Hyring AI Limited · DIFC, Dubai, UAE | hyring.ai

Privacy Policy

How we collect, use, and protect your personal data

Effective Date: 04/05/2026 · Version 1.0 · Applies to: hyring.ai, iOS app, Android app

1. Who We Are

Hyring AI Limited (“Hyring”, “we”, “us”, or “our”) is a company incorporated in the Dubai International Financial Centre (DIFC), Dubai, United Arab Emirates. We operate the Hyring platform — an AI-native career intelligence and professional membership network — accessible via our website at hyring.ai and our iOS and Android mobile applications.

We are the data controller in respect of personal data processed through the Platform. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

For questions about this Policy or your personal data, contact us at nick@hyring.ai.

2. Who This Policy Applies To

This Privacy Policy applies to:

• Professional Members — senior professionals who subscribe to the Platform to access career intelligence, recruiter visibility, and matching features
• Recruiter Members — vetted recruiters who access the Platform to search candidate profiles and manage client assignments
• Company Users — employers and hiring organisations that use the Platform to post roles or engage with recruiter and candidate pipelines
• Website visitors — anyone who visits hyring.ai, whether or not they create an account

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, additional provisions apply throughout this Policy, clearly marked where relevant.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register, create a profile, or interact with the Platform, you provide us with:

• Identity data: full name, professional title, profile photograph (optional)
• Contact data: email address, phone number, country of residence
• Professional profile data: CV / resume, work history, education, skills, qualifications, career preferences, industry sector, seniority level, target locations, salary expectations
• Account credentials: username, encrypted password
• Communications: messages exchanged with recruiters or Hyring’s team through the Platform
• Payment data: billing name, billing address, payment card details (collected and processed by our third-party payment provider — we do not store card numbers)
• Preferences and settings: notification preferences, Actively Looking toggle status, privacy settings
• Content you submit: any documents, responses to prompts, feedback, or other materials you upload

3.2 Data We Collect Automatically

When you access the Platform, we automatically collect:

• Device and technical data: IP address, device type, operating system, browser type and version, unique device identifiers
• Usage data: pages visited, features accessed, search queries, time spent, click patterns, session data
• Location data: country-level location inferred from IP address (we do not collect precise GPS location without your explicit consent)
• Log data: server logs, error reports, Platform performance data
• Cookie and tracking data: see Section 10 (Cookies) for full details

3.3 Data We Receive from Third Parties

We may receive personal data about you from:

• Recruiters on the Platform: if a recruiter submits your profile as part of a shortlist or introduces you to a client through the Platform
• Linked professional profiles: if you choose to import data from LinkedIn or similar professional networks, with your explicit consent
• Payment processors: transaction confirmation and fraud signals (not card details)
• Analytics and marketing partners: aggregated and anonymised signals to help us understand Platform usage

3.4 Special Category Data

We do not knowingly collect or request special category data (including health data, racial or ethnic origin, political opinions, religious beliefs, or biometric data) as part of our standard service.

If you choose to include any such information in your CV or profile (for example, in a personal statement), you do so voluntarily. We recommend you consider carefully what you include. If you provide such data, you consent to us processing it solely for the purpose of operating your profile on the Platform.

4. How and Why We Use Your Personal Data

The table below summarises our key processing activities, their purpose, the legal basis we rely on, and our standard retention period for that data.

4.1 Automated Decision-Making and AI Processing

Some of our core features involve automated processing of your personal data, including:

• Profile matching: our AI analyses your professional profile to match you with relevant roles, recruiters, and introductions. This uses semantic analysis — going beyond keywords to assess career context, transferable skills, and seniority fit.
• Search ranking: your profile may be ranked and surfaced in recruiter search results through automated scoring. This affects your visibility on the Platform.
• Role alert prioritisation: the timing and relevance of role alerts you receive is influenced by automated scoring of your profile against available opportunities.

Right to human review: Where automated processing produces a decision that significantly affects you — such as consistent exclusion from recruiter searches — you have the right to request that a member of our team reviews the outcome. Contact privacy@hyring.ai to exercise this right.

We do not make binding hiring or employment decisions. All hiring decisions rest with the recruiting organisations and employers on the Platform, who are independent of Hyring.

