- Your camera video is never uploaded. It is analysed frame-by-frame inside your own browser and discarded; only aggregate numbers like "eye contact 74%" are saved.
- If you switch on screen recording, that video file downloads to your own computer and is never sent to us.
- Your voice audio and transcript do leave your device — they have to, because that is the interview. §5 names every company that touches them.
- Nobody is rejected by a machine. HireU produces evidence and a recommendation; a human decides.
- Interview records are deleted automatically — behavioural metrics after 30 days, the whole interview after 365 days — and sooner if you ask.
- We run no advertising trackers and no analytics profiling. There is exactly one cookie and it keeps recruiters logged in.
01Who we are
HireU is an AI interviewing service operated by [hireU]India.In this policy "HireU", "we" and "us" mean that company.
Two very different people use HireU, and this policy covers both:
- Recruiters and hiring teams — people who hold a HireU account, upload job descriptions and resumes, and read reports.
- Candidates — people who are interviewed by HireU, usually because an employer sent them an invite link. Candidates never need an account, and most never visit this site outside the interview itself.
02Who decides what happens to candidate data
This distinction matters more than it sounds, because it determines who you ask when you want something deleted.
When an employer uses HireU to interview candidates, the employer is the Data Fiduciary under the DPDP Act. They chose to run the interview, they decide which questions get asked, they decide who gets hired, and they decide how long to keep the record. HireU acts as their Data Processor: we process candidate data on their instructions and for no purpose of our own.
In plain terms: if you interviewed for a job at a company and you want your data gone, the company is the one who owns that call. Write to us anyway — §9 explains what we do next — but we will normally act through the employer rather than around them.
For the HireU account itself — a recruiter's email address, their organisation, their billing — we are the Data Fiduciary, and those decisions are ours.
If you took a HireU interview on your own to practise, there is no employer in the picture. You are the only person the report is for, and we are the Data Fiduciary. Ask us directly and we delete it.
03What never reaches us
Most interview tools record you on video and store the file. HireU is built the other way round, and these are the concrete consequences.
- Your camera video. The delivery and integrity analysis runs on your own device using MediaPipe in the browser. Frames are read, measured and thrown away in the same instant. No frame, image or clip is ever transmitted to us. What we receive is a small set of numbers per interview round — attentive frames, look-aways, posture samples, movement — plus counted events.
- Your face template. The person-substitution check compares facial proportions against a baseline taken at the start of your own interview. That baseline lives in your browser's memory for the length of the session and dies with the tab. It is not a biometric identifier we hold, store or can match against anyone else.
- Your screen recording. If you tick "record this interview", the file is assembled in your browser and saved straight to your downloads folder when the interview ends. It never touches our servers. If you want a copy, you already have the only one.
Two honest caveats, because a privacy policy that only lists the good parts is not worth reading:
- The on-device analysis models are downloaded from public CDNs (jsDelivr and Google's model storage) when the interview starts. Fetching a file reveals your IP address to those CDNs, as any web request does. No interview content is involved.
- "Not uploaded" is not the same as "not observed". The integrity signals derived on your device — including whether more than one face was visible — are sent to us as counts, and a recruiter can see them.
04What we collect
From candidates
| Data | Why | Where it lives |
|---|---|---|
| Name and role applied for | To address you during the interview and label the report | our server |
| Résumé / CV and the profile parsed from it — employers, titles, skills, education | So the interviewer can ask about your actual work instead of generic questions | our server LLM provider |
| Answer audio | Converted to text so the interview can proceed. Held in memory for the length of one request and not written to disk by us | speech-to-text provider |
| Interview transcript — every question and every answer | The interview record, and the evidence every score is quoted from | our server LLM provider |
| Report — scores, verdict, confidence, quoted evidence | The output the employer receives | our server |
| Delivery metrics — eye contact, posture, movement, aggregate counts only | Coaching feedback in practice interviews. Never an input to your score | measured on your device counts on our server |
| Integrity signals — response latency, tab switches, reading-aloud patterns, multiple faces in frame, voice-pitch changes | Flagged for a human to review. Never an automatic rejection | derived on your device counts on our server |
| Your feedback — the star rating and comment at the end | To improve the product | our server |
From recruiters and account holders
- Name, work email address and organisation name, given at sign-up.
- A password hash. We store a scrypt hash, never the password itself. Nobody at HireU can read it.
- Account state — role, plan, credit balance, status, account creation time and last sign-in time.
- The content you upload — job descriptions, candidate sheets and resume archives.
Automatically, from everyone
- IP address, used to rate-limit abusive traffic and to protect sign-in against password spraying. It is held in memory in a short rolling window, not built into a profile of you.
- Ordinary server logs for operating and debugging the service.
We do not collect, ask for or infer your caste, religion, health, sexual orientation, political views, government ID numbers or financial details. If you volunteer any of it inside an interview answer it becomes part of the transcript, which is one good reason not to.
05Who else processes your data
HireU is not a model company. The intelligence comes from third-party providers, which means interview content is sent to them to be processed. This is the complete list.
| Processor | What it receives | Purpose | Location |
|---|---|---|---|
| OpenRouter (routing to the configured model provider) | Job description, resume text, transcript, answer audio for transcription | Running the interview, transcribing speech, scoring and writing the report | United States |
| Sarvam AI | The interviewer's question text only — never your answers | Generating the interviewer's spoken voice | India |
| Resend | Email address and message content | Sending account and interview emails | United States |
| Your browser's speech recognition | Answer audio, while you speak | The live transcript you see on screen as you talk | Set by your browser vendor |
| jsDelivr, Google model storage, Google Fonts | Your IP address only | Delivering the on-device analysis models and web fonts | Global CDN |
The running text you see while you speak comes from the speech-recognition feature built into your browser. In Chrome and Edge that feature works by sending audio to the browser vendor's own servers, under the vendor's privacy policy rather than ours. We cannot switch this off on your behalf and we do not receive a copy of that exchange. If this matters to you, the interview still works with the live caption disabled.
