Legal

Privacy policy

This privacy policy (“this policy”) explains how Beijing Boseek Intelligent Technology Co., Ltd. (“Boseek”, “we”) handles your personal information on www.boseekai.com and in HunterBuddy, and the information about candidates, contacts and other people that you keep in HunterBuddy. Please read it carefully, especially the parts in bold.

BoseekUpdated 2026-10-26Effective 2026-10-26

Key points

The website uses no cookies and no analytics, advertising or tracking code. When you browse it, our server only keeps access logs, for security and troubleshooting.
When you request a trial, we collect the name, company, phone number, email, role, number of active searches and industry you enter, and use them only to review your request and contact you when trial access opens.
You decide how the candidates, contacts and other people you keep in HunterBuddy are used. We process that information for you under the Data processing agreement and use it for no other purpose.
We store and process personal information in mainland China. We never provide it outside China, never use it to train AI models and never sell it.
AI results show their sources and how reliable they are (verified, inferred, to be confirmed). Who to contact and who to put forward is your decision.
You can access, copy, correct and delete your information and close your account. Email privacy@boseekai.com and we will reply within 15 working days.

Who we are and what this policy covers

The personal information handler is Beijing Boseek Intelligent Technology Co., Ltd. For anything about personal information, contact privacy@boseekai.com.

This policy covers the website (the Chinese and English pages of www.boseekai.com), trial requests, and the HunterBuddy service, including accounts, workspaces and the features in them.

When each part applies: the parts of this policy about the website and trial requests apply from the effective date. The parts about the HunterBuddy service apply from the day HunterBuddy is formally opened to you. Before it opens, we will check this policy line by line against the features actually launched, and update the policy first wherever anything differs, before opening the service.

We act in two different capacities

For information about website visitors, trial applicants, HunterBuddy users themselves and people who make requests to us, we are the personal information handler and follow this policy.
For the information you keep and process in your workspace about candidates, client contacts, paper authors, patent inventors, email correspondents and other people (“other people’s information in your workspace”), you are the personal information handler and we process it on your behalf, under the Data processing agreement. For the search sources and methods we choose, the refusal list and our security measures, we bear a personal information handler’s responsibility as the law requires. Section 9 is written for the people that information is about.

This policy is made under the Personal Information Protection Law of the People’s Republic of China, the Cybersecurity Law, the Data Security Law, the Regulations on Network Data Security Management, the Interim Measures for the Management of Generative AI Services, the Measures for Labeling AI-Generated Synthetic Content and other laws and regulations.

What we collect and why

We collect only what we need to provide the service. The table lists every situation in which we collect information. Anything marked optional can be left out without affecting other features.

When	What we collect	Why	Required?
Browsing the website	Access logs recorded by the server: IP address, time of visit, pages requested, browser and operating system type, referring page	To keep the website secure, fix faults and keep network logs as the law requires	Recorded automatically
Requesting a trial	Name, company, phone number, email, role, number of active searches, industry (including anything you add), and the submission time and reference	To review your request and contact you when trial access opens	Required. Without it you cannot apply
Signing up and signing in	A mainland China mobile number and SMS code. With WeChat, the account identifier WeChat returns and any nickname and avatar you agree to share. The name you enter when signing up	To create your account, verify who you are and keep sign-in secure	Required. One of the two methods
Account profile	Avatar, name, contact email, workspace name, language, time zone, notification settings	To show your account, send notifications and follow your preferences	Name required, the rest optional
Sign-in security	Sessions and devices: browser, operating system, approximate city derived from the IP address, last active time	To let you see and sign out other devices and to spot unusual sign-ins	Required
Using the service	What you type, the files, images, screenshots, audio and links you upload, the tasks and recurring plans you set, the results the service produces, and a record of each confirmation you give	To carry out the tasks you start, keep the results and record who confirmed what and when	Required for the feature you use
Usage and runs	Task and run records, model usage, number of searches, data processing capacity, error information	To count quota, fix faults and keep the service stable	Required
Connecting a sending mailbox	Mailbox address, mailbox password or client authorization code, mail server settings	To send emails from your mailbox after you confirm each one, and to read the replies and attachments to those emails	Optional
Subscription and payment	Plan, amount, order time and status, the payment result returned by the payment channel, auto-renewal setting	To complete purchases, manage your subscription and quota and keep transaction records as the law requires	Required to buy
Support and diagnostics	Problem descriptions, feedback and diagnostic packages you choose to send	To answer you and find and fix the problem	Optional
Making a request to us	Name, contact details, professional details that confirm it is you (such as company and title), your request and how it was handled	To handle your request. If you expressly refuse, to stop collecting your information from public sources	Required to make a request

