Privacy policy

1. Two roles

For candidates and the companies' hiring data, the hiring company is in control (the "controller") and Hirestrella processes data on its behalf. For our own website visitors, demo requests and customer account contacts, Hirestrella is the controller.

2. What candidates share

Name, email, phone number, preferred language, interview answers (video, audio, text), transcripts, test results, scores, booking times and messages. Candidates may choose to answer an optional fairness survey; those answers are kept separately and are never used by AI scoring.

If the hiring company uses a photo ID check, candidates are asked to agree first, then share a selfie and a photo of an identity document. A person at the hiring company compares them; there is no automated face recognition, and the photos are never used by AI or for scoring. They are deleted automatically after the period the hiring company sets (30 days by default), and only the result is kept.

2a. Integrity monitoring

Hiring companies can turn on integrity monitoring for interviews and tests. Candidates are told what is monitored before the step starts. In interviews, the candidate's camera and (on a computer) their shared screen are recorded for the whole interview. In tests, the camera and screen are not recorded.

During monitored steps the browser notes events such as copy or paste attempts, leaving the page or full screen, text that appears faster than typing, a second screen, or the same link open on two devices. Face detection runs inside the candidate's browser and only checks whether one face is in view and facing the screen; it does not identify anyone and no images are sent for it. To notice a change of network we keep a one-way code of the IP address, never the address itself. Typed interview answers may be checked by AI for signs of AI-written text; this never changes a score.

Everything noted is shown to a person at the hiring company to review. Nothing rejects a candidate automatically. Recordings follow the hiring company's retention rules.

2b. Interviewers' calendars

If a member of a hiring team connects their Google or Microsoft calendar, we add their interviews to it and read only when they are busy (start and end times, not what their meetings are about). They can disconnect at any time, which removes upcoming interviews we added and deletes our access.

3. How AI is used

Answers can be scored by AI against the hiring company's scoring guide, and an AI interviewer can hold a structured conversation. Candidates are told about this before starting and can choose a path reviewed only by people. AI results are recommendations; people at the hiring company make decisions.

4. Why we process data

To run interviews and assessments for the hiring company, to keep the service secure, to send messages candidates need (invites, reminders, confirmations), to bill customers, and to answer demo requests. We do not sell personal data or use candidate data to advertise.

5. Where data is stored

Customer data is hosted in the region agreed with the customer: Saudi Arabia, the UAE or India. Some features use service providers that may process data in other countries; they are listed on our sub-processors page, with safeguards required by law.

6. How long we keep it

As long as the hiring company keeps it, under the retention rules it sets (for example, deleting recordings after 180 days), and then for up to 30 days in backups. Demo requests are kept for up to 2 years.

7. Your rights

Depending on where you live (including under Saudi Arabia's PDPL, the UAE PDPL and India's DPDP Act), you can ask to access, correct or delete your data, or withdraw consent. Candidates can use the "Your data and privacy" link on their invite page; the hiring company will respond. You can also contact us and we will pass your request on.

8. Security

We use encryption in transit, encrypted secrets, access controls, audit logs and private file storage. See our security page for details.

9. Children

Hirestrella is for job applicants of legal working age and is not intended for children.

10. Contact and complaints

Privacy questions: privacy@hirestrella.com. You may also complain to your data protection authority, such as SDAIA in Saudi Arabia, the UAE Data Office, or the Data Protection Board of India.