Privacy Policy

1. Introduction

This policy explains how Hirevo handles personal data. It is written for two audiences: the people who create accounts and use Hirevo (“customers”, “you”), and the candidates whose resumes customers upload. Where a clause applies to only one of them, it says so.

2. Who operates Hirevo

Hirevo is operated by Shrijal Goswami, an individual operating the Hirevo service from Madhya Pradesh, India (“Hirevo”, “we”, “us”). Hirevo is a brand name, not a registered company. For privacy questions and requests, write to hello@hirevo.in.

3. Scope

This policy covers the Hirevo website, web application and API. It does not cover third-party sites we link to, or the practices of a customer organization that uploads data into Hirevo — that organization is responsible for its own notices to candidates.

4. Information we collect

From customers and their team members:

• Account information: name and email address, and the password you choose. Passwords are stored by our authentication provider in hashed form and are never readable by us.
• Authentication information: session tokens, sign-in events, one-time sign-in links you request, and whether an identity provider is used for single sign-on.
• Workspace information: the organization you create or join, your role in it, the members you invite, plan and credit balances, API keys (stored hashed) and settings.
• Job descriptions and role information you enter.
• Usage and activity information: the roles you create, resumes you upload, analyses you run, comparisons, Copilot questions, decisions you record and who recorded them, and the audit log of actions in the workspace.
• Payment and subscription information: the plan you buy, transaction references, invoices and payment status. Card and bank details are entered on Razorpay’s payment pages and are not received or stored by Hirevo.
• Technical and log information: IP address, browser and device type, pages requested, timestamps, and error and performance logs generated by our hosting providers.
• Support communications: what you send us by email or through the Help & Support form, and our replies.

From resumes and other material that a customer uploads:

• Whatever the resume contains — typically the candidate’s name, contact details, employment history, education, skills and projects. Candidates may also be named in notes a customer writes.
• The analysis Hirevo generates from it for the customer: scores, match categories, extracted skills, strengths, gaps, summaries, comparisons and interview packs.
• The original file, so a recruiter can open what the candidate actually sent.

We do not ask for sensitive personal data such as health, biometric or financial information, and the service is not designed to hold it. Customers are required not to upload it.

5. How we use information

• To provide the service: parsing resumes, analysing them against a role, ranking, comparing, generating interview packs and answering Copilot questions.
• To create and secure accounts, authenticate sign-ins and prevent abuse.
• To run workspaces: seats, roles, permissions, credits and plan limits.
• To bill customers on paid plans and keep the records tax law requires.
• To respond to support requests and rights requests.
• To operate, monitor and improve the reliability and performance of the service, using aggregate usage and error information.
• To send service messages — sign-in links, invitations, billing notices and changes to these documents. We do not send marketing email.
• To comply with law and enforce our Terms.

6. AI processing

Hirevo uses large language models to read resumes, match them to a role, score and rank candidates, compare them, generate summaries and interview packs, and answer questions about your pipeline. To do this, resume text, job descriptions and related workspace content are sent to our AI inference provider, listed in clause 10, and the results are stored in your workspace.

• AI outputs are decision-support tools. They may contain errors, omissions or inaccuracies, and Hirevo does not guarantee that a score, match, ranking, recommendation or summary is correct.
• Customers are responsible for reviewing outputs and for their own hiring decisions. Hirevo does not make employment decisions about candidates.
• We do not use customer content — resumes, notes or decisions — to train AI models that serve anyone other than that workspace, and we do not permit our AI provider to use it for that purpose.
• We have not completed a formal bias audit of the analysis and do not claim one.

7. Candidate and resume data

If you are a candidate: Hirevo holds your resume because an organization that is considering you uploaded it. That organization decides why your data is processed and is the party responsible to you for it; Hirevo processes it on their behalf, only to provide the service to them, and does not use it for anything else. Hirevo does not own your resume, does not sell it, and does not enrich it from other sources.

The fastest way to have your data corrected or removed is to ask the organization that uploaded it. You can also write to us at hello@hirevo.in; we will pass your request to that organization and help them respond, and where we can act directly, we will.

8. Customer responsibilities for candidate data

If you are a customer: you are responsible for having the authority and a lawful basis to upload each resume and to have it analysed, for giving candidates any notice the law requires, for responding to their requests, and for deleting candidate data when you no longer need it. Our Terms of Service set this out in full.

9. Lawful basis for processing

For customer and account data, we process personal data because it is necessary to provide the service you asked for, because you have consented (for example when you create an account), to comply with legal obligations such as tax record-keeping, and for our legitimate purposes of securing and improving the service. For candidate data, the customer organization is responsible for the lawful basis; Hirevo processes it under its instructions and our Terms.

Under India’s Digital Personal Data Protection Act, 2023, Hirevo acts as a data fiduciary for customer and account data and as a processor for candidate data uploaded by a customer, who is the data fiduciary for it.

