Privacy Policy

We use the information we collect to:

• Provide, maintain, and improve the Hiria AI Service
• Generate AI-powered interview answers, coaching feedback, and resume analysis tailored to your uploaded documents
• Process payments and manage your subscription or credit balance
• Send transactional emails (account confirmation, password resets, billing receipts)
• Monitor usage against plan quotas and enforce fair-use limits
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Comply with legal obligations
• Respond to your support requests and inquiries

We do not sell your personal information to third parties. We do not use your resume or interview content for advertising purposes.

Hiria AI is powered by large language models (LLMs) provided by third-party AI providers, including OpenAI and Anthropic. When you use the Service:

• Interview questions, your resume, and the job description you upload are sent to these AI providers to generate answers in real time.
• Screenshots or screen captures (for coding/MCQ solve features) are processed by AI vision APIs.
• Audio transcription is performed via speech-to-text services.

These third-party providers process your data under their own terms of service and privacy policies (OpenAI: openai.com/policies/privacy-policy; Anthropic: anthropic.com/legal/privacy). We use API-level access, which means your data is not used to train their general-purpose models under their current API policies.

Session transcripts and AI responses are saved to your account so you can review them later. You can delete your session history at any time from your dashboard.

We share your information only in the following limited circumstances:

Service Providers: We share data with trusted third-party vendors who help us operate the Service. Key providers include:

• Supabase — database hosting, authentication, and file storage (EU/US data centers)
• Stripe — payment processing
• OpenAI / Anthropic — AI model inference
• LiveKit — real-time audio/video processing
• AWS — cloud infrastructure and CDN

These providers access only the data necessary to perform their services and are contractually bound to protect your information.

Legal Requirements: We may disclose your information if required to do so by law or in good faith belief that such disclosure is necessary to comply with a legal obligation, protect our rights, prevent fraud, or protect the safety of our users or the public.

Business Transfers: If Hiria AI is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice if your data becomes subject to a different privacy policy.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained until you delete your account.
• Session transcripts and AI responses are retained until you delete them or delete your account.
• Billing records are retained for 7 years to comply with financial and tax regulations.
• Log data is retained for up to 90 days for security and debugging purposes.

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it by law.

We implement industry-standard technical and organizational security measures to protect your information, including:

• TLS/HTTPS encryption for all data in transit
• Encryption of data at rest in our database
• Passwords hashed using bcrypt (handled by Supabase Auth)
• Role-based access controls limiting employee access to production data
• Regular security reviews

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal data (“right to be forgotten”).
• Portability: Request your data in a structured, machine-readable format.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Objection: Object to our processing of your data based on legitimate interests.
• Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at support@hiria-ai.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

California Residents (CCPA): California residents have additional rights under the California Consumer Privacy Act, including the right to know, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.

We use cookies and similar tracking technologies to operate and improve the Service:

• Essential cookies: Required for authentication sessions and core functionality. Cannot be disabled.
• Preference cookies: Store your settings such as theme preference (light/dark mode).
• Referral tracking: Uses URL parameters and local browser storage to credit affiliate referrals.
• Analytics cookies: Help us understand how users interact with the Service so we can improve it. These are anonymized where possible.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or using the Service.

The Service is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@hiria-ai.com and we will promptly delete such information.

Hiria AI is operated from and our servers are primarily located in the United States and European Union. If you are accessing the Service from outside these regions, your information may be transferred to and processed in countries with different data protection laws.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on appropriate legal mechanisms (such as Standard Contractual Clauses) for international transfers of personal data.

We may update this Privacy Policy from time to time. We will notify you of material changes by emailing the address associated with your account or by posting a prominent notice on our website at least 30 days before the change takes effect.

Your continued use of the Service after the effective date constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy, your data, or your rights, please contact us:

We aim to respond to all privacy-related inquiries within 30 days. For urgent requests or data breach reports, please include “URGENT” in the subject line.