Privacy Policy

Who this covers

This policy covers people who practice with Hireflo (candidates) and people who run interviews for a hiring team (customers). Hireflo, Inc. is the controller for accounts we operate. If your employer invites you to a scored interview, they are typically the controller of that session; we process it on their instructions.

What we collect

• Account data: name, email, hashed password or magic-link tokens.
• Interview media: microphone and (if you allow it) camera recordings, transcripts, and scores with cited evidence spans.
• Integrity signals: tab focus, paste events — stored as notes, never as an automatic verdict.
• Usage: plan, credit balance, device and log data needed to run the service.

How we use AI processors

Interview audio and transcripts are sent to subprocessors (currently including OpenAI for realtime conversation, transcription, and assessment) solely to run the interview and produce evidence-linked scores. We do not sell interview content. We do not use your recordings to train a public model.

Retention

Practice recordings stay until you delete them or close the account. Customer-run interviews follow the customer's retention settings, defaulting to 24 months unless a contract says otherwise. Backups rotate on a shorter cycle.

Your rights

You can access, export, or delete your data. Email privacy@hireflo.ai. We aim to respond within 30 days. See also Candidate data rights.

California — Do Not Sell or Share

We do not sell personal information and we do not share it for cross-context behavioral advertising. You can still email privacy@hireflo.ai to make a request.

International transfers

If you are in the UK or EEA, your data may be processed in the United States by us and our subprocessors. We use contractual safeguards (including SCCs where required). Formal transfer assessments are in progress.

Contact

Privacy: privacy@hireflo.ai. General: hello@hireflo.ai.