10. Service providers and subprocessors

These are the third parties that process data on our behalf to run Hirevo. We do not share personal data with anyone else except as the law requires.

We will update this table before adding a provider that handles personal data.

11. Authentication and data storage (Supabase)

Accounts, sign-in, the database and resume file storage are provided by Supabase. Your password, if you set one, is stored hashed by Supabase; one-time sign-in links and password-reset links are sent by email through Supabase. Access to each workspace’s data is enforced in the database itself with row-level security, so one organization cannot read another’s data even if the application has a bug.

12. Payments (Razorpay)

Payments are processed by Razorpay. When you buy a plan we pass Razorpay your name or workspace name, your email address and a reference to your workspace and plan so the payment can be matched to your account. Card, UPI and bank details are entered on Razorpay’s own pages and are handled under Razorpay’s privacy policy; Hirevo does not receive them. Razorpay may email you payment receipts directly.

13. Email delivery (Resend)

Messages you send through the Help & Support form inside the product are delivered to our inbox through Resend, together with your account email address so we can reply. Authentication emails are sent through Supabase, as clause 11 describes.

14. AI and model providers

Resume analysis and the other AI features run on Groq, a large-language-model inference provider in the United States. Resume text and job descriptions are sent to Groq to produce the analysis and are not used by Groq to train models. Semantic search uses text embeddings that are computed within our own infrastructure by default; if we enable an external embedding provider, it will be added to the table in clause 10 first.

15. Data retention

• Customer content stays in your workspace until you delete it. You can delete candidates, roles, notes, Copilot conversations and API keys yourself; deleting a candidate or role also removes the stored resume files.
• Account and workspace data is kept while the account exists. There is no self-serve control to delete a whole workspace or account yet; ask us and we will do it.
• When a workspace is closed, we keep its content for a short period so it can be retrieved if you ask, then delete it. We do not run an automatic deletion schedule, so we describe this as a commitment we carry out on request rather than a fixed timer.
• Invoices, payment records and the ledger of credit transactions are kept for as long as tax and accounting law require, which is longer than the rest and cannot be shortened on request.
• Audit logs of workspace actions are kept with the workspace so an account can be investigated after an incident. Technical logs held by our hosting providers are retained for the periods those providers set.

16. Security

Data is encrypted in transit and at rest by our hosting and storage providers. Access within a workspace is enforced at the database with row-level security. API keys are stored as hashes and can be revoked at any time. Administrative access to production is restricted to the people who need it.

We hold no security certification at this time. We are not SOC 2 or ISO 27001 audited, and we would rather tell you that than imply otherwise. No system is perfectly secure; if we learn of a breach affecting your personal data we will notify you and, where the law requires, the relevant authority.

17. Cookies, local storage and session storage

• Cookies: Hirevo sets only the authentication session cookies needed to keep you signed in. They are strictly necessary and are removed when you sign out or the session expires. We set no advertising or cross-site tracking cookies.
• Analytics: in production we use Vercel Web Analytics to count page views. It does not use cookies or identify individuals, and we strip candidate and role identifiers from page URLs before they are sent.
• Local storage: the app keeps some preferences on your own device — for example the currency shown on the pricing page, interface settings, in-app notification state and talent-pool collections. This stays in your browser and is not sent to us.

18. Your rights

Whether or not you have an account, you can ask us to tell you what personal data we hold about you, to correct or update it, to delete it, or to stop or restrict a particular use of it. You can withdraw consent where processing is based on consent, and you can complain to us and, if you are not satisfied, to the data protection authority that applies to you — in India, the Data Protection Board of India.

If you are a candidate, tell us the organization that holds your resume if you know it; it lets us find your data without searching every workspace. Where we are acting for that organization we will pass your request to it and support it in answering. We respond to requests within 30 days and do not charge for them unless a request is repetitive or excessive.

19. Account and data deletion

To delete your account or close your workspace, write to hello@hirevo.in from the email address on the account. We will confirm your identity, close the workspace and delete its content, including uploaded resumes and analyses, except for the records we must keep by law. If your workspace has other members, its administrator must make the request.

20. International processing

Hirevo’s database and stored files are in Singapore. AI inference takes place in the United States, payment processing in India, and the website is delivered through a global content network. If you use Hirevo from another country, your data is transferred to and processed in these locations. We do not currently offer a choice of region.

21. Children’s privacy

Hirevo is a business tool for people aged 18 and over, and we do not knowingly collect personal data from children. If you believe a child’s data has been uploaded to Hirevo, tell us and we will remove it.

22. Changes to this policy

We will post changes here and update the date at the top. Where a change materially affects how we use personal data, account holders will be emailed before it takes effect.

23. Contact and grievances

Privacy questions, rights requests and grievances: hello@hirevo.in (hello@hirevo.in). Please include enough detail for us to find the data concerned. If you are not satisfied with our response you may escalate to the Data Protection Board of India or the authority that applies to you. Other ways to reach us are on our contact page.