Privacy policy

hyr (“hyr”, “we”, “us”) is a job search tracker available at gethyr.app. For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and, for visitors in the European Economic Area or the United Kingdom, the GDPR, hyr is the data fiduciary / controller for the personal data described here. You can reach us at team@gethyr.app.

We do not collect sensitive categories of data on purpose, with one exception you control: if you turn on “Remember voluntary questions about me”, we keep your own answers to the voluntary self-identification questions employers ask (some of which, such as ethnicity, disability and sexual orientation, are special categories of data). It is off unless you turn it on; we use those answers only to fill the same questions on forms you open with hyr, never for matching, analytics or anything else; and turning it off deletes them. Please do not put information such as health details or government ID numbers into notes or uploads.

The extension is optional. If you install it:

• Saving jobs. On LinkedIn, Indeed, Naukri and Wellfound job pages it reads the job you are looking at only when you click save, shows you what it read so you can correct it, and sends those fields to hyr. It does not browse, scroll or collect anything in the background, and it never sends us your session, cookies or password for those sites.
• Filling applications. On Greenhouse, Lever, Ashby, Workable and Recruitee it fills the application form only in a tab hyr opened for you, using your hyr profile and the answers you saved. It never fills legal agreements or consents, never guesses voluntary self-identification answers, and never clicks Submit: you do. When you submit, it records the answers that were sent with that application in your account.
• What stays in your browser. Your hyr sign-in token, so the extension can act as you, and a short queue of updates waiting to reach our servers. Signing out of hyr removes the token.
• It runs only on the sites named above and on hyr itself.

• We do not sell or rent your personal data.
• We do not show your job search to employers, recruiters or other users. There are no public profiles.
• We do not use your data for advertising, and advertising cookies stay off.
• Analytics never records the contents of the signed-in app — job titles, notes, salaries and names are masked.

We use a small number of service providers (data processors) to run hyr. They handle data only on our instructions and under their own security and confidentiality commitments.

Some providers process data outside India. We transfer data only as permitted under the DPDP Act and, for visitors covered by the GDPR, rely on the providers’ standard contractual clauses.

• Waitlist: until you are invited and for 12 months after, or until you ask us to remove it.
• Account data: for as long as your account exists. When you ask us to delete your account, we delete it within 30 days, except where the law requires us to keep something.
• Technical logs: up to 30 days.
• Analytics: under the retention set in each tool, at most 14 months.

You can, at any time:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to delete it, including removing you from the waitlist;
• withdraw consent — for analytics, from “Cookie settings” in the footer; for anything else, by writing to us. Withdrawing does not affect what was done before;
• nominate someone to exercise these rights on your behalf if you die or become incapable;
• if the GDPR applies to you, also object to processing, restrict it, and receive your data in a portable format.

Write to team@gethyr.app from the address the data relates to. We reply within 30 days.

If you have a concern about how we handle your data, contact our Grievance Officer at team@gethyr.app with the subject “Grievance”. We acknowledge within 48 hours and resolve within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India, or, if the GDPR applies, to your local data protection authority.

We use strictly necessary storage to keep you signed in, and analytics only with your consent. The full list is in our cookie policy.

Data is encrypted in transit and at rest with our providers. Every table holding your data is protected by row-level security so one account cannot read another’s, uploaded files are private and reachable only through short-lived links, and access to production systems is limited. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

hyr is not meant for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us their data, write to us and we will delete it.

If we change this policy in a way that matters, we will update the date above and, if you have an account or are on the waitlist, tell you by email before the change takes effect.