Privacy Policy

Introduction

HireSalt takes your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered resume screening platform. By using HireSalt, you agree to the practices described in this policy.

Information We Collect

We collect the following categories of information to provide and improve our service:

• Account information: your email address, full name, and organization (optional).
• Job descriptions and criteria: the job postings and screening criteria you create within the platform.
• Uploaded resumes: PDF and DOCX files you upload for screening.
• AI-generated results: scores, grades, and analysis produced by our screening engine.
• Payment transaction records: order IDs, package purchased, and credits awarded. We do not store credit card numbers or payment details; those are handled entirely by our payment processor, Razorpay.
• Usage data: records of how you use HireSalt. We store:
  • When you last signed in, how many sign-in attempts failed in a row, and any temporary lock on your account.
  • Your credit transaction history.
  • Your answers to the setup questions after sign-up, the time you finished them, and which version of the setup screens you were shown. Also your answers to short questions the app asks you later.
  • Which in-app tips, guided tours and prompts you have seen or dismissed, and whether your first job has finished scoring.
  • Which tabs you open on a job's page, and when you use the button that shortlists the top candidates. Each record notes the job and the time.
  • When you first open a job after all its resumes are scored, and when each candidate is first shortlisted.
  • How many candidate pages you have opened without expanding the AI's reasoning, and which groups of suggested candidates on a job you have marked as reviewed.
  • If you team up with others: team changes such as invitations, members joining, leaving or being removed, role changes and shared presets.
  • If you send us feedback: your message, its type and the full address of the page you were on when you sent it.

How We Use Your Data

Your data is used for the following purposes:

• To provide AI-powered resume screening, scoring, and candidate analysis.
• To manage your account and credit balance.
• To process payments through Razorpay, our payment processor.
• Only if you turn on "Help test scoring quality" in Settings: to test how well our scoring works, internally, using the resumes and job descriptions you upload. This setting is off by default and you can turn it off at any time.

We do not sell or share your personal data with third parties for marketing or advertising purposes.

Data Storage and Security

HireSalt's app, database, uploaded files and AI gateway are hosted by Railway in the United States.

We take reasonable technical and organizational measures to protect your data:

• Data is transmitted over encrypted connections (HTTPS).
• Passwords are hashed using bcrypt and are never stored in plain text.
• All forms are protected with CSRF tokens to prevent cross-site request forgery.
• Content Security Policy headers are enforced across the application.
• Access to your dashboard requires signing in. Shared report links you create are the exception (see Data Visibility and Access).
• Other users can see your data only in the ways described under Data Visibility and Access below.

Data Visibility and Access

Your privacy within the platform is important to us:

• Your jobs, uploaded documents, screening results, and candidate scores are visible to you within your dashboard.
• If you belong to a team and choose to share a job with your team, the other members of that team can view that job, its resumes, and its scoring data.
• If you create a shared report link, anyone who has the link can view the report, including candidate names, scores, and the AI's reasoning, until the link expires after 7 days.
• We do not display or share individual screening results publicly.

Candidate data

This section covers the job applicants whose resumes are screened in HireSalt.

Where it comes from

• A recruiter uploads a resume (PDF or DOCX).
• A candidate applies through a company's HireSalt application page and gives their email address, their resume (PDF or DOCX) and, optionally, their name.

What we process

• The resume file and the text extracted from it.
• Contact details found in the resume: name, email address, phone number, location and profile links (such as LinkedIn or GitHub).
• Results HireSalt produces: scores, grades, reasoning, a career summary, years of experience, and shortlist and triage labels.
• Notes the recruiter's team writes about the candidate.
• Emails the recruiter sends to the candidate through HireSalt. We keep the recipient, the subject, the first 200 characters of the message and whether it was sent.

How AI is used

We send resume text to third-party AI providers (see Service providers below) to score it against the job's criteria, to write the career summary and, when a recruiter creates a job from a resume, to draft that job description. Before resume text is sent, we automatically remove the email addresses and phone numbers our filter detects. The filter is set up for Indian phone number formats and also detects numbers written with an international dialling code, such as +44. It can miss contact details written in unusual ways, and it does not remove candidate names, locations or profile links. Resumes and job descriptions are not used to train AI models. Model training is turned off on the AI provider accounts HireSalt uses.

