How HireHouse uses your data.

HireHouse (https://hirehouse.xyz) is operated by Fintrix Inc., a corporation incorporated in the Republic of Panama (Folio No. 155776597, Public Registry of Panama). In this policy, Fintrix Inc. is referred to as "HireHouse", "we" or "us".

For questions about this policy or your data, email privacy@hirehouse.xyz. For anything else, hello@hirehouse.xyz.

Two roles. When you apply to a role posted by a company (an "employer") on HireHouse, that employer decides how your application is assessed and is responsible for its hiring decisions; we process your data on its behalf and on its instructions. We are directly responsible for your HireHouse account, your candidate profile, Mockhouse practice, payments, the public jobs board, and the roles HireHouse sources and runs itself.

If you apply for a job:

• Contact details: your email address (required), name and phone number.
• Your CV/resume (PDF, DOC or DOCX) and the details our AI extracts from it — work history, education, skills, projects, certifications, location, LinkedIn URL, notice period, current and expected salary, and similar fields.
• Your answers to the employer's screening questions.
• Video interview recordings, their transcripts, and the assessments and scores described in section 3.
• An interview focus signal: during a recorded video interview we count how often the interview tab or window loses focus.
• Payment details for paid options (see below) — handled by Stripe; we never see or store your card number.
• How you found the role (a referral tag in the link, e.g. ?ref=…), your language, and your application status.

If a recruiter adds you. Employers can add candidates themselves — for example by uploading a CV or importing CVs from their own Google Drive. In that case we receive your data from the employer, not from you, and the employer is responsible for having a lawful basis to share it.

Candidate profile. If you create a profile, we store what you add (headline, summary, experience, education, projects, certifications, skills, links) and, if you publish it, a public page showing your profile and your HireHouse fit band. Your contact details are not shown publicly.

Mockhouse (interview practice). Your email, the job description you paste, the practice questions generated for you, your practice recordings and transcripts, and the feedback and reports we generate. If an institution (for example a college) enrolled you, it can see your results.

Employers and their teams. Name, work email, role within the organisation, organisation details, interviewer details, and the activity they perform (comments, decisions).

Visitors. We use two essential cookies only: a sign-in session cookie (up to 14 days) and a language preference cookie. We do not use advertising cookies or third-party analytics trackers.

AI assistants (MCP). Our public connector for AI assistants (hirehouse.xyz/mcp) only exposes public job listings and does not collect personal data from you.

AI is central to HireHouse. We want you to know exactly what it does:

• Reads your CV and turns it into structured fields (section 2). For scanned CVs, page images may be read instead of text.
• Matches you to roles: it may place your application under the role it best fits within that employer.
• Ranks candidates for a role by comparing applications in pairs ("which of these two is the stronger fit, and why"). The results feed a rating that becomes your fit score and fit band.
• Assesses video interviews: it transcribes your answers, assesses each one, writes a summary and scores areas such as technical depth, experience, communication and impact.
• Estimates a "cheat probability" for recorded interviews, combining the focus signal above with the AI's assessment of whether answers look read out or assisted. Employers see it as a band (low / medium / high).
• Generates text: interview questions and job descriptions for employers, practice questions and feedback for Mockhouse.

What our AI does not do: it does not analyse your face, voice or emotions, does not infer your race, religion, health, age, gender or other sensitive characteristics, and is not given such information to make decisions.

Training. We do not use your data to train our own AI models. Your data is sent to our AI provider (section 5) only to perform the tasks above.

AI can be wrong. Scores and summaries are estimates. They can misread a CV or an answer, and they reflect only what was submitted.

Some steps can happen without a person looking first:

• Screening questions. An employer can set a question as a requirement (for example "Are you authorised to work in this country?"). If your answer doesn't meet it, your application is screened out automatically.
• Automatic invite or rejection. An employer can switch on automation for a role: candidates whose fit score is high enough are invited to the next step, and those below a threshold are rejected. For roles that HireHouse itself sources and runs, these automations are always on and no recruiter reviews each decision.
• Next steps. Moving to certain pipeline stages can automatically send you an interview invitation.