We do not collect your ID number, bank card number, biometric data, location tracks or other sensitive personal information, and we never read files on your computer that you have not chosen to upload. We do not extract voiceprints from audio or run face recognition on photos. Payment is completed with Alipay or WeChat Pay, and we do not obtain your card number or payment password.

About the sending mailbox

Connecting a sending mailbox is optional. No email is sent until you confirm its recipients, subject, body and attachments, and automatic mode cannot skip this step. So that you can see replies, we check your mailbox regularly, and keep and process only the replies and attachments in the same conversation as those emails. Other emails are neither kept nor processed. The mailbox password or authorization code is stored encrypted, is never shown to anyone, and is deleted as soon as you disconnect the mailbox. If your mailbox provider or a recipient is outside China, emails travel abroad through that provider, at your own discretion and responsibility.

Any other purpose needs your consent first

If we want to use information for a purpose this policy does not describe, or the purpose, method or type of information changes, we will tell you first and ask for your consent again.

Cookies and browser storage

The website uses no cookies and does not use browser storage to record what you do. It has no analytics, advertising or third-party tracking code. Its fonts, videos and scripts are all served from our own server.

The HunterBuddy service uses the cookies and browser storage it needs to keep you signed in and to keep unsent drafts and interface preferences, such as pinned tasks. None of this is used for advertising or profiling. If you clear your browser data, you will need to sign in again and your interface preferences return to their defaults.

How AI handles your information

HunterBuddy uses large language models to understand your requests, parse files, search and organize public information, compare and resolve identities, calculate matches, and draft summaries, reports, interview materials and emails.

Models in China only. To carry out the tasks you start, we send the necessary content to large-model providers in mainland China, and never to models outside China.
Never used for training. We do not use what you type, upload or generate, or other people’s information in your workspace, to train or fine-tune any model, and our agreements require the model providers not to either.
Results are labeled. Content generated or inferred by AI is marked with labels such as AI-generated, Inferred or To be confirmed, together with the sources it relies on, and is shown apart from verified facts. Generated reports, interview materials and other files are marked too. Section 7 of the Terms of service describes the labels.
You make the decisions. Match scores, identity judgments and career-move alerts are for your reference only. HunterBuddy never contacts anyone by itself, and never puts forward, hires or rejects a candidate by itself.

Automated processing

Within the authorization you give, HunterBuddy carries out some processing automatically, for example linking two records of the same person when the evidence is strong, or scoring and ranking candidates against a role. All of it keeps its evidence, and you can review, undo or correct it. In settings you can switch to Analyze only or Confirm before acting, and turn off automatic steps such as matching right after saving. Where the results concern candidates or other individuals, those individuals may ask the user who keeps their information to explain, and may refuse decisions made solely by automated means that significantly affect their rights. We help the user explain the basis of the processing. If you have questions about automated processing that concerns you, contact us as described in section 10.

Processors, third parties and sharing

To provide the service, we engage the following service providers, all in mainland China, to process the information they need. Our agreements require them to process it only as we instruct and for the agreed purpose, to keep it secure and to use it for nothing else, and we supervise them.

