Privacy policy
How we handle company and candidate data.
Template — review this page with your legal adviser and edit it in Admin → Pages before launch.
Who this covers
This policy covers the HR teams who use HireMind (our customers) and the candidates whose applications they screen. For candidates, the hiring company is responsible for your data and HireMind processes it on their behalf.
What we store
- Company accounts: team members' names, emails and activity.
- Jobs, requirements and the company's hiring profile.
- Candidates: the CV file, the text read from it, the structured profile (experience, education, skills, projects, contact details) and the screening results.
- Decisions, notes and emails recorded by the hiring team.
What we deliberately ignore
Religion, marital status, date of birth and age, gender, nationality, family details, national ID numbers, photos, blood group, height and weight are removed from the structured profile and never used in scoring.
How AI is used
CV text and job details may be sent to the AI provider configured by the platform to parse CVs and analyse fit. It is used only to provide the screening requested, and AI output is always reviewed by the hiring team, who make every decision.
Security and isolation
Each company's data is isolated from every other company. Access to candidate profiles is logged, provider credentials are encrypted at rest, and CV files are stored privately, never at a public address.
Retention and your rights
Companies set how long candidate data is kept, after which it is anonymised. Candidates can ask the hiring company to access, correct or delete their data; companies can anonymise a candidate at any time.
Contact
Questions? Use the contact page.
Last updated 14 September 2026