Privacy Policy

How we collect, use, and protect your data.

01

Who We Are

HireSift is an Irish company providing automated candidate screening software to employers. We operate as a data processor on behalf of employers who use our platform. The employer posting a job is the data controller for candidate data collected through that job posting.

Registered in Ireland. Contact: privacy@hire-sift.com

02

What Data We Collect

Employer data

  • Email address (used for authentication)
  • Company name (provided at signup)
  • Billing information (processed by Stripe — HireSift does not store card details)
  • Job postings: title, description, screening criteria you define

Candidate data

  • CV/résumé file (PDF or DOCX), uploaded by the employer
  • Extracted CV text (machine-readable version of the CV)
  • AI-generated screening results: score, criterion-level breakdown, summary, flags
  • Name, email, and phone number extracted from the CV where present
  • Status assigned by the employer (shortlisted, rejected, unreviewed)
03

Legal Basis for Processing

  • Employer account data: Processed on the basis of contract (Article 6(1)(b) GDPR) — necessary to provide the HireSift service you have signed up for.
  • Candidate CV and screening data: Processed on the basis of the legitimate interests of the employer (Article 6(1)(f) GDPR) — specifically, the employer's interest in assessing candidates for a role they have applied for. Candidates are informed of AI-assisted screening via the employer's job posting.
  • Billing data: Processed on the basis of contract (Article 6(1)(b) GDPR) — necessary to process payment for a purchased plan.
04

How AI Is Used

HireSift uses the Anthropic Claude API to analyse candidate CVs against the criteria you have defined for a role. The AI reads extracted CV text and generates a structured screening result including scores, criterion-level justifications, and flags.

  • No data retention by Anthropic: API calls to Anthropic are subject to their zero-retention policy for API customers. CV data sent for screening is not stored by Anthropic after the API call completes.
  • No model training: Candidate CV data is never used to train AI models — by HireSift or by Anthropic. Your applicants' data is used solely for screening the role they applied for.
  • Human oversight required: HireSift is an assistive tool. No candidate is shortlisted or rejected automatically. Every hiring decision requires a human action by the employer.
  • Explainability: Every AI-generated score is accompanied by a criterion-level justification citing specific CV evidence, so the basis for each result is transparent and auditable.
05

Data Retention

  • Candidate data: CV files, extracted text, and screening results are automatically deleted 6 months after the associated job is closed. Employers can delete individual candidate records at any time from the dashboard.
  • Employer account data: Retained for the lifetime of your account. Deleting your account removes all associated data within 30 days.
  • Billing records: Retained for 7 years in accordance with Irish tax law.
  • Audit logs: Screening events and employer actions are logged for compliance purposes and retained for 12 months.
06

Data Sharing

Candidate data is only accessible to the employer who posted the job the candidate applied for. HireSift does not sell, license, or share candidate data with any third party for marketing, profiling, or any other purpose.

We use the following sub-processors, each bound by data processing agreements:

  • Supabase (EU — Stockholm, Sweden): Database and file storage. All data remains within the EU.
  • Anthropic: AI screening API. Zero-retention policy applies; no data stored after API call.
  • Stripe: Payment processing. Handles billing data; HireSift does not store card details.
07

Candidate Rights

Under GDPR, candidates whose CVs have been processed through HireSift have the following rights:

  • Right of access: You can request a copy of the data held about you in relation to a specific job application.
  • Right to deletion: You can request that your CV and screening data be deleted.
  • Right to object: You can object to processing on the basis of legitimate interest.
  • Right to rectification: You can request correction of inaccurate data.

Who to contact: The employer who posted the job is the data controller and your first point of contact for exercising your rights. If you are unable to reach the employer, or if your request relates to HireSift's processing as a data processor, contact us at privacy@hire-sift.com.

You also have the right to lodge a complaint with the Data Protection Commission (Ireland) at dataprotection.ie.

08

Cookies

HireSift uses a minimal number of cookies:

  • Authentication cookies: Strictly necessary. Used to maintain your login session. Cannot be disabled without breaking the service.
  • Analytics cookies: Optional. Used to understand how the platform is used and to improve the service. Only set with your consent.

Analytics cookies are only placed after you have given consent via the cookie banner shown on your first visit. You can withdraw consent at any time by clearing your browser cookies.

09

Contact

For any questions about this privacy policy or your data, contact us:

Email: privacy@hire-sift.com

Company: HireSift

Jurisdiction: Ireland (EU)

This policy was last updated in 2025. We will notify registered employers of any material changes by email.