HiringGym
Sign in

Privacy Policy

Last updated: July 5, 2026

This Privacy Policy explains what personal data HiringGym (“we”, “us”) collects, how we use it, who we share it with, and the rights you have. It applies to the HiringGym website and application.

1. Who is responsible

The data controller for the Service is HiringGym. For any privacy request, contact support@hiringgym.com. For payments, our Merchant of Record Paddle.com Market Ltd is an independent controller of the billing data it collects at checkout; see Paddle’s own privacy notice.

2. Data we collect

  • Account data - your email address, and your name if you sign in with Google. We use passwordless sign-in (magic link or Google), so we do not store passwords.
  • Interview data - the setup you choose (role, company, seniority), any job description or notes you enter, your interview messages, your debrief and Hire/No-Hire decision, and the reports and scores generated for you.
  • Billing data - a record of your purchases (amount, credits, status, date). Card details are collected and processed by Paddle, not by us; we never see or store your full card number.
  • Usage & technical data - basic, aggregate, cookieless analytics (e.g. page views, referrer) and server logs (e.g. IP-derived salted hashes used only for rate-limiting and abuse prevention).

3. How we use your data

  • To provide the Service: run interviews, generate teasers and reports, track credits.
  • To process purchases and provide receipts and support (via Paddle).
  • To prevent abuse, fraud, and excessive cost (rate limits, spend guards).
  • To send you service and transactional email (sign-in links, receipts).
  • To send optional product/marketing email, only where permitted - every such email has an unsubscribe link and a postal address. Transactional email is not marketing.
  • To comply with legal obligations and enforce our Terms.

Our legal bases (where GDPR applies) are performance of our contract with you, our legitimate interests in securing and improving the Service, your consent (for optional marketing), and compliance with legal obligations.

4. AI processing

To generate candidates and reports we send your interview inputs and transcript to our AI provider, Anthropic, which processes them to return model output. We do not use your content to train models, and our providers process it on our behalf under their terms. Because candidates and reports are fictional simulations, they are not intended to contain real personal data - please do not paste real candidates’ personal information.

5. Service providers (processors)

We share data with a small set of vendors strictly to run the Service:

  • Anthropic - AI model that powers candidates and reports.
  • Resend - transactional and product email delivery.
  • Vercel - application hosting.
  • Neon - managed PostgreSQL database.
  • Paddle - payments and Merchant of Record (billing, invoicing, tax).
  • Plausible - privacy-friendly, cookieless analytics.

These providers may process data in the United States or elsewhere; where required we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers. We do not sell your personal data.

6. Cookies

We use only strictly-necessary cookies to keep you signed in. Our analytics is cookieless, so we do not show a cookie consent banner. We do not use advertising or cross-site tracking cookies.

7. Retention

We keep your account and interview data while your account is active. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain limited records (e.g. purchase and tax records) to meet legal obligations. Aggregate, non-identifying analytics may be retained.

8. Your rights

Depending on where you live (e.g. under GDPR or the CCPA/CPRA), you have rights to access, correct, delete, export, restrict, or object to the processing of your personal data, and to withdraw consent. You can:

  • Export your data yourself from your account settings (self-serve data export);
  • Delete your account and associated data yourself from your account settings;
  • Or email support@hiringgym.com and we will action your request. You may also lodge a complaint with your local data protection authority.

9. Children

The Service is for adults (18+) and is not directed to children. We do not knowingly collect personal data from children.

10. Changes

We may update this policy; we will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.

Questions? Email support@hiringgym.com. See also our Terms, Privacy Policy, and Refund Policy.