Who can see it and when it is deleted

• Candidate data is visible only in the ways described under Data Visibility and Access.
• When a recruiter deletes their HireSalt account, we delete the jobs they own and those jobs' resumes, uploaded files, scores, notes, shared report links and email logs.

Data Retention

• Account data is retained for as long as your account remains active.
• You can delete your account and its associated data at any time using Delete Account on your Settings page.
• Payment records (including Razorpay order IDs, payment IDs, and subscription IDs) are retained for a minimum of 7 years in compliance with Indian tax and accounting regulations (Income Tax Act). After the mandatory retention period ends, you may request deletion of the remaining personal data associated with those records by contacting us at hello@hiresalt.com.

Third-Party Services

HireSalt integrates with the following third-party services:

• Third-party AI providers for resume analysis. Resume and job-description text is sent to a primary AI provider to produce scores and analysis. If it is unavailable, the text is sent to a fallback AI provider instead.

Service providers

We use the companies below to run HireSalt.

Analytics

Analytics run only on our public pages: the home page, articles, help center, legal pages, and the sign-in and sign-up pages. They never run inside the app once you are signed in, and never on pages that show job or candidate data.

Cloudflare Web Analytics (provided by Cloudflare, Inc.) counts visits to these pages in aggregate. It sets no cookies and does not identify you.

Google Analytics (provided by Google LLC) loads only after you choose Accept in the cookie banner. Until then it is not loaded and sets no cookies. The Measurement ID used by HireSalt is visible in the page source. Once you accept, Google Analytics collects:

• Page views and navigation paths across our public pages.
• Session data such as session duration and the number of pages viewed per visit.
• General browser and device information (browser type, operating system, screen resolution).
• Approximate geographic location derived from IP address (country/region level only).

Google Analytics does not collect your name, email address, uploaded resumes, job descriptions, or any content you create within HireSalt. The data it collects is anonymised and used only to improve the platform.

Your choice is kept in your browser. You can change it at any time:

• Cookie settings: use the Cookie settings link at the bottom of our public pages. Choosing Decline stops Google Analytics and removes its cookies from this site.
• Do Not Track (DNT): when your browser's Do Not Track setting is on, HireSalt does not show the banner and never loads Google Analytics.
• Google Analytics Opt-out Browser Add-on: install the official add-on from Google to prevent GA from collecting data across all websites.

For more detail on which cookies Google Analytics sets and how to manage them, see our Cookie Policy.

Razorpay — Payment Processor

HireSalt uses Razorpay Software Private Limited (an Indian entity) as its payment processor. When you purchase credits, the following data is shared with Razorpay to complete the transaction:

• Your full name and email address — passed as checkout prefill fields so Razorpay can pre-populate the payment form on your behalf.
• Payment card, UPI, or bank account details — entered by you directly in the Razorpay-hosted checkout interface. HireSalt never sees or stores these details.
• Order reference ID — an internal identifier in the format hiresalt_<user_id>_<pack>_<timestamp> used to link the Razorpay transaction back to your account.

After a transaction is completed, Razorpay returns the following identifiers to HireSalt, which we store for reconciliation and account credit purposes only:

• Razorpay order ID — identifies the order placed on our behalf.
• Razorpay payment ID — confirms a successful payment.
• Razorpay subscription ID — used for any recurring plan, if applicable.

We never store payment card numbers, CVVs, bank account numbers, or any sensitive payment instrument details. Razorpay's handling of your payment data is governed by their own privacy policy, which you can review at razorpay.com/privacy. Razorpay is compliant with PCI-DSS standards for payment data security.

Your Rights

You have the following rights regarding your personal data:

• Access your personal data at any time through your dashboard.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and all associated data.
• Contact us with any privacy-related questions or concerns.

Contact

If you have questions about this Privacy Policy or how we handle your data, please reach out to us at hello@hiresalt.com.

Grievance Officer

In accordance with the Information Technology Rules, 2011 and the Digital Personal Data Protection Act, 2023, the Grievance Officer for HireSalt is:

• Role: Grievance Officer, HireSalt
• Email: hello@hiresalt.com

Complaints about how your personal data is handled are acknowledged and resolved within the timelines required by law.