Privacy Policy

HR Mitra is a hiring assistant for HR professionals and recruiters. It reads job descriptions and CVs, screens candidates against the job, and can hold a short AI voice interview with a shortlisted candidate. This policy explains what personal data we handle when you use HR Mitra, and what we do with it. We follow India's Digital Personal Data Protection Act, 2023.

• HR users (you, if you have an account). For your account data we decide what is collected and why.
• Candidates whose CVs an HR user uploads. The HR user decides to collect and screen that data; HR Mitra processes it on their behalf and only for that purpose. If you are a candidate, the hiring team you applied to is your first point of contact, and you can also write to us.

• Account: your name, email address, company name (optional) and a securely hashed password. We never store your password itself.
• Your work: the openings you create, job descriptions you paste or upload, and your decisions on candidates.
• Candidate data: CV files and what is read from them (name, contact details, experience, skills, education), screening results, pre-screen questions, and, for the voice interview, the call recording, transcript and assessment, and three small camera photos per call (the interview needs the camera). Photos are only shown to the hiring team; no face recognition is run on them.
• Feedback: reports, ratings and messages you send us, with the page you sent them from.
• Technical data: IP address, sign-in times and a record of security-relevant actions (such as downloading a CV), kept to protect your account.

We use one essential cookie, to keep you signed in. We do not use advertising or tracking cookies, and we do not sell personal data.

• To run the service: screening CVs, writing questions, holding interviews.
• To keep accounts secure: sign-in codes, lockouts after failed attempts, audit logs.
• To send the emails the service needs: confirmation codes, interview links, results.
• To fix problems and improve the product, using the reports and ratings you send.

The AI gives a recommendation. The hiring decision is always made by the HR user, who can override it.

We use a small number of service providers, each only for its part of the job:

• OpenAI, to read job descriptions and CVs, screen them, and run and transcribe the voice interview. Data sent through its API is not used to train its models.
• Google Cloud, where the application, database and files are hosted.
• Resend, to deliver emails.
• Sentry, to report application errors. Error reports are scrubbed of personal data before they leave our servers.
• Cloudflare, for the bot check on sign-up and password reset, and to count visits to our public pages (Cloudflare Web Analytics). Visits are counted without cookies and without identifying you, and never on the signed-in app or a candidate’s interview page.

Some of these providers may process data outside India. We share data only as needed to provide the service, or when the law requires it.

• Candidate data is forgotten 180 days after upload: the CV file, the details read from it, the quotes used as evidence and any interview recording and photos are deleted. An HR user can also erase a candidate at any time.
• Your account is kept while it is open. When it is deleted, your openings, candidates and feedback go with it.
• Free plan usage is kept after an account is deleted: how many CVs, openings and AI phone screens were used, against a one-way hash of your email address, never the address itself. It exists only so the free plan cannot be claimed again by signing up afresh.
• Security records are kept for as long as they are needed to protect accounts, and contain no candidate data.

You can ask to see, correct or delete your personal data, withdraw consent, or raise a complaint. You can change your name and company on your profile at any time. For anything else, including requests from candidates, use our contact page. We reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Data is encrypted in transit and at rest. Files are kept in private storage, candidate data is visible only to the HR user who uploaded it, and our own team looks at it only to fix a problem you have reported.

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.