Entrusted party	Information processed	Purpose
Cloud provider	The data needed to store and run the service	Servers, databases, file storage and backups
Large-model provider	The input and excerpts needed for a task	Understanding, parsing, analyzing, generating and translating content
Public search service	Search terms, such as a role, a company or a person’s name	Searching public web pages, papers, patents and open-source projects for your tasks
SMS provider	Mobile number, verification code, reminder text	Sending sign-in codes and necessary reminders
Email delivery service	Contact email, notification summaries (never candidates, contacts, email bodies or other business content)	Sending account security, subscription and service notifications
Feishu (Beijing Feishu Technology Co., Ltd.)	What you enter in a trial request	Recording and reviewing trial requests

Third-party services you use directly

Third party	Information processed	Purpose
WeChat sign-in (Shenzhen Tencent Computer Systems Co., Ltd.)	The account identifier, nickname and avatar you authorize in WeChat	Signing in with WeChat
Alipay (Alipay (China) Network Technology Co., Ltd.)	Order number, plan name, amount, and the payment information you give Alipay	Completing payment
WeChat Pay (Tenpay Payment Technology Co., Ltd.)	Order number, plan name, amount, and the payment information you give WeChat Pay	Completing payment

These third parties are independent personal information handlers. They handle the information you give them under their own privacy policies, which you can find, with their contact details, on their official websites. We send payment institutions only the order number, plan name and amount needed to complete payment. Once you connect a sending mailbox, emails are sent and received through the mailbox provider you chose.

Sharing

Apart from the cases listed in this section, your separate consent, or what laws or administrative regulations require, we do not provide your personal information to any third party, and we never sell it. If we ever need to provide it to another personal information handler, we will first tell you the recipient’s name and contact details, the purpose, the method and the types of information, and obtain your separate consent.

Each workspace is isolated. We never give one user’s workspace data to another user or use it in another user’s tasks.

Transfers

If personal information has to be transferred because of a merger, division, dissolution or bankruptcy, we will tell you the recipient’s name and contact details and require the recipient to keep to this policy. A recipient that changes the original purpose or method of processing must ask for your consent again.

Public disclosure

We do not disclose your personal information publicly.

When the law does not require consent

The law allows personal information to be processed without your consent in these cases:

Where it is necessary to conclude or perform a contract to which you are a party.
Where it is necessary to fulfil statutory duties or obligations.
Where it is necessary to respond to a public health emergency, or to protect a person’s life, health or property in an emergency.
Where it is done within a reasonable scope for news reporting or public-opinion oversight in the public interest.
Where it concerns information the person has made public, or that has otherwise been lawfully made public, and is processed within a reasonable scope.
Other cases provided by laws and administrative regulations.

Where information is stored and for how long

The servers where we store personal information, and the models and search services we use, are all in mainland China (excluding Hong Kong, Macao and Taiwan), and we do not provide personal information outside China. If you connect a mailbox outside China or send email to mailboxes outside China, the emails travel through the mail providers concerned, at your own discretion and responsibility. If we ever need to provide information outside China, we will first tell you the overseas recipient’s name and contact details, the purpose, method and types of information, and how to exercise your rights against it, obtain your separate consent, and complete the procedures the law requires.

We keep personal information only for the shortest time needed for its purpose, then delete or anonymize it. If a retention period set by law or administrative regulation has not ended, or deletion is technically difficult, we only store and protect the information and do not otherwise process it.

