1. Introduction to Privacy Policy
This Privacy Policy ("Privacy Policy") applies to your use of the HiremeClub website located at hiremeclub.com ("Website") and HiremeClub's web and packaged applications ("Platform"). It also applies to the recruitment automation and AI-assisted screening services offered by HiremeClub. It does not apply to third-party websites linked from our properties or any relationship you choose to establish with employers or candidates independently of HiremeClub.
The terms "we," "our," and "us" refer to Hirepreneurs Technologies Private Limited (operating HiremeClub). "You" refers to recruiters, admins, collaborators, or other Workspace users authorised on your HiremeClub account. Candidate information is largely processed on your organisation's behalf as described herein and in applicable product terms.
Unless we say otherwise, "Personal Information" / "Personal Data" means information relating to identified or identifiable natural persons—including names, phones, business emails, account identifiers, and other data appended to Candidate records you instruct us to process.
We strive to enforce reasonable safeguards appropriate to how we operate the Platform and an India-first privacy posture—including alignment with India's Digital Personal Data Protection Act, 2023 ("DPDP"). Transmission over open networks inherently carries risk; we therefore cannot promise absolute confidentiality of data in motion, despite reasonable protection measures.
By browsing the Website or using the Platform, you acknowledge this Privacy Policy. If you disagree with what we outline here—or with contractual terms referencing this document—please discontinue access and terminate your subscription per your agreement.
HiremeClub Terms & Conditions are an integral part of your contractual relationship with us—read them alongside this Privacy Policy.
2. Information we collect and how we use it
We collect and store Workspace and Candidate data as enabled by features you licence. Limiting what we collect proportionate to lawful business needs is foundational to HiremeClub: if we want to process information for materially new purposes incompatible with prior notice, we will seek any consent or other lawful basis applicable under DPDP before doing so—unless exemptions already exist where you act as recruiter controller.
Personal Information you share with HiremeClub is utilised to onboard your account, fulfil subscriptions you purchase, analyse product usage securely, troubleshoot errors, customise your experience inside the ATS, safeguard our infrastructure, fulfil payment obligations via payment aggregators/gateways whose terms govern card data—not retained on our databases as full card numbers—and uphold our Terms while satisfying regulatory orders when served on us where we are obligated to disclose.
From recruiters & Workspace administrators
- Profile & tenancy: Name, designation, business email, workplace phone number, Workspace name, authorised seat licences, SSO or session tokens (where applicable).
- Billing: Plan tier, invoicing artefacts, and a tokenised fingerprint for successful charges—actual card PAN data remains with PSPs.
- Product telemetry: Feature usage timestamps, IP, coarse device fingerprints, referrer URLs capturing how you traverse the recruiter console so we can optimise performance.
- Support: Interactions routed through ticketing, chats, escalation bridges to help us resolve outages.
Candidate résumés, AI outputs, collaborations
- Structured résumés, attachments, recruiter tags, ATS columns, disqualification reasons.
- Model-generated scores / narratives about candidate fit when you intentionally trigger AI runs.
- Video interview artefacts—including recordings and transcripts—for roles where you utilise our video screening module(s).
- Optional WhatsApp session metadata outlined in §4 when you opt into those modules.
Activity telemetry
HiremeClub logs behavioural signals for security monitoring (searches run, job filters, export actions, referrer routes, hashed IP, approximate coarse geolocation) to hunt anomalous access. Aggregated summaries may not identify individuals. We derive intellectual property rights in dashboards, aggregated insights, aggregated templates, aggregated analytics, aggregated AI evaluation statistics but not Candidate raw dossiers—you cannot claim ownership.
3. Purposes tied to lawful processing
Candidate processing generally occurs pursuant to recruiter instructions—you remain responsible for notifying candidates pursuant to Articles in DPDP and other laws if you onboard them onto HiremeClub-hosted outreach.
- Recruitment: Search, nurture, disposition, CRM syncing, recruiter collaboration.
- AI-assisted evaluation: Parsing résumés, scoring, conversational interviews, benchmarking within your Workspace—not as fully automated statutory decision-making devoid of recruiter review unless you customise otherwise knowingly.
- Communications: Operational emails, onboarding nudges, limited marketing with opt-out respecting electronic regulations.
- Security: Session integrity, brute-force guarding, fraud anomaly detection leveraging aggregate heuristics—mirroring safeguards described herein.
- Legal/regulatory obligations: Government or court orders compel narrower subsets of data—we review each request narrowly.
If HiremeClub plans to materially expand processing that meaningfully contradicts summaries in this Privacy Policy beyond what your Terms authorise today, notice will precede rollout when law obliges us—even if recruiters continue using features post-notice implying acceptance akin to counterpart commercial privacy instruments.
Section 3(a) — Use of HiremeClub services through external AI assistants ("MCP connectors")
HiremeClub may optionally allow you—if we ship such tooling—to interoperate HiremeClub actions through integrations that speak the Model Context Protocol ("MCP") on third-party AI platforms (examples include hosted chat assistants surfaced by frontier LLM vendors operating their own infrastructures). MCP connectors transmit only the payloads or instructions strictly required to fulfil the operation you knowingly dispatch from whichever AI surface you utilise. HiremeClub processes MCP traffic solely to authenticate the action, fulfil the recruiter query, and maintain logging for security—not to broaden commercial profiling unrelated to Workspace delivery.
You remain bound by whichever LLM/host platform policies govern their environment when you expose chat prompts thereto; HiremeClub does not assert control over their training or retention regimes. If you revoke optional integrations, MCP routes disappear while standard browser Product access may continue unaffected.
4. Candidate messaging integrations (WhatsApp)
WhatsApp-aligned capabilities may appear as optional modules permitting bulk yet personalised, lawful candidate engagements—delivery receipts, failover templates, conversational templates with candidate tokens. Connection strings are salted; when an integration shuts down tokens are destroyed within policy SLAs communicated on each release note.
Data elements
- Masked session handles from WhatsApp Business APIs.
- Candidate phone numbers surfaced per your uploads.
- Template metadata (role name, interviewer, brand signature blocks).
- Delivery / read confirmations for compliance dossiers recruiters maintain.
5. Recipients, transfers, safeguards
HiremeClub does not sell Personal Data tied to recruiters or Workspace Candidates.
- Sub-processors: Trusted cloud hyperscalars, NLP providers, notification vendors, MCP gateway hosts—all subject to onward transfer safeguards and our internal vendor risk questionnaires.
- Workspace collaborators: Administrators control seat allowances; access logging indicates who glimpsed Candidate dossiers relevant to auditing.
- Lawful authorities: Under Indian law—including DPDP’s statutory carve-outs—we may surrender narrow datasets when subpoenas outweigh privacy tests we perform internally ahead of complying.
- Acquisitions: In control transactions, transferees agree to materially consistent confidentiality obligations or we insist on divestiture of data they cannot responsibly steward.
6. Exercise of rights
Pursuant to DPDP—as applicable to recruiters who are Indians or act on behalf of operations largely inside India—we facilitate access/correction/delete/portability/export requests emanating from recruiter administrators for Workspace-scoped Candidate data they control alongside our records about their billing identity—subject to legal retention freezes.
Candidates ordinarily must approach the recruiter as first port of call for erasure—they own the relationship—but we cooperate if they supply proof they correspond to a known record and the recruiting entity authorises remediation.