Privacy Policy
HR Paddy is committed to protecting your personal data. This policy explains what information we collect, how we use it, how long we keep it, and your rights as a user of our platform.
Last updated: April 2026
1. Information we collect
HR Paddy collects personal data necessary for recruitment operations. For recruiters: name, email, company details, and subscription information. For applicants: name, email, phone number, CV/resume, education history, skills, work experience, and screening responses. For interview participants: audio recordings, video recordings, and AI-generated transcripts. We also collect usage data such as login timestamps, browser type, and IP addresses for security and analytics purposes.
2. Candidate interview consent
HR Paddy displays a clear, mandatory consent notice before any AI-led video interview begins. Applicants must explicitly agree that audio and video will be recorded for recruitment evaluation purposes only. No recording begins until the candidate grants consent. Candidates may withdraw consent at any time by closing the interview session, though incomplete interviews cannot be evaluated. Consent records are stored alongside interview metadata for audit compliance.
3. How we use your data
Personal data is used exclusively for recruitment-related activities: processing job applications, AI-powered CV screening and scoring, conducting AI video interviews, generating candidate recommendations, and communicating application status updates via email. Recruiter data is used for account management, subscription billing, and platform analytics. We do not sell, rent, or share personal data with third parties for marketing purposes.
4. 48-hour recording retention policy
All recorded interview data (audio and video) is automatically deleted from our cloud storage within 48 hours of the interview session. This strict retention policy applies uniformly across all plans. Recruiters are notified that recordings expire and should review interview results promptly. AI-generated transcripts and evaluation summaries are retained for the duration of the recruitment cycle but do not contain raw audio/video data. This policy is enforced through automated cleanup processes that run continuously.
5. Data security and access controls
HR Paddy implements role-based access control (RBAC) to ensure data is only accessible to authorized users. Recruiters can only view applicants for their own company's job listings. Applicants can only view their own application data. Super administrators have platform-wide access for support and governance purposes. All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. We conduct regular security audits and vulnerability assessments.
6. Third-party services
HR Paddy uses trusted third-party services for essential platform operations: cloud hosting and database services for data storage, AI models for CV screening and interview evaluation, email delivery services for notifications and invitations, and payment processing for subscription management. All third-party providers are vetted for compliance with applicable data protection regulations. We maintain data processing agreements with each provider.
7. Your rights
You have the right to: access all personal data we hold about you, request correction of inaccurate data, request deletion of your data (subject to legal retention requirements), object to processing of your data, receive your data in a portable format, and withdraw consent at any time. To exercise any of these rights, contact us at hello@hrpaddy.com. We will respond to all requests within 30 days.
8. Cookies and tracking
HR Paddy uses essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking. Analytics cookies may be used to understand platform usage patterns and improve the user experience. You can manage cookie preferences through your browser settings.
9. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify registered users of material changes via email at least 14 days before they take effect. Continued use of the platform after changes constitutes acceptance of the updated policy. The date of last revision is displayed at the top of this page.
10. Contact us
For privacy-related inquiries, data requests, or concerns about how your information is handled, please contact our data protection team at hello@hrpaddy.com. We are committed to resolving any concerns promptly and transparently.