Beyond these processors we do not sell personal data, do not share it with advertisers, and do not use interview content to train any AI model — ours or anyone else's. We disclose data outside this list only where the law compels it, and where we are permitted to tell you, we will.
An employer running HireU can also configure the service to use a different model provider, including one running on their own infrastructure. Where they have, the row above changes accordingly and the employer can tell you which provider applies to your interview.
07How long we keep it
Deletion runs on a timer, twice a day, whether or not anyone asks. These are the default windows; an employer on a paid plan may set shorter ones, and can ask for longer where they have a legal reason to keep records.
| Data | Kept for | Then |
|---|---|---|
| Behavioural and delivery metrics | 30 days | Erased from the interview record |
| Interview session, transcript and report | 365 days | Deleted in full, including the transcript files on disk |
| Uploaded resume file | Minutes | The file is deleted once parsed; the extracted profile stays with the session |
| Recruiter sign-in session | Until it expires or you sign out | Deleted from the sessions table |
| Account record | While the account is open | Deleted on request, subject to tax and accounting obligations |
Erasure means erasure: when an interview is deleted, its transcript, its report and its files go with it. There is no shadow copy waiting in an archive.
08AI, and how it affects hiring decisions
You are being interviewed by software. You should know precisely how far that goes.
- The questions are generated by an AI that reads the job description and your resume, and adapts to what you say as you say it.
- The scoring is produced by an AI, and every conclusion in the report is required to quote the words you actually said as its evidence.
- HireU never rejects anyone. The report is a recommendation with evidence attached. No candidate is advanced or dropped by the system on its own.
- Integrity flags are suspicions, not verdicts. A flag means "a person should look at this", and it is shown to a human alongside what triggered it. It never auto-fails an interview.
- Delivery and coaching metrics are excluded from your score entirely. In a practice interview they are feedback for you.
If you believe a decision involving your HireU interview was wrong or unfair, you can ask the employer for a human review, and you can ask for the transcript the report was built from. We support employers in answering both.
An AI voice interview is not equally accessible to everyone — a speech difference, a hearing impairment, an unreliable connection or a bad room can all get in the way. The employer who invited you decides on alternative formats, so ask them; we build the tooling to make an alternative possible and we do not require anyone to be assessed this way.
09Your rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access a summary of the personal data we process about you and who it has been shared with.
- Correction and completion of data that is wrong, misleading or incomplete.
- Erasure of your data where it is no longer needed for the purpose it was collected for.
- Grievance redressal — a first, direct route to complain, described in §13.
- Nomination — naming someone to exercise these rights for you in the event of death or incapacity.
- Withdraw consent at any time, as easily as you gave it. Withdrawal is not retrospective: it does not undo processing that already happened lawfully.
How to exercise them
Write to weirdos9213@gmail.com from the address you used with HireU, or the one the interview invite was sent to, and tell us what you want done.
Where you were interviewed for a job, remember §2: the employer is the Data Fiduciary. We will acknowledge you, pass the request to them, and carry out the deletion or correction once they confirm. Where the data is ours to decide on — a practice interview, or a HireU account — we act on it directly.
We respond within 30 days. There is no charge. We may ask you for enough information to be sure the request is genuinely yours, because handing someone else's interview transcript to the wrong person would be the worse failure.
10How we protect it
- Passwords are stored as scrypt hashes with per-password salts. They are not recoverable, by us or by anyone who steals the database.
- Sign-in sessions use random tokens in
HttpOnly,SameSite=Lax,Securecookies. - An account is locked after five consecutive wrong passwords, and sign-in attempts are rate-limited per IP address on top of that.
- Every query is scoped to your organisation. One customer's account cannot read another customer's interviews.
- API routes that cost money or touch model providers are rate-limited.
- Traffic is served over HTTPS.
No system is perfect. If we discover a personal data breach we will notify the Data Protection Board of India and every affected person, as the DPDP Act requires. If you think you have found a vulnerability, please tell us at weirdos9213@gmail.com — we would much rather hear it from you.
11Data leaving India
Some processors in §5 operate outside India, mainly in the United States. Interview content is therefore transferred abroad for processing. The DPDP Act permits this except to countries the Central Government restricts by notification, and we will stop transfers to any country that is so restricted.
An employer who needs candidate data to stay within India can configure HireU against an India-hosted or self-hosted model provider. Ask us and we will help set that up.
12Children's data
HireU is built for job candidates and is not directed at children. We do not knowingly process the personal data of anyone under 18 without verifiable consent from a parent or lawful guardian, and we do not track, profile or serve targeted advertising to children — the DPDP Act forbids it and we have no mechanism for it in any case.
Where an educational institution uses HireU with students under 18, the institution is responsible for obtaining verifiable parental consent before an interview is run. If you believe a child's data has reached us without it, write to §13 and we will delete it.
14Changes to this policy
When we change what we collect, who processes it or how long we keep it, we update this page and move the "last updated" date. Material changes — a new processor receiving interview content, a longer retention window, a new purpose — are announced to account holders by email before they take effect.
Previous versions are available on request. We do not quietly rewrite this page.
15Contact
For anything on this page: [weirdos9213@gmail.com].
[hireU], India.