers.
We share it only with service providers who help us run CIPHER, and only to the extent they need it:
| Purpose | Where the provider processes data |
|---|---|
| Application hosting and delivery | United States |
| Database and authentication | United States |
| Automated language processing for decodes and playbooks | United States |
| Payment processing | United States and Ireland |
| Transactional email delivery | United States |
We may also disclose information where the law requires it, to enforce our terms, or to protect the rights and safety of any person.
As the table above shows, some of our providers are located outside Australia — principally in the United States, and for some payment functions in Ireland. By using CIPHER you acknowledge that your information will be processed overseas.
We take reasonable steps to ensure providers handle your information consistently with the APPs, including through their contractual commitments to us. You should be aware that overseas providers may be subject to laws that differ from Australian privacy law, and that Australian courts and the Australian Information Commissioner may have limited practical reach over them.
No system is perfectly secure. We cannot guarantee absolute security, and we ask you to use a strong, unique password and to tell us promptly if you suspect your account has been accessed by someone else.
We keep your information while your account is open, and for as long as needed afterwards to meet legal, tax and accounting obligations — generally seven years for financial records under Australian law.
If you close your account, your decodes and generated materials are retained so you can return to them, unless you ask us to delete them. You can request deletion at any time.
You may ask us to give you a copy of the personal information we hold about you, to correct anything inaccurate or out of date, or to delete your information and close your account. Much of this you can do yourself in your account settings.
Email info@digitalrecruiter.com and we will respond within 30 days. We do not charge for access requests. If we cannot give you access or make a correction, we will tell you why in writing.
We send transactional emails — account confirmations, receipts, and notifications about work you have requested. These are part of the service and are not marketing.
Any marketing email will identify us clearly and contain a working unsubscribe link, as required by the Spam Act 2003 (Cth). Unsubscribing does not affect transactional emails, which you will keep receiving while your account is open.
We use cookies that are necessary for the service to work — principally to keep you signed in and to keep your session secure. Your browser can block or delete cookies, but the application will not function correctly without the essential ones.
If you believe we have mishandled your personal information, please tell us first at info@digitalrecruiter.com. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, by phone on 1300 363 992, or by post to GPO Box 5218, Sydney NSW 2001.
We may update this policy as the service changes. The effective date at the top will always show the current version, and we will notify account holders by email of any change that materially affects how we handle personal information.
Digital Recruiter Pty Ltd · ABN 92 619 174 720
Email: info@digitalrecruiter.com
Post: Level 1, 22–28 Edgeworth David Ave, Hornsby NSW 2077