5. Legal Bases for Processing (EU / UK GDPR)

Where the EU GDPR or UK GDPR applies to processing of your personal data, we rely on the following legal bases:

• Contract performance (Article 6(1)(b)): processing necessary to provide the membership service you have subscribed to, including account management, matching, alerts, and recruiter introductions
• Legitimate interests (Article 6(1)(f)): platform security, fraud prevention, abuse detection, service improvement, analytics, and business communications — where these interests are not overridden by your rights and interests
• Consent (Article 6(1)(a)): marketing communications, optional cookies and tracking, and any features requiring explicit opt-in. You may withdraw consent at any time without affecting the lawfulness of prior processing
• Legal obligation (Article 6(1)(c)): where processing is necessary to comply with a legal obligation, including tax record-keeping, responses to lawful data requests from authorities, and regulatory compliance

For special category data provided voluntarily (see Section 3.4), we rely on your explicit consent under Article 9(2)(a) GDPR.

6. Who We Share Your Personal Data With

6.1 Recruiters and Companies on the Platform

Your professional profile — including your name, career history, skills, and preferences — is shared with vetted recruiters and, through them, with their client companies, as part of the core matching and introduction service you have subscribed to.

The Actively Looking toggle controls the level of your profile visibility. When toggled off, your profile remains in recruiter search results but is not presented as actively seeking new roles. Recruiters are bound by our platform terms and applicable data protection law in their use of your information.

6.2 Service Providers and Subprocessors

We share personal data with carefully selected third-party service providers who process data on our behalf (“subprocessors”). These currently include providers in the following categories:

• Cloud infrastructure and hosting: servers and data storage
• Payment processing: subscription billing and transaction management
• Email and notification delivery: transactional and marketing communications
• AI model providers: API services used to power matching, generative AI features, and career intelligence (data is processed in accordance with our agreements with these providers and is not used to train their general models without your consent)
• Analytics: platform usage analytics and performance monitoring
• Customer support tooling: support ticket management

All subprocessors are contractually bound to process data only on our instructions, to implement appropriate security measures, and to comply with applicable data protection law. A current list of subprocessors is available upon written request to privacy@hyring.ai. We will provide 30 days’ notice of any material changes to our subprocessor list.

6.3 Business Transfers

If Hyring is involved in a merger, acquisition, financing, or sale of all or part of its assets, your personal data may be transferred as part of that transaction. We will notify you via the Platform or by email if such a transfer results in a material change to how your data is used, and you will have the opportunity to exercise your rights before any such change takes effect.

6.4 Legal and Regulatory Disclosure

We may disclose personal data where we are required to do so by law, court order, or regulatory authority — including in response to a lawful request from a law enforcement or government agency. Where permitted by law, we will notify you of such a request before complying.

6.5 What We Do Not Do

• We do not sell your personal data to third parties
• We do not share your data with advertisers for targeted advertising purposes
• We do not share your data with any party for their own independent marketing without your explicit consent

7. International Data Transfers

Hyring AI Limited is based in the DIFC, Dubai, UAE. Your personal data may be transferred to and processed in countries outside your home country, including the UAE and the countries where our subprocessors operate.

7.1 Transfers from the EEA, UK, or Switzerland

Where personal data originates from the European Economic Area, the United Kingdom, or Switzerland and is transferred outside those territories, we rely on the following transfer mechanisms:

• Standard Contractual Clauses (SCCs): the European Commission-approved clauses for controller-to-processor transfers (Module 2), incorporated into our data processing agreements with subprocessors
• UK International Data Transfer Agreements (IDTAs): the UK equivalent of SCCs for transfers from the UK, where applicable
• DIFC adequacy and transfer mechanisms: where the DIFC has issued a data protection adequacy decision, or where we rely on DIFC Law No. 5 of 2020 transfer safeguards

A copy of the relevant transfer safeguards applicable to your data is available upon written request to privacy@hyring.ai.

7.2 UAE Data Localisation

The UAE does not currently impose mandatory data localisation requirements for the categories of data we process. We select hosting and processing locations based on security, reliability, and compliance with applicable data protection standards.

