Privacy & Cookie Policy

1. Who we are (Data Controller)

hireqix operates this resume screening service. For questions about this policy or to exercise any of the rights below, contact us at support@hireqix.com. We respond to all requests within 30 days.

2. Data We Collect

Account information (name, email, password hash), workspace and job data you create, resumes you upload for evaluation, billing records for credit purchases, and basic technical data (IP address and timestamps) used for security and abuse prevention. We do not sell your data to third parties.

3. Legal Basis for Processing

We process account and workspace data to perform our contract with you, security and abuse-prevention data under our legitimate interest in protecting the service, and analytics or marketing data only with your consent (see cookies below). Resume data is processed on your instruction as the employer, with you acting as the data controller for candidate data.

4. Resume & Candidate Data (AI Processing)

Resumes are processed solely to generate the evaluation you request. Resume content and evaluation results are never used to train third-party AI models and are not shared outside your workspace. As the employer you are responsible for having a lawful basis to submit candidate resumes to us.

5. Data Retention

Resume text and evaluation results are retained for as long as your workspace exists so you can review candidate history across batches. Deleting a job removes its candidate evaluations immediately; deleting your account removes every workspace you own together with all jobs, resume data and evaluations.

6. Security

Passwords are hashed with bcrypt, authentication uses httpOnly session cookies with CSRF protection, sessions can be revoked instantly, sensitive endpoints are rate-limited, and all traffic is encrypted in transit via HTTPS.

7. Your Data Rights (GDPR)

Wherever you live, you can exercise all of the following rights free of charge:

• Right of access: Ask us for a copy of the personal data we hold about you.
• Right to rectification: Correct inaccurate account details at any time from your Account page.
• Right to erasure: Delete your account and all associated data yourself from Account & Privacy → Delete my account & data, or email us.
• Right to data portability: Request a machine-readable export of your account, jobs and evaluations. Candidate results can also be exported as CSV at any time.
• Right to restrict or object: Ask us to pause processing, or object to processing based on legitimate interest.
• Right to withdraw consent: Change or withdraw your cookie consent at any time using the button below.
• Right to complain: Lodge a complaint with your local data protection authority.

8. Cookies We Use

Strictly necessary cookies are required for you to sign in and stay secure, so they cannot be switched off. Analytics and marketing cookies are only ever set after you opt in — nothing non-essential loads before you consent.

9. International Transfers & Sub-processors

We use trusted providers to run the service: a cloud hosting provider, MongoDB for storage, an AI provider for resume evaluation, Resend for transactional email, and Razorpay for payments. Where data is transferred outside your region, it is covered by the provider's standard contractual clauses.

10. Contact

Privacy questions, access requests and erasure requests can be sent to support@hireqix.com.