PRIVACY POLICY

This Privacy Policy describes how HIRICA X ("we," "us," "our") collects, uses, stores, and protects your personal data when you use the HIRICA X platform ("Platform").

HIRICA X is a fully automated SaaS platform. No human-led consulting, recruiting, or manual evaluation services are provided. All data processing is performed through automated software systems.

Account Data: Name, email address, organization name, and role information provided during registration.

Billing Data: Payment and billing information is collected and processed by Paddle.com Market Limited ("Paddle"), our Merchant of Record. We do not directly store your payment card details. Paddle's handling of your payment data is governed by Paddle's Privacy Policy.

Interview Data: Audio recordings, AI-generated transcripts, behavioral analysis results, sentiment scores, candidate assessments, and AI-generated summaries. All interview recordings require explicit candidate consent before collection.

Usage Data: Platform interaction data, feature usage analytics, session duration, device information, IP address, and performance metrics collected automatically.

We process personal data for the following purposes:

• Conducting and analyzing AI-powered interviews
• Generating candidate assessment reports and scorecards
• Managing your account and subscriptions
• Improving our AI models using anonymized, de-identified data only
• Communicating service updates, billing notifications, and support responses
• Ensuring platform security and preventing misuse
• Complying with legal and regulatory obligations

HIRICA X may use anonymized interview data to improve its AI systems. Before any data enters our training pipeline:

• All personally identifiable information (names, emails, phone numbers, company names) is stripped using automated PII detection.
• Data is replaced with anonymous tokens ([CANDIDATE], [COMPANY]).
• Every anonymization operation is logged for audit compliance.
• Original PII is never used in model training or shared with third parties.

Interview data is stored in encrypted databases. Audio recordings are stored in encrypted object storage. All data is transmitted via TLS 1.3 encryption. We implement role-based access controls and conduct regular security reviews. Data is retained for the duration of your subscription plus 90 days for data export purposes.

We use the following third-party services to operate the Platform:

Each processor is contractually bound to process data only as instructed and to maintain appropriate security measures.

Depending on your jurisdiction, you may have the right to:

• Access — Request a copy of your personal data.
• Rectification — Correct inaccurate or incomplete data.
• Erasure — Request deletion of your personal data ("right to be forgotten").
• Portability — Export your data in a machine-readable format.
• Objection — Object to data processing for specific purposes.
• Restriction — Request restriction of processing under certain conditions.
• Non-discrimination — Exercise your rights without service degradation (CCPA).

To exercise any of these rights, contact support@hiricax.com. We respond to all requests within 30 days as required by applicable law.

Candidates whose interviews are conducted on HIRICA X have the right to: (a) be informed that the interview is AI-conducted and recorded (consent is obtained before any recording begins); (b) request access to their interview transcript and assessment; (c) request deletion of their interview data; (d) withdraw consent at any time.

Candidate data requests should be directed to the hiring organization, which can process them through the Platform, or to us directly at support@hiricax.com.

We use essential cookies for authentication, session management, and user preferences. We use minimal analytics cookies to understand Platform usage. No third-party advertising or tracking cookies are used. You can manage cookie preferences through your browser settings.

In the event of a data breach affecting personal data, we will: (a) notify affected users within 72 hours of becoming aware; (b) notify relevant supervisory authorities as required by applicable law; (c) provide details of the breach, its potential impact, and remediation steps taken.

Data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards, including Standard Contractual Clauses (SCCs) where required, are in place for all international data transfers in compliance with GDPR and other applicable regulations.

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days in advance. The updated policy will be effective from the date stated at the top of this page.

For privacy-related inquiries, data requests, or questions about this policy:
HIRICA X
Data Protection Contact: support@hiricax.com
Website: hiricax.com