HelloHR ("we", "us", "our") operates a recruitment marketplace connecting companies, freelance recruiters, and candidates across India. This policy explains what personal data we collect, why, how it's used and shared, and the rights you have over it, in line with India's Digital Personal Data Protection Act, 2023.
1. Information we collect
What we collect depends on how you use HelloHR:
- Companies: company name, contact person name, work email, phone number, industry, size, and payment details processed by our payment partner (we do not store your card or bank details ourselves).
- Recruiters: name, email, phone number, specializations, a password (stored as an irreversible hash, never in plain text) or Google account info if you sign in with Google, plus every candidate resume and detail you upload.
- Candidates: name, phone number, and, if you choose to register, your email and password (or Google account info), resume file and extracted resume text, application history, and location/experience details you or a recruiter provide.
- Everyone: one-time verification codes (OTPs) sent to your email or phone, temporarily stored to confirm the code you entered matches, and basic session identifiers stored in your browser's cookies to keep you signed in.
2. How we use your information
- To create and secure your account, and verify your email/phone ownership
- To match candidates to relevant roles, and roles to relevant recruiters
- To let companies discover and, after spending a credit, view a candidate's full profile
- To calculate and pay out recruiter commissions, and referral bonuses between recruiters
- To send transactional emails and SMS — OTPs, status updates on your applications or submissions, and account notifications
- To detect and prevent duplicate or fraudulent candidate submissions
3. How your information is shared
We do not sell your personal data. It is shared only as needed to operate the marketplace:
- A candidate's full profile (contact details, resume, work history) becomes visible to a company only after that company spends a credit to unlock it.
- A recruiter can see and manage the candidates they've added, and the status of roles they've submitted a candidate to.
- We share data with the service providers who help us run HelloHR: Supabase (database and file storage), Vercel (hosting), Google (sign-in, if you use it), our email and SMS providers (for OTPs and notifications), and our payment processor (for company credit purchases). Each only receives what they need to provide their service.
- We may disclose information if required by law, or to protect the rights, safety, or property of HelloHR, our users, or the public.
4. Data security
Passwords are hashed using bcrypt and are never stored or transmitted in plain text. Access to our database bypasses public access entirely and is restricted to authenticated server-side services. That said, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
5. Cookies
We use cookies to keep you signed in to your account (recruiter, company, or candidate) between visits. These cookies store an account identifier and expire automatically after 30 days or when you log out. We do not use third-party advertising or tracking cookies.
6. Data retention
We retain your data for as long as your account is active, or as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time by contacting us (see Section 8).
7. Your rights
You have the right to access, correct, or request deletion of your personal data, and to withdraw consent for its processing where applicable. To exercise any of these rights, contact us using the details below.
8. Grievance Officer & Contact
For any privacy-related questions, complaints, or data requests, please contact our Grievance Officer at hellohrin@gmail.com. We aim to acknowledge grievances within a reasonable time as required under applicable law.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of HelloHR after changes take effect constitutes acceptance of the revised policy.