Privacy Policy

Effective date: August 10, 2026 · Hirovia Inc.

This Privacy Policy explains how Hirovia Inc. ("Hirovia," "we," "us") collects, uses, shares, and protects personal information in connection with the Hirovia platform, websites, and services (the "Service"). It applies to employer users ("Customers"), their teammates, and job applicants who complete assessments ("Candidates").

1. Our role

For Customer account information, we act as the data controller. For Candidate information submitted through assessments, we process data as a service provider/processor on behalf of the Customer that invited the Candidate — that Customer is the controller of Candidate data and is responsible for having a lawful basis to collect it. Candidates with questions about how their data is used in hiring decisions should contact the employer that invited them.

2. Information we collect

Account data (Customers): company name, user names and email addresses, hashed passwords, plan and billing records. Candidate data: name, email address, resume/CV files and their extracted text, assessment responses (questionnaire answers, scenario choices, written answers), computed scores and reports, and completion metadata (timestamps, progress). Technical data: IP addresses, browser information, and server logs collected automatically for security and operations. We use only essential cookies (session authentication); we do not run advertising or tracking cookies.

3. How we use information

We use personal information to: provide the Service (deliver assessments, compute scores, generate reports for the inviting Customer); operate accounts and billing; secure the Service, prevent fraud and abuse, and detect careless or falsified responding; communicate about the Service; comply with legal obligations; and improve the Service, including creating de-identified and aggregated data (which no longer identifies anyone) used to refine scoring models and benchmarks.

4. AI processing

Resumes and written assessment answers are analyzed with artificial-intelligence models, which may include third-party AI providers acting as our sub-processors under contractual confidentiality. AI evaluation is used to generate advisory scores for the inviting employer. We do not permit our AI sub-processors to use your personal data to train their generally available models.

5. How we share information

We share personal information only with: (a) the Customer that invited the Candidate (assessment results, reports, resumes); (b) parties the Customer chooses to share reports with via the Service's sharing links; (c) service providers that host and support the Service (e.g., cloud infrastructure, AI processing, payment processing), bound by confidentiality and data-protection obligations; (d) authorities or parties where required by law, legal process, or to protect rights, safety, or the integrity of the Service; and (e) a successor entity in connection with a merger, acquisition, financing, or sale of assets. We do not sell personal information and do not share it for cross-context behavioral advertising.

6. Retention

We retain Candidate data for as long as the inviting Customer's account remains active or as needed to provide the Service, after which it is deleted or de-identified within a reasonable period. Customers can delete individual candidate records at any time, which removes them from active systems. We may retain limited records as required for legal, billing, or security purposes, and de-identified data indefinitely.

7. Security

We use reasonable technical and organizational safeguards: encryption in transit (TLS), hashed passwords, tenant isolation, access controls, and monitoring. No system is perfectly secure; you use the Service at your own risk, and Customers are responsible for safeguarding their credentials and shared-report links.

8. Your rights

Depending on your jurisdiction (e.g., GDPR in the EEA/UK, CCPA/CPRA in California), you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to non-discrimination for exercising rights. Candidates: because we process assessment data on behalf of the employer that invited you, we will refer your request to that employer or act on their documented instructions, as applicable law requires. To make a request, email privacy@hirovia.com; we will verify your identity and respond within the time required by law. You may also lodge a complaint with your local data-protection authority.

9. Automated decision-making notice

Hirovia produces automated scores that employers use as one input in their hiring process. Hirovia itself makes no employment decisions. Employers are responsible for any legally required notices, consents, human review, or alternatives regarding the use of automated tools in their hiring process in their jurisdictions.

10. International transfers

The Service is operated from the United States. If you access it from other jurisdictions, your information will be transferred to and processed in the United States and other countries where our providers operate, under appropriate safeguards where required.

11. Children

The Service is intended for working-age adults and is not directed to children under 16. We do not knowingly collect data from children; if you believe a child has provided data, contact us and we will delete it.

12. Changes and contact

We may update this Policy by posting a revised version with a new effective date; material changes will be reasonably highlighted in the Service. Continued use after changes constitutes acceptance. Questions or requests: privacy@hirovia.com · Hirovia Inc.