8. Data Retention and Deletion

8.1 How Long We Keep Your Data

We retain personal data for as long as necessary to provide the Platform, comply with our legal obligations, resolve disputes, and enforce our agreements. Our standard retention periods are:

• Account and profile data: retained for the duration of your active membership, plus 36 months after account closure or cancellation
• Payment and billing records: 7 years from the date of transaction, to comply with financial and tax recordkeeping obligations
• Communications and support records: 36 months from the date of the communication
• Usage and log data: 12 to 24 months from collection
• Anonymised or aggregated analytics data: indefinitely (this cannot be used to identify you)

8.2 Deletion Requests

You may request deletion of your personal data at any time by:

• Using the account deletion feature within the Platform settings
• Emailing privacy@hyring.ai with a deletion request

We will action deletion requests within 30 days. We will confirm completion or, if a legal retention obligation prevents full deletion, explain what data must be retained and why.

Deleting your account will permanently remove your profile from recruiter search results. Introductions or communications already sent to recruiters prior to deletion may be retained by those recruiters in accordance with their own data protection obligations.

9. Your Privacy Rights

Depending on your jurisdiction, you have the following rights in relation to your personal data. We will respond to all valid requests within 30 days (or within the statutory period required by applicable law).

• Right of access: request a copy of the personal data we hold about you, along with information about how it is processed
• Right to rectification: request correction of inaccurate or incomplete personal data
• Right to erasure (“right to be forgotten”): request deletion of your personal data, subject to legal retention obligations
• Right to restrict processing: request that we limit how we use your data in certain circumstances
• Right to data portability: receive your personal data in a structured, machine-readable format and, where technically feasible, have it transferred to another controller (EEA/UK Members)
• Right to object: object to processing based on legitimate interests, including profiling for direct marketing purposes
• Rights related to automated decision-making: not be subject to a decision based solely on automated processing that produces legal or similarly significant effects — and to request human review of any such decision
• Right to withdraw consent: where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at privacy@hyring.ai. We will verify your identity before processing requests. We do not charge a fee for reasonable requests.

9.1 EEA and UK Members — Right to Complain

If you are located in the EEA, you have the right to lodge a complaint with the data protection authority (“supervisory authority”) in your country of residence. In the UK, the relevant authority is the Information Commissioner’s Office (ICO) at ico.org.uk.

We would, however, appreciate the opportunity to address your concern directly before you contact a supervisory authority. Please reach out to privacy@hyring.ai in the first instance.

9.2 UAE Members

If you are located in the UAE and have a concern about how we process your personal data, you may contact the DIFC Commissioner of Data Protection. Further information is available at difc.ae.

10. Cookies and Tracking Technologies

10.1 What We Use

The Platform uses cookies and similar tracking technologies (including pixels, local storage, and device fingerprinting) for the following purposes:

• Strictly necessary cookies: essential for the Platform to function — authentication, session management, security. These cannot be disabled.
• Performance and analytics cookies: help us understand how the Platform is used, identify errors, and improve features. Used with your consent where required.
• Functional cookies: remember your preferences, settings, and choices to personalise your experience.
• Marketing and attribution cookies: track conversions and measure the effectiveness of our marketing campaigns. Used with your consent.

10.2 Managing Cookies

Where consent is required, we will present you with a cookie preference centre when you first access the Platform. You can update your preferences at any time via the cookie settings link in the Platform footer.

You can also manage cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

11. Security

We implement appropriate technical and organisational measures (TOMs) to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of sensitive data at rest
• Access controls and role-based permissions limiting data access to authorised personnel only
• Regular security assessments and penetration testing
• Secure development practices and code review processes
• Incident response procedures for detecting, reporting, and managing data breaches

No method of transmission over the internet or electronic storage is completely secure. While we take data security seriously and apply industry-standard protections, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

12. Children’s Privacy

The Platform is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact privacy@hyring.ai and we will delete it promptly.

13. Third-Party Links and Services

The Platform may contain links to third-party websites, tools, or services — including LinkedIn, job boards, and other professional platforms. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through the Platform. We are not responsible for the privacy practices or content of third parties.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated Policy on the Platform with a revised effective date
• Send an email notification to your registered email address at least 14 days before the change takes effect
• Where required by law, seek your fresh consent before processing your data in any materially new way

We encourage you to review this Policy periodically. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

15. How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we process your personal data, please contact us:

Hyring AI Limited
Registered Address — DIFC, Dubai, UAE
Company Registration Number: CL6343 — DIFC

• Privacy enquiries: nick@hyring.ai
• Legal & compliance: nick@hyring.ai
• General support: letsgo@hyring.ai
• Website: hyring.ai

We aim to respond to all privacy-related enquiries within 5 business days.

© 2026 Hyring AI Limited. All rights reserved.