Privacy Policy

Hirvyn is recruitment software. Two different groups of people appear in it, and the rules differ for each.

Recruiters — the people who sign up and use the product. We decide what we collect about you, and this policy governs it directly.

Candidates — people whose resumes a recruiter uploads. We hold that data on the recruiter's behalf. Under India's Digital Personal Data Protection Act, the recruiter's organisation is the Data Fiduciary and decides why the data is held; we act on their instructions. If you are a candidate, the section further down explains how to reach the right party.

Your name, work email, organisation name and industry, and a hashed password (we never store the password itself). If you use Google sign-in, we receive your name, email address and profile picture from Google instead.

We also keep an audit log of significant actions in your workspace — who created a job, who changed an application's status, who exported or erased a candidate — so you can answer those questions later.

Whatever a recruiter uploads or enters. In practice that means the resume file itself, plus the details extracted from it: name, email address, phone number, location, current employer and title, years of experience, notice period, expected salary, and skills.

It also includes anything generated as the application progresses — match scores and their reasoning, screening conversations, interview notes and summaries, and a record of messages sent.

We do not buy candidate data, scrape it from job boards or social networks, or add to it from outside sources. Everything in a workspace was put there by that workspace.

Resume text and job descriptions are sent to Anthropic's API to be parsed, scored and summarised. That means candidate resume content leaves our servers and is processed in the United States.

Anthropic does not use data submitted through its API to train its models. We do not use your data or your candidates' data to train any model, and we do not share one customer's data with another.

On the Free plan, AI features run on local heuristics instead and no resume content is sent to any AI provider.

These are the only third parties that handle data from Hirvyn:

We do not sell personal data, and we do not share it with advertisers or data brokers.

Every workspace is isolated. A recruiter can only ever read candidates belonging to their own organisation, and that boundary is enforced on the server for every request, not in the interface.

Traffic is encrypted in transit. Passwords are hashed with bcrypt. Password reset links are stored only as a hash, expire in an hour, work once, and end any session that was open before the change.

No system is perfectly secure, and we would rather say so than imply otherwise. If you find a vulnerability, email priyanshu@hirvyn.com and we will respond.

Candidate data stays until the recruiter deletes it or closes the account. Deleting a candidate removes their record and their resume file. The audit log keeps a note that an erasure happened, with the acting user and the time — never the erased personal data itself — because a deletion nobody can evidence is not much use to anyone.

Closing your account removes your workspace and its candidate data. Payment records are kept as long as tax and accounting rules require.

If you are a recruiter: every candidate profile has an export that returns everything held about that person as JSON, and an erase action that removes it. You do not need to email us to exercise either — the product does it, because you may need to answer a request from a candidate quickly.

To access, correct or delete your own account data, or to object to how we handle it, email priyanshu@hirvyn.com.

If you are a candidate: the organisation that uploaded your resume decides why it is held, so start with them — they can export or erase your record themselves. If you cannot identify or reach them, email priyanshu@hirvyn.com and we will help route the request. We will not delete a customer's data without their involvement unless the law requires it.

We use no advertising cookies, no analytics cookies and no third-party trackers. Your session is kept in your browser's local storage so you stay signed in, and your currency preference on the pricing page is remembered the same way. Nothing else is stored on your device, and nothing follows you off this site.

If this policy changes in a way that materially affects you, we will email account holders rather than quietly update the date at the top.

Hirvyn — priyanshu@hirvyn.com. We aim to answer privacy requests within 30 days, and usually much sooner.