Information	How long we keep it
Website access logs	At least 6 months, then deleted at the end of the log rotation cycle
Trial requests	12 months from submission, for review, trial follow-up and statistics, then deleted. You can ask us to delete it at any time
Account information	While the account exists. If you ask to close your account, we close it within 15 working days of verifying your identity and delete or anonymize the information
Sign-in session records	At least 6 months, then deleted at the end of the log rotation cycle
Workspace content	While the account exists. What you delete goes to the recycle bin and is permanently deleted after 30 days, or earlier if you delete it permanently
Task, run and usage records	While the account exists, and deleted with the workspace or when the account is closed. Records needed for billing are kept for the period accounting rules require
Deleted workspaces	A 30-day recovery period after you request deletion, then permanently deleted
Export files	Available to download for 7 days after they are generated, then deleted
Sending mailbox address, server settings and authorization code	Deleted as soon as you disconnect the mailbox
Diagnostic packages	Deleted within 30 days after the problem is resolved
Support and feedback records	Deleted 12 months after the matter is resolved
Records of requests from individuals	3 years. The refusal list is kept until the person withdraws their refusal
Records of providing generated content without explicit labels	6 months
Security logs	At least 6 months, then deleted at the end of the log rotation cycle
Operations audit records and records of personal information processing	3 years
Order and payment records	The period required by accounting, tax and other laws
Backups	Overwritten on a rolling backup cycle, at most 30 days

If your subscription ends, your data stays and you can still view and export it. If your account is suspended for breaching the Terms of service, you cannot sign in while it is suspended, but you can email us to ask for an export of your data, which we provide within 15 working days, unless laws or administrative regulations provide otherwise or unlawful content is involved. If we stop operating HunterBuddy, we will announce it and notify you 30 days in advance, and delete or anonymize personal information once the service stops.

How we protect your information

The whole site uses HTTPS encryption.
Each workspace is isolated. When data is written, the system checks permissions and workspace boundaries.
Mailbox authorization codes, keys and other credentials are stored encrypted and never shown in the interface.
Operations staff cannot see your business content, including candidates, roles, companies, contacts, files, conversations and AI output. They see only what they need to handle accounts, trials, subscriptions and faults. Diagnostic packages contain only run information such as versions and error codes, never business content. Only when handling a complaint, a report or unlawful content as the law requires, with a manager’s approval and an audit record, may staff view the content directly related to that matter.
Important actions such as approving trials, suspending accounts, adjusting quota and opening diagnostic packages leave audit records that cannot be changed.
Staff get only the access they need, are bound by confidentiality, and receive security and personal information protection training.

If a security incident happens

If personal information is, or may be, leaked, altered or lost, we will act immediately to contain it and notify you as the law requires: the types of information involved, the cause and possible harm, what we have done, what you can do to reduce the harm, and how to reach us. We will tell you by in-app notice, email or SMS, post a notice on the website where we cannot reach everyone individually, and report to the authorities as required.

No system on the internet is perfectly secure. If you think someone else may be using your account, sign out other sessions at once and contact us.

Minors

HunterBuddy is a work tool for professional headhunters and recruiters and is not intended for anyone under 18, and we do not actively collect minors’ personal information. If we find we have collected personal information of a child under 14 without a guardian’s consent, we will delete it as soon as possible.

Please do not keep personal information about children under 14 in HunterBuddy.

For candidates and other people on record

If you are a candidate, a contact at a client company, a paper author or a patent inventor, or you have exchanged emails with a HunterBuddy user, some of your information may be kept in the workspace of a HunterBuddy user (“the headhunter”). This section explains where that information comes from, how it is processed and what you can do.

Where the information comes from

Material the headhunter uploads or enters, such as a resume you gave them, or their own work notes.
Public professional information the headhunter asks HunterBuddy to look up: public web pages, company websites, news, papers, patents and open-source projects that can be read without signing in.
Emails the headhunter confirms and sends from their own mailbox, and the replies to them.

HunterBuddy matches up the records in these sources that belong to the same person, including matching aliases, nicknames, English names and online IDs to real names, to work out that person’s professional identity. It relies only on information made public in a professional context and on material the headhunter provides. Anything that does not match up is marked to be confirmed and left for the headhunter to check.

