Privacy Policy

1. Overview

Hiventra, Inc. ("we", "us", "our") operates the Hiventra AI Talent Intelligence Platform. This Privacy Policy explains how we collect, use, store, and protect information when you use our Platform. By using Hiventra, you consent to the practices described here.

2. Information We Collect

From recruiters and HR users:

• Name, email address, and profile picture (via Google OAuth)
• Organization name and role
• Job postings, hiring preferences, and Carl configuration settings

From candidates:

• Full name, email address, phone number, and location
• Resume files (PDF or DOCX)
• Interview responses, voice recordings, and transcriptions
• AI-generated scores, summaries, and recommendations
• Login credentials (username; passwords are hashed and never stored in plain text)

3. How We Use Your Information

• To provide and operate the Platform's core features
• To process resumes and generate AI-based candidate scores via Claude (Anthropic)
• To conduct AI-assisted interviews and transcribe voice responses via Whisper (OpenAI)
• To deliver Carl's voice responses via ElevenLabs TTS
• To send candidate credentials and interview invites via email (MailerSend, Resend)
• To generate audit logs for AI transparency and compliance
• To improve the Platform's performance and detect abuse

4. Third-Party Services

We share data with the following trusted service providers solely to deliver the Platform's functionality:

We do not sell your data to any third party. We do not use your data for advertising.

5. Data Storage & Security

All data is stored in Supabase (PostgreSQL) with row-level security (RLS) enforced at the database layer. Candidate passwords are hashed using scrypt before storage. Resume files are stored in Supabase Storage with access controlled by RLS policies.

We implement industry-standard security measures including HTTPS, encrypted storage, and role-based access control. However, no method of transmission over the internet is 100% secure.

6. AI Transparency

Every AI decision (resume score, interview analysis, recommendation) is logged in an immutable audit trail accessible to HR administrators. Candidates may request an explanation of how their scores were calculated by contacting their HR administrator.

7. Data Retention

Candidate data is retained for the duration of the hiring process and may be retained for up to 12 months thereafter for compliance and audit purposes. HR users may delete candidate records at any time from the Platform. Upon account termination, data is removed within 30 days.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing activities
• Data portability (receive your data in a structured, machine-readable format)

To exercise any of these rights, contact us at support@hiventra.live.

9. Cookies

Hiventra uses session cookies to maintain authentication state (managed by Supabase SSR). We do not use tracking or advertising cookies. You can disable cookies in your browser settings, but this may affect Platform functionality.

10. Children's Privacy

Hiventra is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of significant changes via email or in-platform notice. Continued use after changes are posted constitutes acceptance.

12. Contact

For privacy-related questions or requests, contact us at support@hiventra.live.