Legal

Privacy Policy

Last updated: 20 October 2026

Pesto is the AI hiring product of PESTO Labs, Inc. This policy explains what Pesto collects, why, and the choices you have. It covers pesto.club and private access.

1. What we collect

If you join private access, we collect the email address you submit, and whether you come as a company or as a candidate when you tell us.

These pages are static documents. They set no cookies and load no third-party scripts.

We also keep the ordinary server logs of a request, including the IP address, for security and to prevent abuse.

2. How we use it

We use this information to run private access, to protect the service, and to understand whether the product is working. Your data is never sold, and we do not use it for advertising.

We share it with the providers that host pesto.club, only so they can run it; with a regulator or a court when the law requires it; and with a buyer if the product is acquired, who must honour this policy. We share it with anyone else only when you ask us to.

3. How long we keep it

We keep a private-access email while you are on the list. Server logs are kept only as long as we need them for security. Email hello@pesto.club and we will delete what we hold about you, except where we have to keep a record the law requires.

4. Your rights

Wherever you live, you can ask for a copy of your data, have it corrected, have it deleted, and take it to another service. Email hello@pesto.club. We may ask you to confirm it is you, and we reply within 30 days.

• European Economic Area, the UK, and Switzerland. You can also ask us to restrict or stop processing, and object to processing based on our legitimate interests. You can complain to your data protection authority. In the UK, that is the Information Commissioner's Office.
• India. Under the Digital Personal Data Protection Act, 2023, you can ask for a summary of the data we hold and who we shared it with, have it corrected or erased, and nominate someone to exercise these rights for you. If we do not resolve a grievance, you can complain to the Data Protection Board of India.
• California. You can ask to know, delete, and correct your personal information, and use an authorised agent. We do not sell or share personal information for cross-context behavioural advertising, and we will not treat you differently for using these rights.
• United Arab Emirates. You can ask for access, correction, erasure, and restriction, and object to processing.

5. International transfers

We and our service providers process data in the United States and other countries, which may have different data protection laws from where you live. Where the law requires it, we rely on approved safeguards such as standard contractual clauses.

6. Children and changes

Pesto is not for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it. When we change this policy we update the date at the top. For a material change, we tell you before it takes effect when we have your email.

7. Contact

Questions about your privacy, or a request about your data: hello@pesto.club. PESTO Labs, Inc.