Privacy Policy

1. Data We Collect

When you use hiris, we collect the following data:

• CV text and profile data — the content of the CV you upload and the structured Master Profile built during the interview process.
• Account email — used for authentication and account management.
• Session cookies — set by our authentication provider to keep you signed in.
• Usage data — if you consent to analytics, we may collect anonymised interaction data to improve the service.

2. How We Use Your Data

• To process your CV text with AI models and generate tailored CVs.
• To store your Master Profile so you can access it across sessions.
• To authenticate you and maintain your account.
• To improve the platform based on aggregated, anonymised usage patterns (analytics-only, with your consent).

We do not sell your personal data to third parties.

3. Data Storage

Your data is stored in Supabase, a managed database platform. Data is encrypted at rest and in transit. We use the EU region where available.

4. Third-Party Services

To operate the service, we share relevant data with the following third parties:

• AI Providers — your CV content is sent to one of the following AI providers (depending on configuration): Google Gemini or Anthropic Claude. Their respective privacy policies apply. Your data is sent via API for processing only and is never used to train these models.
• Supabase — handles authentication and database storage.
• Vercel — hosts and serves the application.

5. Data Retention

Your Master Profile and generated CVs are retained until you delete your account or manually remove them from the application. CV files uploaded for parsing are not stored long-term — they are processed in memory and discarded after extraction.

6. Your Rights (GDPR)

If you are based in the European Economic Area, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your personal data.
• Portability — request your data in a portable format.
• Objection — object to processing of your data for certain purposes.

To exercise these rights, contact us at privacy@hiris.online.

7. Cookies

We use session cookies set by Supabase for authentication purposes. These are strictly necessary for the service to function. We do not use any advertising or tracking cookies by default. If you choose to "Accept All" in the cookie banner, we may set analytics cookies to understand how users interact with the platform.

8. Contact

For any privacy-related questions or requests, please contact us at privacy@hiris.online.

9. AI Usage & Training Data

hiris processes your CV text and profile data using third-party AI APIs (Google Gemini, Anthropic Claude via Vercel AI SDK) solely to generate tailored CVs for you.

We do NOT use your uploaded CVs, Master Profile, or any personal data to train, fine-tune, or improve any AI models — our own or those of our AI providers. API-based calls are governed by providers' API usage policies, which prohibit using API inputs for model training without explicit opt-in.