Last updated: August 8, 2026

Privacy Policy

How AIHire collects, uses, stores, and protects your personal data across our AI-assisted hiring platform.

1. Who We Are

AIHire (“we,” “us,” or “our”) operates an AI-assisted hiring platform that provides anonymized resume screening, semantic matching, bias auditing, and transparency reporting. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.

AIHire is an AI-assisted hiring application. The organization or person operating a particular deployment is responsible for identifying the applicable data controller, retention rules, and contact details. For privacy questions about this deployment, use our contact page. This page describes the application's intended data flows and should be reviewed with the deployment's own legal and security requirements before production use.

2. Information We Collect

We collect information that you provide directly, information generated through your use of our services, and information we receive from third parties. The categories of data we collect include:

Account Information

When you register with an email and password or with Google sign-in, we collect your name and email address. Passwords are never stored in plain text — they are salted and hashed. If you use Google sign-in, authentication is handled by Google.

Resume & Job Data

Uploaded resumes, CVs, cover letters, and job descriptions. This includes any personal information contained within these documents such as education history, employment history, skills, certifications, contact details, and professional references.

Usage & Analytics Data

Interaction logs, feature usage, session duration, error reports, and performance metrics. We use this to improve our platform and detect abuse.

Inferred & Derived Data

Our AI models analyze uploaded documents to extract skills, experience levels, education history, and other professional attributes. This derived data is used exclusively for matching and scoring purposes.

3. How We Use Your Information

We use the data we collect solely to provide, maintain, and improve our hiring platform. Specifically:

To process and score resumes against job descriptions using our AI matching engine
To generate anonymized candidate rankings, fit analyses, and transparency reports
To detect and reduce bias in job descriptions through our bias audit engine
To enable recruiters and candidates to compare skills, experience, and fit scores
To improve the application only where the deployment's documented policy and lawful basis permit it; uploaded content should not be treated as training material by default
To communicate with you about service updates, security notices, and support requests
To comply with legal obligations and enforce our Terms of Service

4. Data Storage & Security

We implement industry-standard technical and organizational measures to protect your data:

Storage encryption

Encryption at rest is a deployment responsibility. Configure encrypted databases, object storage, backups, and volumes before processing production data.

Transport security

Production deployments should use HTTPS and current TLS settings for browser-to-API traffic. Local development may use a different configuration.

Anonymization

Supported personal identifiers detected in uploaded documents can be redacted before matching. Redaction is best-effort and should be checked by a human reviewer.

Access control

Candidate and recruiter workspace access is protected by backend role claims. The deployment operator must also configure API, storage, database, and operator permissions appropriately.

The deployment operator should document its hosting provider, storage location, security controls, retention schedule, and incident-response process. AIHire does not make a blanket certification or breach-notification promise for every deployment. If you are evaluating a hosted instance, ask its operator for the controls that apply to your data.

5. Data Retention & Deletion

Retention depends on the deployment operator's configuration and applicable law. The operator should publish a schedule for account records, uploaded documents, derived analysis, logs, and backups. You can request deletion of personal data through the contact page.

Account data: Retained only while needed for the account or as required by law.
Uploaded documents: Retained according to the active screening and document-retention configuration.
Derived analysis and logs: Retained only for documented operational, security, or legal purposes.
Backups: Deleted according to the deployment's backup lifecycle and recovery requirements.

6. Data Sharing & Disclosure

We do not sell your personal data. We share data only in the following circumstances:

With your consent: When you explicitly authorize sharing (e.g., sharing a screening report with a colleague).
Service providers: A deployment may use infrastructure, email, analytics, or error-monitoring providers. The operator should identify those providers, limit their access, and bind them to appropriate data-protection terms.
Legal compliance: When required by law, court order, or governmental regulation, we will disclose data to the extent required.
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred with notice to you.

7. Your Rights (GDPR, CCPA & Others)

Depending on your jurisdiction, you may have rights regarding your personal data. The applicable controller or deployment operator should verify identity, assess the request, and respond within the period required by applicable law. Rights and deadlines can vary by location and by the organization deciding why the data is processed.

Right to Access

Request a copy of the personal data we hold about you

Right to Rectification

Correct inaccurate or incomplete data

Right to Deletion

Request deletion of your personal data (erasure)

Right to Portability

Receive your data in a machine-readable format

Right to Restrict Processing

Limit how we use your data

Right to Object

Object to processing based on legitimate interests

Right to Withdraw Consent

Withdraw consent at any time, without affecting lawful processing before withdrawal

Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before processing your request. California residents may also designate an authorized agent to make requests on their behalf.

8. AI & Automated Decision-Making

AIHire uses machine learning models to assist with resume screening and candidate matching. This section explains how our AI works and your rights regarding automated decisions.

How Our AI Works

Our matching engine uses a hybrid approach: TF-IDF keyword scoring combined with semantic embeddings (BGE Small EN) to evaluate resume-job fit. It does not use facial recognition, personality profiling, or any biometric data. The system is designed to augment — not replace — human hiring decisions.

Transparency & Explainability

Every scoring decision is explainable. Our transparency reports break down how each candidate's score was calculated, showing TF-IDF contributions, semantic similarity, matched skills, and keyword density. You can always see why a candidate received a particular score.

Bias Detection

Our bias audit engine scans job descriptions for biased language (gender-coded words, age-discriminatory terms, etc.). We also anonymize PII before scoring to reduce unconscious bias. However, no AI system is perfect — we encourage human review of all AI-generated rankings.

If you believe an automated decision has been made in error or wish to appeal, use the contact pageand request human review. The applicable operator should provide the process required by the relevant law.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Use the AIHire contact page to reach the privacy channel for this deployment.

Do not include passwords, access tokens, or full resume contents in an initial request.

The applicable deployment operator will verify the request and apply the response timeline required by law.

Questions about privacy practices? Visit our contact page.

Or read our Terms of Service.