Privacy Policy & Candidate Protection

1. Overview & Commitment to Privacy

HireZeo Inc. (“HireZeo,” “we,” “us,” or “our”) provides a multi-tenant asynchronous candidate screening platform utilized by recruiting organizations (“Customers”) to evaluate job applicants (“Candidates”).

We treat Candidate privacy as an uncompromising engineering requirement. We do not require Candidates to create accounts, we never sell Candidate data to data brokers or advertisers, and we do not perform invasive biometric profiling.

2. Information We Collect

Depending on the position and configuration chosen by the hiring organization, we process:

• Candidate Identification: Name, email address, phone number, and location details provided during the intake form.
• Uploaded Documents: Resumes, CVs, portfolio links, and certifications uploaded by the candidate.
• Assessment Responses: Multiple choice selections, open-ended textual answers, and code submissions.
• Technical Session Data: IP address, browser user-agent, operating system, and camera/mic device permissions necessary to facilitate WebRTC recording.

3. Video, Audio & Assessment Media

When a candidate completes a virtual video interview, their browser streams video and audio chunks directly to private, encrypted Supabase storage buckets. Candidates are provided with transparent preparation timers (30 seconds) and live viewfinder previews before recording starts.

We do not use facial recognition, emotional sentiment AI, or polygraph algorithms. Video recordings are evaluated solely by designated human reviewers belonging to the hiring organization.

4. Candidate Rights & GDPR Article 17 (Right to be Forgotten)

Under the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), Candidates have the following rights:

• Right of Access: You may request a copy of all personal data submitted to the hiring organization.
• Right to Rectification: You may correct inaccurate or incomplete intake information.
• Right to Erasure (Right to be Forgotten): Candidates can request immediate, permanent deletion of all videos, resumes, and scores. HireZeo provides a 1-click purge mechanism that immediately expunges personal records and invalidates guest tokens.

5. Automated Retention Schedules & Purging

Hiring organizations configure automated data retention rules (e.g. 30, 60, 90, 180, or 365 days). Upon reaching the retention expiration threshold, our automated background purge worker permanently deletes video recordings and candidate resumes from cloud storage.

6. Storage Security & 15-Minute Expiring Signed URLs

Candidate resumes and interview videos are stored in private cloud buckets with zero public internet access. Authorized reviewers access files strictly through short-lived cryptographic signed URLs that expire after 15 minutes.

7. Authorized Sub-processors

We work with trusted enterprise infrastructure providers under strict Data Processing Agreements:

• Supabase Inc. / AWS: PostgreSQL database hosting and private S3 object storage (Frankfurt, EU & N. Virginia, US).
• Vercel Inc.: Application edge routing and serverless function deployment.

8. Cookie Policy

We use strictly essential cookies and local storage tokens required for platform security, user authentication, and candidate session continuity. We do not load third-party ad-tracking pixels or cross-site tracking cookies.

9. Data Protection Officer (DPO) Contact

For data subject requests or inquiries regarding our compliance posture, contact our Data Protection Officer: