Privacy Policy

Last updated: 30 June 2026

This Privacy Policy describes how HireSagar (“we”, “us”, or “our”) collects, uses, and protects your information when you use our platform at hiresagar.com.

1. Information We Collect

Account information

When you sign up, we collect your name, work email address, and organisation name. We store a cryptographically hashed version of your password (scrypt) — never the plaintext.

Resume and candidate data

When you upload a resume, we extract and store the text content for analysis. Resume files are stored in your organisation’s isolated database partition. We do not share candidate data between organisations.

Usage data

We log API requests, page views, and feature usage to improve the platform and enforce plan limits. Logs are retained for 90 days.

Payment information

We do not store credit card numbers. Payment processing is handled by our payment processor. We store only a billing customer ID reference.

2. GDPR Rights (EU / UK Residents)

If you are located in the European Union or United Kingdom, you have the following rights under GDPR:

• Right of Access (Article 15) — request a copy of your personal data
• Right to Rectification (Article 16) — correct inaccurate data
• Right to Erasure (Article 17) — request deletion of your personal data
• Right to Portability (Article 20) — receive your data in machine-readable format
• Right to Object (Article 21) — object to processing for legitimate interests

For candidate data, recruiter admins can export or erase individual candidate records directly from the platform. For account data, email privacy@hiresagar.com.

3. How We Use Your Information

• To provide, operate, and improve the HireSagar platform
• To process resume files through our AI analysis pipeline
• To send transactional emails (account verification, password reset, trial expiry)
• To enforce plan limits and detect abuse
• To comply with legal obligations

We do not sell your data. We do not use your candidate data to train AI models without explicit consent.

4. AI Processing

Resume text is sent to the Anthropic API for AI analysis. Anthropic processes this data under their API Terms of Service with Zero Data Retention — prompts and completions are not stored by Anthropic after processing. See Anthropic’s Privacy Policy for details.

5. Data Storage and Security

Data is stored in MongoDB Atlas with encryption at rest and in transit (TLS 1.3). We implement rate limiting, CSP headers, CSRF protection, and prompt injection defences. Access to production data is restricted to authorised personnel only.

6. Data Retention

• Active account data: retained while your account is active
• Candidate data: retained until your organisation deletes it or requests erasure
• Anonymised analytics: retained indefinitely (no PII)
• API logs: 90 days
• After account closure: all PII deleted within 30 days

7. Third-Party Services

• Anthropic — AI model provider (Zero Data Retention policy)
• MongoDB Atlas — database hosting
• Cloudflare — CDN and DDoS protection
• SMTP provider — transactional email delivery

8. Cookies

We use a single HTTP-only session cookie for authentication. We do not use tracking cookies or advertising cookies. We do not use Google Analytics or similar third-party tracking.

9. Changes to This Policy

We will notify you of material changes via email or an in-app notice at least 7 days before they take effect. Continued use after that date constitutes acceptance.

10. Contact

For privacy questions or data requests: privacy@hiresagar.com

HireSagar · hello@hiresagar.com