This policy explains what personal data Hireriv collects through this website, why we collect it, who we share it with and the choices you have. We built it around India's Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025 and the Information Technology Act, 2000, and we keep reviewing it as their provisions come into force.
Why we ask, and your separate choices
Each use of your data below is a separate choice. Agreeing to our terms when you create an account never means that you also agree to be found by employers, to be considered for other jobs or to get marketing. Every time you give or withdraw one of these, we record what you chose, the version of this policy you saw, where you did it and when, and you can see that record under Privacy & data.
- Your account and applications: Keeping your profile and resume, sending each application to the employer you applied to, and telling you what happens next. Needed for the service; withdrawn by deleting your account.
- Considered for other jobs: Hireriv recruiters may look at your profile for other jobs that fit and contact you about them.
- Findable by verified employers: Verified employers on Hireriv may find your profile (without your contact details) and invite you to apply.
- Mobile number for verified employers: Verified employers who find your profile may unlock your name and mobile number to call or WhatsApp you about a job. You are told which companies did.
- Job alert emails: Emails about new jobs matching an alert or saved search you set up.
- News and career tips: Occasional emails about Hireriv and career advice. Never needed for applying.
- WhatsApp updates: Job matches and updates on WhatsApp.
- SMS reminders: Interview reminders by SMS.
- AI career assistant: Your messages to the career assistant, with the skills, experience and place on your profile, are sent to our AI provider to write the answers. Contact details are removed first. Turning it off deletes the conversation.
What we collect
- When you apply for a job or submit your CV: your name, email, phone, resume, total experience, current location, notice period, key skills, LinkedIn or portfolio link and anything you write in the message. We also note which page or link brought you to us. For quick applications (skilled and field jobs) only your name and mobile number are required; the rest is optional. If you apply by WhatsApp, phone or in person, a recruiter records the same details for you.
- When you create an employer account or join a company's hiring team: your name, work email, mobile number (and when you verified it with a code) and a scrambled (hashed) copy of your password; your role in each company you work with; and the company's details (name, industry, size, website, hiring locations, address and registration numbers such as GSTIN, CIN or Udyam), plus the jobs you post. We use them to check the company, run the account and keep a log of what each team member does in the company's workspace (for example opening an applicant's details or changing their status), kept for 2 years.
- When you share a hiring requirement or contact us: your name, company, work email, phone and the details of your message.
- When you report a job listing: the reason, any details you write and, if you give it, your email so we can reply.
- When you subscribe to job alerts or our newsletter, or save a search: your email address, the filters you chose (for example a category, city, skills or shift), the name you gave the search and how often you want emails.
- When you create a job-seeker account: your name, email, mobile number and, if you add them, your city, experience, notice period, key skills, LinkedIn link and resume. We keep these as your profile (it works like a CV sent to our talent network) and use them to show you matching jobs and to fill in your one-click applications. Each one-click application sends a copy of your profile and resume for that job. Anything else you add to your profile is optional: your state, the jobs, places, pay and shifts you want, when you can start, work experience, education, certificates and languages, and up to three resumes. If you set a password we keep only a scrambled (hashed) copy. We also keep a log of sign-ins and account changes for 12 months so you can spot anything you don't recognise, plus your consent and your choices about WhatsApp, SMS and other messages. We never ask for Aadhaar, PAN, bank details or your date of birth to browse or apply for jobs.
- When you use your account or the employer portal: your sign-in email, and for contractors, the timesheets you submit.
Reading your resume
Every resume is checked to be a genuine PDF or Word file and scanned for viruses before we store it. Resumes are kept privately on our server and can only be downloaded by you, our recruiters, clients you've been shared with, and, for jobs a company posted itself, the people on that company's hiring team who work on the job, through links that expire after a few minutes.
When you choose a PDF or Word resume on the apply form, our server reads the text to fill in empty fields for you. Nothing is saved unless you submit the application. Once you apply, we keep the resume text with your application so our recruiters can search for and match your skills to suitable roles. Every match is reviewed by a person; no hiring decision is made automatically.
