Legal

Privacy Policy

Last updated: May 2026

What we collect

HireScan processes candidate CVs, employment history, reference contacts, AI interview transcripts, and account data submitted by employer customers using the platform. We collect only what is necessary to operate AI screening, voice interviewing, and reference verification.

How we use it

Candidate data is used solely for the hiring decision of the employer who uploaded or invited the candidate. We do not sell candidate data, and we do not use it to train shared third-party models.

Where it lives

Default storage is in the EU. Scale and Enterprise customers can opt into GCC-region data residency. Encryption in transit (TLS 1.2+) and at rest (AES-256).

Your rights

Candidates may request access, correction, or deletion of their data at any time by emailing privacy@hirescan.co. Employer admins can export or delete records from their dashboard.

Sub-processors

A current list of sub-processors (Clerk, Stripe, OpenAI, Vapi, Twilio, AWS) is available on request. We bind each to written data-protection terms before sharing any candidate data.

Contact

Questions about this policy? Reach out via /contact or email privacy@hirescan.co.

This page is a working summary while our full data-processing addendum is finalised. Enterprise customers can request the executable DPA today.