Privacy Policy

BafarLabs (operated by PRORESUMESIN SERVICES PVT LTD) is committed to protecting the privacy of recruiters and candidates using HiringPartner.ai in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

2. Information We Collect

Account Information

• Recruiter Data: Name, email address, company details, job title
• Authentication: Login credentials (managed securely by Clerk)
• Billing Information: Payment details for subscription services

Candidate Information

• Contact Details: Names, email addresses, phone numbers uploaded by recruiters
• Resume/CV Data: Professional experience, skills, education, certifications
• Interview Data: Audio/video recordings and transcripts from AI-powered interviews
• Assessment Results: AI-generated scores, evaluations, and recommendations

Usage & Technical Data

• IP addresses, browser type, device information
• Pages visited, features used, session duration
• Cookies and similar tracking technologies

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent (GDPR Art. 6(1)(a)): For call recordings, resume analysis, and marketing communications
• Contract Performance (GDPR Art. 6(1)(b)): To provide our hiring services
• Legitimate Interests (GDPR Art. 6(1)(f)): For platform improvement and security
• Legal Obligation (GDPR Art. 6(1)(c)): For tax, accounting, and regulatory compliance

4. How We Use Your Information

We use your data to:

• Provide and improve our AI-powered hiring services
• Screen and interview candidates on your behalf
• Parse and analyze resumes using AI technology
• Generate hiring recommendations and detailed reports
• Process payments via Razorpay
• Send service updates and important communications
• Improve our AI models using anonymized data only
• Detect and prevent fraud or platform abuse
• Comply with legal obligations

5. AI Recordings & Consent

We collect explicit consent from candidates before processing their data, including:

• Call recording consent
• Resume analysis consent
• Interview recording consent
• Data processing consent

6. Data Sharing & Third Parties

We share data with trusted, GDPR-compliant service providers strictly for processing purposes:

We do NOT sell your personal data to third parties.

7. Data Retention

We retain your personal data only as long as necessary for the purposes stated in this policy:

• Account Data: Until account deletion + 30 days for backup
• Candidate Data: 90 days after hiring decision, then automatically anonymized
• Call Recordings: 90 days, then permanently auto-deleted
• Interview Results: 90 days, then permanently auto-deleted
• Financial Records: 7 years (legal requirement in India)
• Audit Logs: 7 years for compliance purposes

Our system automatically deletes or anonymizes data after retention periods expire.

8. Your GDPR Rights

Under GDPR, you have the following rights:

• Right to Access (Article 15): Obtain a copy of your personal data
• Right to Rectification (Article 16): Correct inaccurate information
• Right to Erasure (Article 17): Request deletion of your data
• Right to Restriction (Article 18): Limit how we process your data
• Right to Data Portability (Article 20): Receive data in machine-readable format
• Right to Object (Article 21): Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

9. Security & Protection

We implement comprehensive security measures to protect your data:

• End-to-end encryption for data in transit (TLS/SSL)
• Encryption at rest for sensitive data (AES-256)
• Multi-factor authentication (MFA) support
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Automated backup and disaster recovery systems
• Employee training on data protection best practices

10. Cookies & Tracking

We use cookies and similar technologies to enhance your experience. You can manage cookie preferences through our cookie consent banner or your browser settings.

Cookie Types:

• Strictly Necessary: Required for platform functionality (cannot be disabled)
• Functional: Remember your preferences and settings
• Analytics: Help us understand usage patterns (optional)

11. International Data Transfers

Your data may be transferred to and processed in countries outside India and the EEA, including the United States. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements (DPAs) with all service providers
• EU-US Data Privacy Framework (where applicable)

12. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR Article 33.

13. Children's Privacy

Our services are not intended for individuals under 18 years old. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on our platform. Continued use after changes constitutes acceptance of the updated policy.

15. Contact Us