Privacy Policy

Hyranse provides a candidate sourcing platform that enables recruiters and hiring professionals to discover candidates from publicly available sources ("Service"), available at https://hyranse.com/.

This Privacy Policy explains how Artashes Stepanyan Individual Entrepreneur (trading as Hyranse) ("we", "our", or "us") collects, uses, and shares personal information, and how you can exercise your privacy rights. US residents should also read our US Privacy Notice. Business customers should read our Data Processing Agreement. This Policy applies to:

• Information we collect when you visit our website or use the Service as a customer or user;
• Personal information of job candidates contained in our professional profile search index, compiled from publicly available professional sources.

Data Controller

1. Who This Policy Applies To

We process personal information relating to two categories of individuals:

Customers and Users — recruiters, hiring managers, and other professionals who register for and use the Hyranse platform.

Job Candidates — individuals whose publicly available professional information (name, work history, qualifications, contact details) appears in our professional profile search index and is surfaced to our customers for recruitment purposes. Candidates have not directly interacted with Hyranse but may have a professional profile on publicly accessible websites, job boards, or professional networks. See our Transparency Notice and Candidate Privacy Center.

2. Personal Information We Collect

2.1 From Customers and Users

When you register or use the Service, we may collect:

• Name, job title, company name, and email address;
• Account credentials and login information;
• Payment and billing information (processed by our third-party payment provider — we do not store full payment card details);
• Search queries, filters, and usage history within the platform;
• IP address, browser type, device information, and approximate location;
• Communications with our support team.

2.2 From Public Professional Sources (Search Index)

We maintain a searchable index of professional information from public sources. Data sources include publicly available professional networking platforms, employer websites, public company biographies, conference speaker pages, public business directories, and other lawful public professional sources. This information is used solely to help our customers identify qualified candidates for open roles.

We do not collect information from private profiles, restricted areas, or non-public accounts.

The personal information we collect about candidates may include:

• Full name and professional headline;
• Current and previous job titles and employers;
• Educational background and professional qualifications;
• Skills and experience;
• Publicly listed contact information (where available);
• Professional availability signals, such as Open To Work indicators, where publicly disclosed.

We do not intentionally collect sensitive personal data (such as health information, political opinions, religious beliefs, or financial data) from public sources.

2.3 Automatically Collected Information

• Log data: access times, pages viewed, browser type, IP address;
• Device information: hardware model, operating system, unique identifiers;
• Usage data: features used, frequency and duration of activities;
• Cookies and similar tracking technologies (see our Cookie Policy).

3. Legal Basis for Processing

We process personal information on the following legal grounds under the UK GDPR and, where applicable, the EU GDPR:

3.1 Customers and Users

• Contract — to provide the Service, manage your account, and process subscriptions;
• Legitimate interests — to improve the Service, prevent fraud, and ensure security;
• Consent — for optional marketing communications and non-essential cookies, where required;
• Legal obligation — to comply with applicable tax, accounting, and regulatory requirements.

3.2 Job Candidates

We act as an independent data controller with respect to the collection, organisation, and maintenance of the professional profile search index. Our customers act as independent controllers regarding their own recruitment activities.

We process personal information about job candidates on the basis of legitimate interests — both ours and those of our customers. Our legitimate interest is to provide an effective recruitment solution that enables hiring professionals to identify qualified candidates. Candidates' professional information, published publicly on professional platforms and job boards, is made available for professional visibility and career opportunities.

We have conducted a Legitimate Interests Assessment (LIA). A public summary is available in our LIA Summary. We reasonably consider that individuals who publish professional information on publicly accessible professional platforms may expect such information to be used for recruitment-related discovery, subject to applicable data protection laws and appropriate safeguards.

We concluded that this processing does not override the rights and freedoms of candidates, given that:

• Only professional (not private) information is collected;
• The data is sourced exclusively from publicly available sources;
• The processing is limited to recruitment purposes;
• Candidates can opt out at any time through our Candidate Privacy Center.

4. How We Use Personal Information

4.1 Customers and Users

• To provide, maintain, and improve the Service;
• To process payments and manage your subscription (via our third-party payment provider);
• To communicate with you about your account, updates, and support;
• To detect and prevent fraud and security incidents;
• To comply with applicable legal obligations;
• To send marketing communications (where you have opted in or where permitted by applicable law).

Contact lookup in the Hyranse app and through our API or MCP (including batch endpoints) is designed for profiles you have already identified for a recruitment shortlist, subject to plan credits and usage limits. It supports defined hiring workflows only.

4.2 Candidates

• To enable our customers to search, discover, and review candidates for legitimate recruitment purposes;
• To maintain the accuracy and completeness of candidate profiles;
• To respond to opt-out, correction, or deletion requests;
• To maintain suppression records so that deleted profiles are not re-added without justification.

