Recruiter Privacy Addendum

Supplements the main CubeX Privacy Policy

This addendum explains how CubeX handles data specific to the Recruiter Portal. It should be read alongside the main CubeX Privacy Policy.

1. Answer Key Encryption

• Answer keys you upload are encrypted using AES-256 before being stored in our database.
• Answer keys are decrypted only momentarily, in server memory, when the auto-marking engine runs a comparison — they are never written back to disk or logs in decrypted form.
• Answer keys are never included in any API response, export, or report — including ones generated for your own use.

2. Student Submission Data

• Student code submissions within your workspace are visible to you (the recruiter) and to CubeX support staff for platform safety and dispute resolution purposes.
• This data is not shared with any third party, used for marketing, or sold.
• This data is permanently deleted 60 days after your subscription is cancelled or lapses.

3. Superadmin Monitoring Disclosure

CubeX superadministrators review uploaded problem images and assessment content for platform safety — to ensure no illegal, malicious, or abusive content is hosted on CubeX infrastructure. This review does not extend to encrypted answer keys, which remain inaccessible in plaintext to all parties except the auto-marking engine at the moment of comparison.

4. Talent Profile Data (if applicable)

If your organisation also uses the CubeX Talent Profile / Company Portal feature, see the separate disclosures in the main Privacy Policy regarding student opt-in consent and introduction payment data.

5. Data Processing Location

CubeX stores data using MongoDB Atlas and Cloudinary, both of which provide regional data residency options. Contact us if your organisation has specific data residency requirements.

Contact

Privacy questions: cubexassist@gmail.com