Terms of Service

These Terms govern the use of JD Swipe (jdswipe.com) by business customers. By creating an account or topping up your balance you accept them on behalf of your company.

1. Who we are. JD Swipe is operated by KRUPIARSKY sp. z o.o., a limited liability company registered in Poland, Lompy 49, 47-320 Gogolin, Poland, registered in the National Court Register (KRS) under number 0001201989, NIP (VAT ID) PL1990135158, REGON 543080547, e-mail legal@jdswipe.com ("JD Swipe", "we"). We are established in the European Union.

2. The service. You paste a Job Description; JD Swipe turns it into a short skills check – a set of true/false cards written and verified by an AI model specifically for that role. You send candidates a link, they swipe through the cards on their phone, and you receive a report: for each skill area, whether the candidate answered at the level the Job Description asks for; a summary of how the answers in the core areas compare with the Job Description (meets the JD, close to the JD, below the JD); observations worth a second look; suggested interview questions and, where you enable it, short voice explanations recorded by the candidate. Cards are written once per Job Description; to check different skill areas, create a new one. Each card has the same fixed time limit. The AI does careful work, but it can make mistakes – every card is verified before use, and the full set with sources is available under “Details” in each report. The report is a decision aid, not a decision: you remain solely responsible for any hiring outcome, and you agree not to decide about a candidate on the basis of the automated output alone, without a person looking at it.

3. Business use only. The service is offered to companies, recruiters and agencies acting in the course of business. It is not offered to consumers; consumer withdrawal rights do not apply. You confirm that the person accepting these Terms is authorised to bind the company.

4. Accounts and security. Keep your login details to yourself and tell us at once if you suspect misuse. You are responsible for what happens under your account and under the accounts of colleagues you invite. We may suspend an account that is used in breach of these Terms or that puts the service or other customers at risk.

5. Balance and pricing.

• Prices are in euro, excluding VAT, as shown on the Billing page when you buy. VAT is added as the law requires: for business customers in other EU member states with a valid VAT number the reverse-charge mechanism applies; for customers in Poland Polish VAT is added; for customers outside the EU no VAT is charged. Everything you buy is added to one prepaid balance in euro. Preparing a Job Description costs €10 and covers up to ten skill areas; each further skill area costs €1. Each candidate check costs €1, taken from the balance when the candidate presses Start – links that are never opened cost nothing.
• The balance does not expire and can be spent across all your Job Descriptions, candidates and projects. Purchases are final, with one exception: the balance you have not used is refunded when you close your account (see the Refund Policy).
• When your balance runs out, candidates who open a link see that the check is paused until you top up. We warn you when 80% of your balance is used.
• We may change prices for future purchases with notice on the website; the balance you already hold keeps its value.

6. Payments. You buy a balance top-up from us. You choose the amount on the Billing page and give your company details; we issue a pro-forma invoice and credit the balance when the payment arrives on our account. We issue the VAT invoice for every payment. Where we offer card or other online payment, it is processed by a payment service provider on our behalf; we never see or store your full card details.

7. Your content. You keep all rights to the Job Descriptions, candidate labels and e-mail addresses you upload. You allow us to process them only to provide the service. You confirm that you may upload them and that you have a lawful basis to assess the candidates you invite (see the Data Processing Agreement in Annex 1 and our Privacy Policy). Candidates must be told what happens with their data before they start; JD Swipe shows them the Candidate Privacy Notice on the start screen, and you may add your own information. If you pass reports on to others – by sharing a project or by downloading a PDF – you are responsible for having a lawful basis to do so; downloaded files are outside our retention and security controls.

8. Acceptable use. JD Swipe is a recruitment tool: it is for checking applicants – people who are not yet working for the company – for a genuine, open role. You may not: use it to assess, grade, rank or monitor your current employees or contractors (for example for promotions, pay, performance reviews, redundancies or “skills audits”) – that is a different kind of processing with different legal duties and this service is not built or licensed for it; use the service for anything other than checking applicants for a genuine role; try to obtain the answer key, copy the cards in bulk, reverse-engineer or overload the service; resell access without our written agreement; upload content that is unlawful, infringes others' rights, or contains special categories of personal data beyond what a Job Description normally contains; invite anyone under 16; or use the reports in a way that discriminates unlawfully.

9. Candidate checks. Each link works once, is meant for one candidate and expires after 7 days. The check runs on our servers, card by card, with a fixed time per card; the candidate's device never receives the answers. The report states, for each skill area, whether the candidate answered at the level the Job Description asks for, and summarises the core areas as “meets the JD”, “close to the JD” or “below the JD” – that is, how the answers compare with the level the Job Description asks for. This is a summary of knowledge answers against your own Job Description, not an assessment of the person, and it never rejects, ranks or scores a candidate on its own – the hiring decision is yours. Observations in the report – for example an unusually fast answer, leaving the page, or something odd in a recording – are for you to weigh, not proof of anything. We delete candidate sessions, answers and recordings 90 days after the check is completed.

10. Availability and changes. We aim for high availability but cannot promise uninterrupted service. Generating cards depends on third-party AI models and may be slow or fail; failed generations are not charged. We may change or improve the service and will give reasonable notice of changes that materially reduce what it does.

11. Intellectual property. The service, its software and design, and the cards it generates belong to us, KRUPIARSKY sp. z o.o., or to our licensors. You may use the reports generated for you internally, for the recruitment they were made for.

12. Warranties and liability. The service is provided "as is". To the extent the law allows, we exclude implied warranties and are not liable for indirect or consequential loss, lost profits, or hiring outcomes. Our total liability for all claims in any 12-month period is limited to what you paid us in that period. Nothing excludes liability that cannot be excluded by law (for example for intent or gross negligence).

