Privacy Policy
Effective Date
Sep 30, 2026
Version 1.4 WireApps Limited, Sri Lanka
In Short
We collect account data from Platform Users and process candidate data for CV parsing, candidate matching, screening recommendations against a JD, and interview analysis, on our customers' behalf.
Candidate data is yours — we act as processor; you are the controller.
We do not sell your data, and we do not train AI models on candidate data of any form.
Platform Users can exercise their data rights through support@hirevia.ai; candidates must contact the controlling employer.
We use encryption and role-based access controls; ISO 27001 certification is in progress.
Who We Are
HireVia AI is operated by WireApps Limited, registered in Sri Lanka. This Policy covers personal data for Platform Users (HR teams, hiring managers, admins), job candidates whose data is uploaded by customers, and visitors to hirevia.ai. Read alongside our Terms of Service, DPA, and AI Governance Addendum.
Data We Collect
Platform Users: name, work email, job title, company, phone; encrypted passwords, login timestamps, session tokens; usage data; support and beta communications; billing details (no raw card numbers stored).
Candidates (processed on your behalf): name, email, phone; CV content, employment history, education, skills; cover letters, screening responses, availability; interview scheduling preferences and notes; platform-facilitated communications. You are the data controller; we process this data for CV parsing, candidate matching, screening recommendations against a JD, and interview analysis, per our DPA.
Website: IP address, browser, OS; pages visited, referral source; cookies (§11).
How We Use Data
Purpose
Activities
Provide Services
Account management, AI resume screening, candidate matching, calendar-based scheduling (not AI-driven), security, support
Improve Services
Anonymised usage analysis, research, bug fixes (candidate data is never used for AI model training or improvement)
Legal & compliance
Regulatory compliance, fraud prevention, ToS enforcement
Marketing (Users only)
Product updates (opt-out anytime via unsubscribe or support@hirevia.ai)
AI Processing
Legal Basis (GDPR Art. 6)
Basis
Applies To
Contract (Art. 6(1)(b))
Providing subscribed Services
Legitimate interests (Art. 6(1)(f))
Service improvement, security, fraud prevention
Legal obligation (Art. 6(1)(c))
Where required by law
Consent (Art. 6(1)(a))
Marketing (withdrawable anytime)
For candidate data, you establish the legal basis and obtain consents.
Automated Decisions & Candidate Rights (GDPR Art. 22)
AI outputs (scores, rankings, recommendations, and interview analysis) are advisory and support human reviewers. HireVia AI does not make solely automated decisions with legal or similarly significant effects; hiring decisions are made by the employer. Candidates may exercise the following rights with the employer:
Request confirmation of genuine human review — ask the employer to confirm a human meaningfully considered, rather than merely rubber-stamped, the AI-informed output in their case
Contest an AI-informed decision and express their point of view
It is the Customer's (employer's) responsibility to provide candidates with a channel to submit these requests. HireVia AI is not responsible for, and will not forward, candidate requests of this kind.
Data Sharing & Subprocessors
We do not sell, rent, or trade personal data. We share data with subprocessors, each bound by its own DPA:
Full list available on request (14 days' notice for changes). We may also disclose data where legally required, in M&A transactions (with equivalent protections), or to professional advisors under confidentiality.
Data Retention
Longer only where law requires. Request earlier deletion at support@hirevia.ai
Your Rights
Access · Rectification · Erasure · Portability · Restriction · Objection · Withdraw consent. Platform Users: contact support@hirevia.ai; response within a reasonable time; identity verification may apply. Candidates: these requests must be directed to the controlling Customer (employer) — HireVia AI does not handle or forward candidate rights requests.
Security & Breach Notification
Encryption at rest and in transit (TLS 1.2+); role-based access controls; vulnerability assessments; documented incident response; ISO 27001 certification in progress. Full details in our DPA.
Customers: notified of any confirmed breach without undue delay (per DPA)
Candidates: notified via the Customer where a breach poses high risk to rights and freedoms (GDPR Art. 33/34)
Cookies
International Transfers
Children's Privacy
Not intended for under-18s. We don't knowingly collect minors' data. Contact support@hirevia.ai if you believe a minor's data was submitted.
Changes
Material changes notified by email/in-app at least 14 days before taking effect. Continued use = acceptance.
Contact
HireVia AI (WireApps Limited) · support@hirevia.ai · hirevia.ai · Sri Lanka
Related: Terms of Service · DPA · AI Governance Addendum · Acceptable Use Policy
Not satisfied with our response? You may lodge a complaint with your local data protection authority.
By using HireVia AI, you acknowledge that you have read, understood, and agree to this Privacy Policy.