What we do not do

We do not sign in to or operate recruiting or social platforms that require a login, such as Liepin, Maimai, BOSS Zhipin or LinkedIn, and we do not get around websites’ access restrictions.
We do not collect private information unrelated to work, such as ID numbers, home addresses, family members, health or religious beliefs.
We never contact you by ourselves. Whether and how to contact you is the headhunter’s own decision.
Inferences, such as a possible colleague relationship or a career move, are marked as inferred or to be confirmed and are never treated as facts.

Who is responsible

The headhunter who keeps your information is its personal information handler. They are responsible for having a lawful basis and for answering your requests. Boseek processes it on the headhunter’s instructions. For the search sources and methods we choose, the refusal list and our security measures, we are also responsible as the law requires, and we help the headhunter respond to you.

What you can do

You can contact the headhunter who keeps your information and ask to access, correct or delete it, or refuse their processing of information you have made public. You can also email privacy@boseekai.com with your name, contact details and your request. We usually ask you to confirm by replying from your own email address or phone number, and we do not need an ID document. Once verified, the system automatically checks across workspaces, and within 15 working days we pass your request on to the headhunters who keep your information and help them handle it, pausing the processing of that information first where needed, and then tell you the outcome. The check is done by the system, and no staff member looks at workspace content.

If you expressly refuse our processing of information you have made public, we will put you on a refusal list, keeping only what is needed to identify you, and from then on stop automatically collecting or completing your information from public sources for any user.

Your rights

Access and copy: view your information in account settings and on each record page, or download it with Export.
Portability: where the legal conditions are met, we provide a way to transfer your personal information to another handler you name.
Correct and complete: edit it in account settings, or contact us.
Delete: you can delete content in the service. It goes to the recycle bin and is permanently deleted after 30 days, or earlier if you delete it permanently. You can also ask us to delete your information when the purpose has been achieved, we stop providing the service, you withdraw consent, or we process it unlawfully or in breach of our agreement.
Withdraw consent: for example by disconnecting your sending mailbox, unlinking WeChat, turning off optional notifications, or emailing us. Withdrawal does not affect processing already carried out on the basis of your consent. Some features may stop working afterwards.
Restrict or refuse processing: you can ask us to restrict or refuse the processing of your personal information, unless laws or administrative regulations provide otherwise.
Explanations: you can ask us to explain this policy and our processing rules. For automated processing that concerns you, you can ask us to explain its basis and main rules, and you may refuse decisions made solely by automated means that significantly affect your rights.
Close your account: email privacy@boseekai.com. Within 15 working days of verifying your identity, we close the account and delete or anonymize your personal information, unless laws or administrative regulations provide otherwise. A closed account cannot be restored, so export anything you want to keep first.
Rights of close relatives: when a person has died, their close relatives may, for their own lawful and legitimate interests, access, copy, correct or delete the deceased’s personal information, unless the deceased arranged otherwise.

How to make a request

Email privacy@boseekai.com. To protect your information we may first verify your identity, usually through the phone number or email linked to your account, then we reply within 15 working days. We do not charge for this, but for transfer requests that are clearly excessive in number or scope, we may charge the necessary cost. If we cannot meet a request, we will tell you why.

If you believe our processing has harmed your rights, you can complain to us, complain to or report to the cyberspace, public security, market regulation or other authorities, or bring a lawsuit in a people’s court.

Third-party websites

The website and service may link to third-party websites, such as the ICP filing lookup. Third parties handle information under their own rules, so please read their privacy policies.

How this policy is updated

We may update this policy when laws change or features change. The new version is published on this page with its update date and effective date. For significant changes, such as a change in purpose, method, types of information, types of service providers or where information is stored, we will tell you clearly at least 7 days before they take effect, by in-app notice, email or a notice on the website, and ask for your consent again where that is required.

Earlier versions are available on request by email.

Contact us

Company: Beijing Boseek Intelligent Technology Co., Ltd.
Personal information: privacy@boseekai.com
Everything else: hello@boseekai.com
Website: www.boseekai.com

We reply within 15 working days of receiving your message.