We do not use candidate data for advertising unrelated to recruitment or for sale of personal data. AI-assisted search match results are described in Section 4.3.

4.3 AI-assisted search features

Hyranse is used in the pre-application discovery phase of recruitment — before a candidate applies to a specific role. Our AI Candidate Search feature lets customers paste a job description ("JD") and receive a suggested shortlist of candidate profiles from our search index, including match indicators, matched skills, and skill gaps ("search match results").

Search match results are generated using software operated by us and technical service providers that support parsing, search, and relevance comparison — based on the JD and professional information in our search index. Further detail on subprocessors is in Section 5.

These features help recruiters review profiles for open roles. They do not make hiring, rejection, or employment choices about candidates. Recruiters and hiring teams review every result themselves and decide whether to contact a candidate. Hyranse does not automatically contact candidates on a customer's behalf. We do not use search match results to produce legal or similarly significant effects about candidates based solely on automated processing within the meaning of Article 22 UK GDPR / EU GDPR.

For candidates, search match results relate to recruitment discovery only. We do not use them for advertising unrelated to recruitment or for sale of personal data. See our Transparency Notice for information provided to candidates.

Customer-submitted job descriptions and related search inputs are processed to deliver the Service, including AI Candidate Search, and may be logged according to our retention practices for customer account and usage data.

5. Disclosure of Personal Information

We do not sell personal information to data brokers or for cross-context behavioral advertising. We do not rent customer account information to third parties for their independent marketing. We never resell or redistribute professional profile data as a standalone dataset, marketing list, or data-broker product.

Candidate professional profile information is made available to registered customers for recruitment purposes under our Acceptable Use Policy and Terms of Service — as part of the Service, not as a standalone data product sold to data brokers. See our US Privacy Notice for additional information for US residents, including California rights relating to sale and sharing.

Service Providers — We share data with third-party providers who support our operations, including:

• Our payment provider (payment processing for subscriptions), named on the checkout page and on your receipt;
• Calendly, LLC (demo scheduling — name, email, and booking details when you request a product demo through our website);
• Cloud hosting providers;
• Analytics providers (where you have consented to analytics cookies);
• Technical service providers that support AI-assisted search, parsing, and relevance comparison features (where used to operate the Service);
• Email and customer support tools.

All providers are contractually bound to protect the data and use it only for specified purposes.

Customers (Candidate Data) — Candidate profile information is made available to our paying customers for recruitment purposes in accordance with our Acceptable Use Policy and Terms of Service.

Business Transfers — In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction.

Legal Compliance — We may disclose personal information if required by law, court order, or government authority, or to protect the rights, safety, or property of Hyranse or others.

Aggregated or De-identified Data — We may share aggregated or anonymised information that cannot reasonably identify any individual.

6. International Data Transfers

Personal information may be transferred to and processed in countries outside your country of residence, including the Republic of Armenia and countries where our service providers operate. Where such transfers occur from the UK or EEA, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) as approved by the UK Information Commissioner's Office (ICO) and/or the European Commission, or other lawful transfer mechanisms recognised under applicable law.

7. Your Rights and Choices

Where personal data has been obtained indirectly, we assess our obligations under Article 14 UK GDPR and EU GDPR and provide required privacy information through this Policy and our Transparency Notice, unless a statutory exemption applies.

Upon receipt of a verified objection or deletion request, candidate profiles are removed from future customer searches within a reasonable period (typically within 30 days), subject to legal retention obligations and backup limitations. We maintain suppression records to prevent re-indexing where appropriate.

• Right to Access — request a copy of the personal information we hold about you;
• Right to Rectification — request correction of inaccurate or incomplete information;
• Right to Erasure — request deletion of your personal information (subject to legal obligations);
• Right to Restriction — request that we limit the processing of your information;
• Right to Object — object to processing based on legitimate interests;
• Right to Data Portability — receive your information in a structured, machine-readable format where applicable;
• Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time;
• Right to Lodge a Complaint — with the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Candidates: Use our Candidate Privacy Center or email support@hyranse.com to opt out, request correction, or deletion. We will process verified requests within 30 days.

Customers: To exercise your rights, log in to your account or contact us at support@hyranse.com.

8. Cookies

We use cookies and similar technologies to operate the Service, analyse usage, and improve your experience. Upon your first visit, you will be presented with a cookie consent banner. See our Cookie Policy for details.

9. Data Retention

• Customer account data — retained for the duration of the subscription and up to 3 years after account deletion, unless a longer period is required by law;
• Professional profile search index information — regularly updated; removed upon valid opt-out or deletion request, with suppression maintained where appropriate;
• Payment records — retained as required by applicable tax and financial regulations.

10. Children

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor's information has been collected, we will take steps to delete it promptly.

11. Third-Party Links

The Service may contain links to third-party websites and booking tools (including Calendly for demo requests). This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notice to your registered email address. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us