You can ask for a person to review any automated decision about you, give your point of view, and ask how the decision was reached. Email privacy@hirehouse.xyz with the role and the email address you applied with. We will have a member of staff (or, for an employer's role, the employer) review it and reply within 30 days.

• To provide the service you asked for — processing your application, running interviews, your profile, Mockhouse, payments (performance of a contract).
• With your consent — recording and analysing video interviews, and publishing your profile. You can withdraw consent at any time; this does not affect processing already done.
• Legitimate interests — ranking and matching candidates for employers, keeping the platform secure, preventing fraud and cheating, and improving HireHouse — balanced against your rights.
• Legal obligations — tax, accounting and responding to lawful requests.

The employer you apply to sees your application, CV and extracted details, screening answers, interview recordings and transcripts, AI assessments, scores, fit band and cheat-probability band, and the people it adds to its hiring team (recruiters and interviewers) can see what they need. If an institution enrolled you in Mockhouse, it sees your practice results.

Service providers who process data for us, under contract and only for the purposes above:

• MiniMax (AI language model, api.minimax.io) — receives CV text or page images, candidate summaries, interview transcripts and job descriptions to perform the AI tasks in section 3.
• Google (Firebase Authentication) — sign-in and account identity. Google Drive — only the files an employer chooses to import.
• DigitalOcean — our database.
• Cloudflare (R2) — storage for CVs and interview videos.
• Stripe — payments; receives your email and the payment amount.
• Resend — sends our transactional emails (sign-in links, invitations, receipts, updates).

Interview audio is transcribed on our own servers; it is not sent to a third-party transcription service.

We may also disclose data if required by law, to protect rights and safety, or to a successor if HireHouse is reorganised or sold (with this policy continuing to apply). We do not sell your personal data and do not share it for advertising.

HireHouse serves candidates and employers mainly in the UAE and India. Your data is stored and processed outside your own country, including:

• India — our main database (DigitalOcean, Bangalore).
• United States — authentication (Google Firebase), payments (Stripe), email (Resend).
• Global networks — file storage (Cloudflare R2).
• Our AI provider (MiniMax), which may process data outside your country, including in Asia.

Where the law requires it, we rely on contractual safeguards with these providers for international transfers. You can ask us for more detail.

We keep candidate data — CVs, extracted details, recordings, transcripts, assessments and scores — for 24 months after your last activity on HireHouse, unless you or the employer ask us to delete it sooner, or the law requires us to keep it longer. Payment records are kept as long as tax and accounting law requires. Sign-in links expire within minutes; sessions within 14 days.

Depending on where you live, you can:

• access the personal data we hold about you and get a copy;
• correct inaccurate data;
• delete your data ("right to erasure");
• object to, or ask us to restrict, certain processing;
• withdraw consent you gave;
• ask for a human review of an automated decision (section 4);
• nominate someone to exercise your rights if you cannot (India);
• complain to your data protection authority.

To use any of these rights, email privacy@hirehouse.xyz from the address you used on HireHouse (or tell us how to verify you). We reply within 30 days. If your request concerns an employer's role, we may pass it to that employer, which is responsible for its hiring decisions.

We protect your data with encrypted connections, access restricted to the employer you applied to and our authorised staff, time-limited links for files, hashed sign-in tokens, and secrets kept outside our code. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.

HireHouse is for people aged 18 or over. We do not knowingly collect data from anyone younger. If you believe a minor has given us data, email privacy@hirehouse.xyz and we will delete it.

Fintrix Inc. is established in Panama and follows Panama's Law 81 of 2019 on Personal Data Protection. Because we serve people in other countries, we also apply the protections of the laws that cover you there, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, India's Digital Personal Data Protection Act, 2023, and, for people in the European Economic Area or United Kingdom, the GDPR / UK GDPR.

We will update this policy when HireHouse changes — for example a new AI provider or a new place we store data. The date at the top shows the latest version; if a change is significant, we will tell you by email or on the site before it takes effect.