1. Controller and contact
The controller is XD Edu (CEO: Jihoon Park; business registration number: 183-15-01555; 505-S47, 30 Nonhyeon-ro 10-gil, Gangnam-gu, Seoul, Korea). Privacy and applicant-rights requests may be sent to support@xdenglish.net.
2. Information collected by stage
- Initial application: account identity, name, email, optional phone, country, time zone, teaching preferences and experience, applicant-authored teaching-readiness and motivation answers, self-reported education and certifications, private compensation preferences, equipment and optional webcam self-report, KST availability, and CV.
- Shortlisted interview: written teaching-scenario responses, device-check results, IP address and user agent used for security, and introduction or teaching-demo video responses.
- Conditional offer: identity, eligibility, background, tax, and payout records may be requested separately. Passports, tax identifiers, criminal-record documents, and payout accounts are not requested in the initial application.
3. Purposes and decision-making
Information is used to authenticate the applicant, assess qualifications and availability, communicate about recruitment, prevent abuse, conduct interviews, prepare a written offer, maintain an audit trail, and meet legal obligations.
The current teacher assessment stores applicant responses for trained human reviewers and does not automatically hire or reject an applicant. No current recruitment route sends applicant answers to the blog-content AI service. A human makes the final decision.
4. Service providers and internal recipients
- Supabase: applicant authentication, recruitment database, and private file storage.
- Bunny.net: shortlisted interview-video storage when that integration is configured. Initial application documents remain in private Supabase storage and are not duplicated to Bunny.net.
- Authenticated XD English recruitment administrators: application review and hiring decisions on a need-to-know basis. Application and CV originals remain in the apply service. The xd-web TcApply service reads them through an authenticated private API and stores only hiring workflow and management metadata; after hiring it stores the minimum teacher, HR, and contract records needed for onboarding and service operation.
- Telegram: operational notifications containing only a reference code, country, completeness status, timestamp, and authenticated admin-review link. Contact details, answers, video addresses, and document links are not included.
5. Overseas processing and storage
The application uses cloud and messaging providers that may process information outside the applicant's country. The exact contracted project regions and storage countries are deployment settings and are not verifiable from this codebase; XD English will provide the current region information on request before or after application. We do not publish a guessed country.
6. Retention, reminders, and deletion
A withdrawn application and its CV are deleted within 7 days after withdrawal. A rejected application and its CV are deleted within 30 days after the result is notified. A hired application and its CV are deleted within 30 days after contracting and onboarding are complete; only the minimum information needed for HR and contract records is transferred to the post-hire system.
Interview videos are retained while the application is active and deleted within 28 days after withdrawal or result notification. If the application/CV deletion deadline arrives sooner, the video may be deleted at that earlier purge. Telegram does not receive video addresses.
Records required for an active dispute or a non-waivable legal duty may be isolated and retained only until that need ends. Any such exception is access-restricted and documented.
Electronic records are deleted from the database and storage services; temporary copies expire or are removed under the relevant provider lifecycle after deletion.
7. Applicant rights
Email support@xdenglish.net to request access, correction, deletion, restriction or suspension of processing, withdrawal of consent, or information about current overseas processing. Withdrawing consent does not affect prior lawful processing, but it may prevent XD English from continuing the application. We may verify identity before acting on a request.
8. Security and access
Documents and videos are not placed in public Telegram messages. Private-file links are generated only for an authenticated administrator's detail request and expire after a limited time. Access is limited to authenticated recruitment personnel.
9. Version
Policy version 2026-08-08.1. The consent timestamp and this version are stored with each new application. Material changes will be posted on this page before they apply to new consent.