How we use your data
- To assess you for the role you applied for and for similar roles, and to contact you about them by email, phone, SMS or WhatsApp. Messages sent on WhatsApp are also handled by WhatsApp (Meta) under its own terms
- To schedule interviews, ask you to confirm them, and send you updates on your application, including any job offer, as notifications in your account and by email
- To respond to hiring requirements and enquiries
- To send job alerts and newsletters you asked for
- To issue invoices and keep the business and tax records the law requires
- To keep the site secure, for example by limiting repeated form submissions
We rely on the consent you give when you submit a form. You can withdraw it at any time (see below).
Who we share it with
We share your profile with a client employer only to put you forward for a role. Shared profiles show your name, skills, experience and resume. We leave your email address and phone number off the profile, but the client will see any contact details written in the resume you uploaded. Interviewers we invite see your name and the role only.
Some jobs are posted by the employer itself (the job page says so). When you apply for one, your application, including your contact details and resume, goes directly to that company's hiring team. Only the team members working on that job can see your contact details and resume; others in the company can see only your name, skills, experience and progress. The company may use your details only for that hiring process, under our job posting rules.
Hiring teams may keep internal notes, interview feedback and offer details about your application. These are visible only to the people working on that job and are used only to make the hiring decision. Match scores help them decide, but nobody is rejected automatically. Your account shows where your application stands.
Staffing assignments. If you are placed as a temporary or contract worker, we record where and when you work (the client, site, dates and shift) and the rates agreed, to run the assignment and bill the client. The client sees your name, role, site, dates and shift and the amounts billed for your work, never your pay rate. These records are kept with the placement and its invoices, which are business and tax records.
Phone notifications and the app. If you turn on phone notifications, we keep the address your browser's push service gave us, your device's encryption keys, the type of device (for example "Android phone") and when we last sent an alert. They are linked to your account and to the sign-in you used, so they stop when you sign out, and you can turn them off in Notification settings at any time. Alerts only say that something new arrived and in which area; the details open after you sign in. If you install the app, it keeps only our public files (styles, script, images and the offline page) on your device, never your applications, resume or messages.
Reports and appeals. If you report a job, an employer or a candidate, we keep what you wrote, the email address you give (if any) and any file you attach, so our trust & safety team can look into it. We never tell the other party who reported them, and we only tell you whether your report was handled, not what we did about someone else. When we restrict a listing or an account, the company can appeal and someone who did not make the decision reviews it. Two years after a case is closed, what people wrote and uploaded is deleted; a record that the decision was made stays in our audit trail.
Website statistics. We count how often pages are viewed, searches made, application forms opened and sent, accounts created and inquiries received, per day. These counts use no cookies and keep nothing about you: no IP address, browser details, name, email or anything you type. If your browser sends Global Privacy Control or Do Not Track, you are not counted at all.
Businesses that talk to us about hiring. When you ask us about hiring through our website, register a company, or we meet you or are introduced to you, we keep your name, company, work email, phone, designation and hiring needs so our sales team can reply and follow up, with the reason we hold them. We send you sales emails only about proposals you discussed with us or if you agreed, and every one has a link to stop them. If you accept a proposal online, we keep the name and designation you typed, the time, your browser and a one-way fingerprint of your connection (not the address itself) as evidence. If nothing comes of it, we remove your contact details after 24 months without contact.
Signing contracts for your company. When a company owner signs a contract with Hireriv in the portal, we keep their name, email, the name and designation they typed, the time, their browser, a one-way fingerprint of their internet connection (not the address itself) and a fingerprint of the exact contract text, as evidence of the signature, for as long as the contract and its records are kept.
