1. Who We Are
HireSprint is operated by RishantTech Private Limited, registered in India. We act as a data processor when processing candidate data on behalf of recruitment agencies/organizations (data fiduciaries) and as a data fiduciary for candidate accounts on our platform.
2. What Data We Collect
From agents/organizations:
- Account information: name, email, phone, job role, company details
- Uploaded candidate resumes (PDF/DOCX)
- Usage data: features used, actions taken
From candidates:
- Resume data: name, contact, experience, skills, education (parsed by AI)
- Assessment answers and scores
- Job preferences: level, work mode, locations, salary range, notice period
- Payment information (processed by Razorpay — we do not store card details)
3. How We Use Your Data
- Resume parsing and AI-powered scoring
- Skills assessment and grading
- Candidate-job matching and consented auto-apply
- Sending transactional emails (invites, results, confirmations)
- Generating analytics and insights for agents
- Improving our AI models (using anonymized, aggregated data only)
4. What We Do NOT Use for Scoring
The following attributes are never used as scoring signals:
- Name, photograph, age, date of birth
- Gender, marital status, religion, caste
- College or university name, tier, or ranking
- Nationality or visa status
5. Who We Share Data With
- Partner companies: Only the companies you explicitly approve via auto-apply. You control what is shared (resume, phone, salary — each opt-in)
- AI providers: For scoring and grading. Data is sent for processing only, not stored by providers
- Razorpay: For payment processing
- SendGrid: For email delivery
- We never sell your data to third parties
6. Data Retention
- Active account data: retained while the account is active
- Inactive accounts: data deleted 12 months after last activity
- Consent logs: retained for 5 years (legal requirement)
- Payment records: retained for 8 years (tax/accounting requirement)
7. Your Rights (DPDP Act 2023)
- Right to access: View all your data from your dashboard
- Right to correction: Update your profile and preferences anytime
- Right to erasure: Request deletion from Privacy & Data settings. We delete within 72 hours
- Right to data portability: Download all your data as a ZIP file
- Right to withdraw consent: Withdraw specific consents from your dashboard
8. Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.
9. Security
- All data encrypted in transit (TLS) and at rest
- Firebase Auth for authentication
- Role-based access control with org-scoped data isolation
- Audit logs for all data access and changes
10. Children
HireSprint is not intended for use by anyone under 18 years of age.
11. Changes to This Policy
We will notify you via email of any material changes to this policy at least 30 days in advance.
12. Contact
Data Protection Officer: privacy@hiresprint.in
Questions about this policy? Email legal@hiresprint.in.