Table of Contents
- 1. Introduction
- 2. Information We Collect
- 3. How We Use Your Information
- 4. AI & Automated Processing
- 5. Information Sharing
- 6. Cookies & Tracking
- 7. Data Retention
- 8. Data Security
- 9. Your Rights & Choices
- 10. International Transfers
- 11. Children’s Privacy
- 12. Third-Party Links
- 13. Changes to This Policy
- 14. Contact Us
1. Introduction
HackHyre, Inc. ("HackHyre," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our AI-powered hiring platform, website, and related services (collectively, the "Service").
By accessing or using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service. This policy should be read alongside our Terms of Service.
2. Information We Collect
Information You Provide
- Account information — name, email address, password, and role selection (candidate, recruiter) when you register
- Profile data — resume, work experience, education, skills, certifications, career preferences, salary expectations, and location
- Job listing data — job titles, descriptions, requirements, compensation details, and company information (recruiter accounts)
- Application materials — cover letters, portfolios, and any documents you submit when applying for positions
- Communications — messages sent through the platform, support inquiries, and feedback
- Payment information — billing address and payment method details (processed by our third-party payment provider; we do not store full card numbers)
Information Collected Automatically
- Device and browser data — IP address, browser type and version, operating system, device identifiers, and screen resolution
- Usage data — pages visited, features used, search queries, click patterns, session duration, and referring URLs
- Location data — approximate geographic location derived from your IP address to display relevant job listings
- Cookies and similar technologies — see Section 6 for details
Information from Third Parties
- OAuth providers — if you sign in via Google, GitHub, or LinkedIn, we receive your name, email, and profile picture from those services
- Publicly available data — professional information from public profiles used to enhance matching accuracy
3. How We Use Your Information
We use your personal information to:
- Provide, operate, and maintain the Service, including AI-powered job matching
- Create and manage your account and authenticate your identity
- Process job applications and facilitate connections between candidates and employers
- Generate compatibility scores and personalized job recommendations
- Send transactional communications such as application confirmations, account updates, and security alerts
- Send marketing communications about new features, job opportunities, and platform updates (with your consent)
- Analyze usage patterns to improve the Service, fix bugs, and develop new features
- Detect, prevent, and address fraud, abuse, and security issues
- Comply with legal obligations and enforce our Terms of Service
4. AI & Automated Processing
Transparency Notice
HackHyre uses artificial intelligence to match candidates with job opportunities. This section explains how our AI processes your data and what controls you have.
What Our AI Analyzes
Our AI matching system analyzes over 50 dimensions to score compatibility between candidates and roles, including:
- Skills, qualifications, and certifications
- Work experience and career trajectory
- Education and training background
- Location preferences and remote work compatibility
- Salary expectations and compensation alignment
- Culture fit indicators and growth potential
How AI Decisions Are Made
AI-generated matching scores are recommendations, not final decisions. Employers make all hiring decisions independently. Our AI does not use protected characteristics (race, gender, age, religion, disability, sexual orientation) as matching factors.
Your Controls
- You can view the factors contributing to your match score on any job listing
- You can update your profile to adjust how the AI evaluates your compatibility
- You can opt out of AI-powered recommendations through your account settings
- You may request a human review of any automated decision that significantly affects you
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Service. Specific retention periods include:
- Account data — retained while your account is active and for 30 days after deletion to allow recovery
- Application records — retained for 2 years after submission for compliance and dispute resolution
- Usage logs — retained for 12 months for analytics and security purposes
- Payment records — retained for 7 years as required by tax and financial regulations
- Support communications — retained for 3 years after the last interaction
When data is no longer needed, we securely delete or anonymize it. Anonymized data that can no longer identify you may be retained indefinitely for statistical analysis.
8. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption in transit — all data transmitted between your device and our servers is encrypted using TLS 1.3
- Encryption at rest — stored data is encrypted using AES-256 encryption
- Access controls — strict role-based access controls limit who can view or modify personal data within our organization
- Infrastructure security — our servers are hosted in SOC 2 Type II certified data centers with 24/7 monitoring
- Regular audits — we conduct regular security assessments and penetration testing
While we take extensive precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach affecting your personal information.
9. Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal information:
Access & Portability
You can request a copy of the personal data we hold about you in a structured, commonly used, machine-readable format. You can also export your profile data at any time through your account settings.
Correction
You can update or correct your personal information at any time through your account profile. If you need help correcting data you cannot edit directly, contact us.
Deletion
You can request deletion of your account and personal data. Upon request, we will delete your data within 30 days, except where we are legally required to retain it.
Opt Out of Marketing
You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in any email or through your notification settings. Transactional communications (account security, application updates) are not affected.
Restrict Processing
You can request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of your data or object to our processing.
GDPR Rights (EEA/UK Residents)
If you are located in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with your local data protection authority.
CCPA Rights (California Residents)
If you are a California resident, you have the right to know what personal information we collect and share, request deletion, and opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, contact us at privacy@hackhyre.com. We will respond within 30 days.
10. International Transfers
HackHyre is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.
When we transfer data internationally, we use appropriate safeguards including:
- Standard Contractual Clauses approved by the European Commission
- Data processing agreements with all service providers
- Compliance with the EU-US Data Privacy Framework where applicable
By using the Service, you consent to the transfer of your information to the United States and other countries that may have different data protection laws than your jurisdiction.
11. Children’s Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.
If you believe that a child under 18 has provided us with personal information, please contact us at privacy@hackhyre.com so we can take appropriate action.
12. Third-Party Links
The Service may contain links to third-party websites, services, or applications that are not operated by HackHyre. This includes employer websites, social media profiles, and external job boards.
We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every site you visit.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Post the updated policy on this page with a new "Last updated" date
- Notify you by email if the changes significantly affect how we use your personal data
- Provide at least 30 days' notice before material changes take effect
Your continued use of the Service after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically for the latest information.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Wilmington, Delaware, USA
For GDPR-related inquiries, you may also contact your local data protection authority. We aim to respond to all privacy requests within 30 days.