Version privacy-2026-09
Privacy notice for candidates
When you apply for a job through HireFlow, the company you apply to decides how your application is handled. HireFlow is run by ArivuGuru and processes your data on that company’s behalf.
What we collect
- Your email address (verified with a one-time code) and the answers you give in the application form.
- Your resume, which is scanned for malware, converted to text, and split into sections so the hiring team can read and search it.
- If you take an assessment: your answers, their timings and integrity signals such as leaving full screen. With camera checks switched on and your consent, a photo every 30 seconds.
- Interview feedback written by the hiring team, and emails sent to you.
How it is used
- To let the hiring team review your application, contact you, and schedule interviews.
- AI may suggest things to the hiring team — for example a summary of your resume or a score for a written answer. Before any AI sees your data, your email, phone, address, date of birth and salary details are removed. AI never makes a decision about you: a person reviews every suggestion, and no one is rejected automatically.
- Salary expectations, notice period and contact details are visible only to the company’s HR team, not to interviewers.
Companies on the free plan
If the company you apply to uses HireFlow’s free plan, ArivuGuru may use application data from that company, with contact details removed, to improve HireFlow. Paid plans do not allow this.
How long we keep it
Each company sets a retention period, 24 months unless they choose otherwise. After it ends, with no active application, your data is deleted automatically.
Your rights
Use the status link in your application email to withdraw, or to ask for a copy or deletion of your data. Requests are completed within 30 days, and deletion covers your files, resume search index and every copy held by HireFlow.
Who processes your data
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud / Firebase | Hosting, database, file storage, authentication | India (asia-south1) |
| Microsoft 365 | Sending email from noreply@ariveguru.com; calendar invitations for staff who connect Outlook | India / global |
| Cloudflare Turnstile | Bot protection on application forms | Global |
| Anthropic | AI suggestions on redacted text (no contact details or salary) | United States |
| DeepSeek | AI suggestions on redacted text (fallback provider) | Global |
Questions: reply to any email from the company, or write to privacy@ariveguru.com.