Working through Hireriv. When you join a client as a temporary or contract worker, we keep your joining steps, the documents you upload for them (only what the job needs: never one particular identity card, an identity number or bank details), your emergency contact, your shifts, the check-in, break and check-out times recorded by you or your supervisor, corrections and timesheets. We never record where you are. Your documents and emergency contact are seen only by you and Hireriv's staffing team, and each time someone opens a document it is logged. The client's supervisors see your name, role, shifts, attendance and timesheets, never your documents, email or pay. These records are kept with your placement for as long as the business and tax records it supports.
Being found by employers. Only if you turn on "Let verified employers find my profile" in your account settings, people at companies we have verified can see a short version of your profile: your first name and initial, skills, experience level, city, education level, recent job titles (without the employers' names), the work you want and when you can start. They never see your email, phone number or resume this way. They can invite you to apply for one of their open jobs; you get a notification and an email, and it's up to you. Your details reach them only if you apply. Turn the setting off and you disappear from their searches straight away. Invitations are listed in your data download and deleted with your account.
Recommendations and match scores. We suggest jobs and show how well you match them using only your work details: skills, experience, location, the pay, job type and shift you want, and your saved searches and saved jobs. We don't use your name, age, gender, photo or similar personal characteristics, and details you haven't given are left out rather than counted against you. If you ask us to read your resume to fill in your profile, nothing is added until you check it.
We use service providers to host this website and send email and text messages. They process data only on our instructions. We do not sell your personal data, and we never share it for advertising.
How long we keep it
We keep applications while they are useful for recruitment, or until you ask us to delete them. Invoices and placement records are kept for as long as Indian tax law requires, even if the candidate's other data is deleted.
The notifications in your account are deleted after a year. Our record of each email we sent (what kind of email, when, and whether it was delivered, without its text or your address) is deleted after 90 days, and delivery reports from our email provider after 30 days. If an email to you bounces or is reported as spam, we keep a one-way fingerprint of the address (not the address itself) so we stop emailing it.
Your rights and choices
- See and update your data: sign in to your account with the email you registered or applied with to view your applications, update your profile and resumes, manage your job alerts, choose whether our recruiters may find your profile for other jobs, and download a copy of your data.
- Withdraw or delete: from your account you can withdraw an application, or delete your account and all your data (profile, applications, resumes, job alerts, saved jobs, account activity and newsletter) in one step.
- Unsubscribe: every job alert and newsletter email has a one-click unsubscribe link, and in notification settings you can turn off emails about application updates and new jobs. Emails about your interviews, offers and account security are part of the service you asked for, so they always go.
- Requests: send us a request (or, signed in, from Privacy & data) to get a copy of your data, correct or delete it, withdraw a consent, or complain. We confirm it's you, give it a number, and answer within 30 days. If we can't do what you ask (for example, invoices we must keep by law), we tell you why. You can also email hello@hireriv.com, including to nominate someone to act for you.
Cookies and browser storage
We use only the cookies needed to keep you signed in to your job-seeker account, the client portal or the team admin area. We do not use advertising or tracking cookies. Jobs you save are stored in your own browser, and also in your account when you're signed in to one, so they show on your other devices. You can clear them from the Saved jobs page. The site loads fonts from Google Fonts, which receives your IP address when the page loads.
Security
Passwords are stored as salted hashes, and sign-in links are single-use and expire. The admin area is restricted by role and needs two-step sign-in for privileged staff. Resumes and documents are encrypted where they are stored and can be downloaded only through short-lived links, and each opening is logged. We watch for suspicious sign-ins, refused requests and unusual downloads, and we have a written plan for security incidents. No system is completely secure, so if we become aware of a breach that affects you, we will tell you, the Data Protection Board of India and CERT-In as the law requires.
Grievances and contact
For questions or complaints about your personal data, contact our Grievance Officer at hello@hireriv.com or +91 00000 00000, or write to Your office address, City, State - PIN. We respond within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.
Changes to this policy
If we change this policy, we will update the date at the top of this page. Significant changes will also be highlighted on the site.