Privacy Policy
Last updated: September 2026
At HireHoo, your privacy matters. This policy explains what data we collect, why we collect it, and how we protect it.
Who We Are
HireHoo is owned and operated by Riwano Fariz Pilakkattu, who is the data fiduciary (India) and data controller (Saudi Arabia, UAE) for the personal data described here. This policy is written to meet India's Digital Personal Data Protection Act, 2023, and the personal data protection laws of Saudi Arabia and the UAE, since we serve candidates and recruiters in all three markets.
Information We Collect
Account details you give us (name, email, and authentication data); the career information you put into the product (resume content, target role and region, work experience); what you produce while using it (interview answers and transcripts, scores, skill assessments, generated resumes); billing records for any purchase (plan, amount, currency, gateway reference — never your card number, which stays with the payment gateway); and operational records such as usage counters, rate-limit counters, and AI usage logs. If you answer by voice, the recording is sent for transcription and nothing more: we keep the text it produces, never the audio, which is not stored on our systems at any point.
How We Use Your Information
To run the product and deliver the features you asked for — resume analysis, the resume builder, Interview Mentor, GCC Coach, Arena competitions, and recruiter batch analysis; to send service-related email; to enforce fair-use limits and prevent abuse; to understand and control what our AI providers cost us; and to meet tax and accounting obligations on purchases. We do not sell your personal data, and we do not use your resume or interview content to train any model of our own. It is sent to the AI providers listed below solely to generate your results, and is handled under their terms.
Who We Share It With
We use these processors, and only these: Supabase (authentication, database, and vector search); OpenRouter and Anthropic (the AI providers that generate analysis, questions, feedback, and scores from the text you submit); Tavily (a web-search service we send the topic of a technical interview question to — never your answer, your resume, or anything identifying you — so that scoring can be checked against current sources); Deepgram (speech-to-text for answers you choose to record by voice, and the synthesized voice that reads questions aloud in Skill Studio — neither is used if you type your answers and mute the voice); PayU (payments); Resend (transactional email); Sentry (backend error tracking); Vercel (frontend hosting); and Cloudflare Turnstile (bot protection on our anonymous trial upload). Recruiters who upload your resume to a job or Arena see the analysis of it. Nobody else receives your data.
Where Your Data Goes
Our infrastructure and AI providers operate outside India and outside the GCC, mainly in the United States, so using HireHoo involves transferring your personal data across borders. We do this on the basis of your consent together with contractual data-protection commitments from each provider listed above. If you are in Saudi Arabia or the UAE and are not comfortable with that transfer, please do not submit personal data to the platform — the AI features cannot work without it.
How Long We Keep It
Account and career data: for as long as your account exists. AI usage logs: 90 days, then automatically purged. Usage and rate-limit counters: for the current metering window. Billing records: retained for up to 8 years after the transaction because tax and accounting law requires it — but see the next section for what those records look like after you delete your account.
Deleting Your Account
When your account is deleted we erase your identity, your resume content and the search embeddings built from it, your interview transcripts, answers and scores, your AI usage logs, and your usage and rate-limit counters. We keep the billing record of any purchase, with your account link removed, so what survives is an anonymous ledger line — gateway, plan, amount, date — with no name, email, address, or card data in it, because those records were built never to contain any. That anonymised record is what our tax and accounting obligations require, and it can no longer be traced back to you. Note that deletion also removes the usage evidence a refund request is assessed against, so please settle any open refund first — see our Refund Policy.
Your Rights
You can ask us for access to your personal data, correct or complete it, or have it erased. You can withdraw your consent, which means deleting your account, since the AI features cannot operate without your data. Email privacy@hirehoo.com from your registered address and we will respond within 7 working days. We can only act on requests that come from the address on the account — that check protects you. These requests are handled by a person, not a button in the app; we would rather tell you that than leave you looking for a setting that does not exist.
Data Security
Data is encrypted in transit and at rest by our infrastructure providers. Access to production data is limited to the platform owner. Database-level access rules keep your resume and interview content out of every other user's reach, and card details never touch our systems — payment gateways collect them on their own hosted pages.
Grievances & Contact
For any question, complaint, or rights request about your personal data, contact privacy@hirehoo.com. We acknowledge and respond to grievances within 7 working days. If we ever suffer a personal data breach affecting you, we will notify you and the relevant regulator as the law requires.