Privacy Policy

Last updated: June 2025

1. Information We Collect

We collect information that you provide directly to us, including your name, email address, phone number, and any recruitment data you process through our platform (such as candidate CVs).

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, to develop new ones, and to protect HireFlow and our users. Candidate data is strictly used for the recruitment purposes defined by the employer account.

3. Data Security

We use reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction.

4. Google OAuth Data Usage Disclosure

HireFlow accesses, collects, and stores user information obtained via Google OAuth — specifically your full name, work email address, and profile picture avatar. This data is processed exclusively for account provisioning, identity authentication, profile personalization, and secure access control to your workspace. We strictly adhere to Google API Services User Data Policy, including the Limited Use requirements. We do not sell, trade, or transfer your Google user data, candidate lists, or resume extraction data to any third-party advertising networks, data brokers, or tracking systems.

5. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@hireflowindia.com.

Page-Level Analytics & Behavioral Data

We collect technical analytics on how users interact with our platform to improve our product and detect usability issues. This is stored in a secure database table named analytics within our Supabase infrastructure.

What we collect per page visit:

Referral Source — Where you came from (LinkedIn, Facebook, Google Ads, direct link, WhatsApp, email campaign, etc.)
Page Time — How many seconds you remained on each page, classified as Smooth (<2 min), Balance (2–30 min), or Extreme (>30 min)
Scroll Depth — What percentage of the page you scrolled through
Click Patterns — Total clicks and detection of repeated clicks on the same element, which may indicate confusion or a bug
Idle Time — Periods of inactivity that may indicate the user is stuck or away
Device & Browser — Your device type, operating system, browser, and screen dimensions
IP Address — Used to determine approximate country and city for geographic reporting. Not stored for identification.
Session ID — A randomly generated token per browser session to associate page visits without requiring login

Data Retention: Analytics session records expire after 24 hours. Aggregated, anonymised summaries may be retained longer for product improvement.

Pages Tracked: All pages of the platform are tracked. Entry pages (Landing, Login) are classified separately from tool pages (Dashboard, Campaigns, Candidates, Board, Settings) to distinguish acquisition behavior from product usage.

No third-party advertising trackers are embedded in HireFlow WINDIA. This data is used exclusively for internal product analytics and is never shared with advertisers or data brokers.

To request deletion of your analytics data, email privacy@hireflowindia.com with the subject line "Analytics Data Deletion Request".