Privacy Policy

Last updated: April 12, 2026

At Hyrin, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-native interview platform and related services (the "Service"). Please read this policy carefully. By using the Service, you consent to the practices described herein.

1. Information We Collect

1.1 Account Information

When you sign up via Google OAuth or another supported provider, we collect:

• Name and email address
• Profile photo (if provided by the OAuth provider)
• OAuth tokens necessary to authenticate your session

1.2 Workspace and Organization Data

When you create or join a workspace, we collect:

• Workspace name and configuration settings
• Team member information (name, email, role)
• Invitation records

1.3 Interview and Candidate Data

During the course of using Hyrin for interviews, we collect:

• Candidate names, email addresses, and resumes (if uploaded)
• Interview session recordings, including code submissions, chat interactions, and AI assistant exchanges
• Session metadata such as timestamps, duration, and question progression
• Post-interview evaluations and analysis generated by AI

1.4 Usage and Technical Data

We automatically collect certain information when you use the Service:

• Browser type, operating system, and device information
• IP address and approximate location
• Pages visited, features used, and interaction patterns
• Error logs and performance data

1.5 API Keys (BYOK Plan)

If you use the BYOK plan, you provide your own third-party API keys. These keys are encrypted at rest and used solely to route requests to your chosen AI model provider. We do not log or use your API keys for any purpose other than fulfilling your interview sessions.

2. How We Use Your Information

We use the information we collect to:

3. AI Model Processing

Hyrin uses third-party AI models (such as those from OpenAI, Anthropic, and Google) to power interview sessions and generate analysis. When AI models are used:

• Interview content (code, chat messages) is sent to the AI model provider to generate responses
• We select providers that offer enterprise-grade data processing agreements
• On managed plans, we use Hyrin's API credentials; on BYOK plans, your own keys are used
• We do not use your interview data to train our own or third-party AI models

Each AI provider has its own privacy policy and data handling practices. We encourage you to review them.

4. How We Share Your Information

We do not sell your personal information. We may share your data in the following circumstances:

4.1 Within Your Workspace

Information about candidates, interviews, and evaluations is shared with members of your workspace according to the permissions set by workspace administrators.

4.2 Service Providers

We use third-party service providers to help operate the Service, including:

• Cloud hosting and infrastructure (e.g., AWS, Google Cloud)
• AI model providers (e.g., OpenAI, Anthropic, Google)
• Analytics and monitoring tools
• Email and communication services
• Payment processors

These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.

4.3 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

If Hyrin is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: retained until you delete your account
• Interview sessions: retained for the duration of your subscription, plus 90 days after account closure
• Candidate data: retained according to your workspace settings and applicable law
• Usage logs: retained for up to 12 months for analytics and security purposes

You may request deletion of your data at any time by contacting us. We will process deletion requests within 30 days, subject to any legal retention obligations.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Regular security assessments and vulnerability scanning
• Access controls and authentication for all internal systems
• Secure handling and encryption of API keys (BYOK plan)

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data
• Portability: request your data in a structured, machine-readable format
• Objection: object to certain processing of your data
• Restriction: request that we limit how we use your data
• Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at privacy@hyrin.ai. We will respond within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your authenticated session
• Remember your preferences and settings
• Understand how you use the Service (analytics)

We use essential cookies required for the Service to function. We may also use analytics cookies (such as PostHog) to understand usage patterns. You can control cookie preferences through your browser settings.

9. Candidate Privacy

Hyrin processes candidate data on behalf of the organizations that use our platform. If you are a candidate:

• The organization that invited you to the interview is the data controller; Hyrin acts as a data processor
• Your code submissions, chat interactions, and session data are collected during the interview
• AI models analyze your session to generate evaluation reports for the hiring organization
• Contact the hiring organization directly to exercise your data rights regarding interview data
• Contact Hyrin at privacy@hyrin.ai for questions about how we process data as a platform

10. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) where required under GDPR or equivalent mechanisms under other applicable laws.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the Service after changes take effect constitutes acceptance.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@hyrin.ai

For data protection inquiries in the EU, you may also contact your local supervisory authority.