13. Confidentiality. Each party keeps the other's non-public information confidential. Candidate data is governed by Annex 1.

14. Term and termination. These Terms apply for as long as you have an account. You can close your account at any time from your profile; the balance you have not used is refunded at the price you paid (see the Refund Policy). Closing the account signs out every member and deletes all candidate data immediately; your Job Descriptions, cards and team are kept for 30 days in case you change your mind, then deleted. We may end the agreement for material breach with 14 days' notice, or immediately for serious misuse. After termination we delete your data as described in the Privacy Policy and Annex 1.

15. Changes to these Terms. We may update these Terms. We announce material changes by e-mail or in the app at least 14 days before they take effect; using the service after that date means you accept them.

16. Law and disputes. Polish law applies, excluding conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. Disputes go to the court with jurisdiction over our registered office in Poland, unless mandatory law gives you a different forum. Before going to court, both parties agree to try to settle the matter amicably within 30 days.

17. Contact. legal@jdswipe.com, KRUPIARSKY sp. z o.o., Lompy 49, 47-320 Gogolin, Poland. Version 1.4 – effective 19 October 2026 (operator changed from POLAKO d.o.o. to KRUPIARSKY sp. z o.o.; payments by invoice; wording of the report summary).

Annex 1 – Data Processing Agreement

This Annex is part of the Terms of Service and is the written contract required by Article 28(3) GDPR. The customer (the "Controller") decides why candidates are checked; JD Swipe (the "Processor") processes candidate data only to deliver the service.

1. Subject matter and duration. Processing of candidate personal data to run skills checks and produce reports, for as long as the Controller has an account plus the retention periods below.

2. Nature and purpose. Recruitment only: assessing applicants for an open role (not the Controller's current employees or contractors). Turning the Controller's Job Description into a skills check; issuing single-use links; recording the candidate's answers, how long each took and whether they stayed on the page; optionally recording and reviewing short voice explanations; scoring; producing a report with interview questions. Voice recordings are reviewed by an AI model only to see whether the explanation is on topic and to flag anything unusual (for example a second voice, text being read aloud, or synthetic speech). The model does not build a voice profile, does not identify the candidate, and does not infer emotions, stress, personality or any other personal characteristics.

3. Data subjects and categories.

No special categories of data (Article 9) are asked for. The Controller must not put them in Job Descriptions or candidate labels.

4. Processor obligations. The Processor:

• processes candidate data only on the Controller's documented instructions – these Terms and the Controller's use of the app – and tells the Controller if an instruction appears to break data protection law;
• makes sure that everyone with access to the data is bound by confidentiality;
• applies the security measures in section 8;
• helps the Controller answer data-subject requests (section 6) and meet its duties on security, breach notification and impact assessments (Articles 32–36), as far as it reasonably can;
• deletes candidate data at the end of the retention period or when the Controller asks, and deletes all data at the end of the contract unless the law requires otherwise;
• provides the information needed to show compliance and allows audits (section 9);
• notifies the Controller without undue delay, and at the latest within 48 hours, after becoming aware of a personal data breach affecting the Controller's data.

5. Sub-processors. The Controller gives general authorisation for the sub-processors below. The Processor gives at least 14 days' notice before adding or replacing one (by e-mail or in the app); the Controller may object on reasonable data-protection grounds, in which case the parties look for a solution or the Controller may terminate.

The Processor, KRUPIARSKY sp. z o.o., is established in Poland (EU). Production data is stored in the EU (Finland). The Processor's staff may access the systems remotely for support and operations, including from Montenegro; that access is covered by the EU Standard Contractual Clauses (Decision 2021/914) between the Processor and the persons or entities concerned, and by the security measures in section 8.

6. Data-subject requests. Candidates receive a notice naming the Controller as the party to contact. Requests that reach the Processor are forwarded to the Controller within 5 business days. The Controller can export reports and delete sessions in the app; on request the Processor deletes a specific candidate's data within 10 business days.

7. Retention. Candidate sessions, answers, signals, reports and voice recordings are deleted automatically 90 days after the check is completed. Job Descriptions and the cards written for them are kept while the account is active. Backups are kept for 30 days, so anything removed from the live system is gone from every backup within 30 days. The AI provider keeps request logs under its own terms: we use Google's paid Gemini service, where prompts and responses are not used to improve Google's products and are kept only briefly, for abuse detection and legal compliance.

8. Security measures. The Processor applies technical and organisational measures appropriate to the risk, including: encryption of all traffic in transit; single-use, randomly generated candidate links that are stored only in hashed form; passwords stored only as salted hashes; answer keys that never leave the server; access to production systems limited to named people using key-based authentication; separation between the application and its data stores; rate limiting and protective headers on all public endpoints; voice recordings served only to signed-in users of the organisation that owns them; regular encrypted backups kept for 30 days; secrets kept outside the code base. A current description of the measures is available to the Controller on request, and the measures are reviewed whenever the service changes in a material way.

9. Audit. Once a year, or after a breach, the Controller may ask for a written description of the measures and reasonable evidence that they are in place, including the certifications of sub-processors. On-site audits need 30 days' notice, are at the Controller's cost and limited to what is necessary.

10. Liability. Liability under this Annex follows the Terms of Service, without prejudice to Article 82 GDPR.

11. Precedence. If this Annex conflicts with the Terms, this Annex prevails for personal-data matters; where Standard Contractual Clauses apply, they prevail over both.