Introduction
Hiup ("we", "us", "our") is a product of Olive Group Limited, registered in Ireland. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform at hiupapp.com and associated mobile applications.
Data Controller: Olive Group Limited, Dublin, Ireland.
Contact: privacy@hiupapp.com
Information We Collect
Information you provide directly
- Account information: Name, email address, phone number, password (hashed)
- Profile information (Job Seekers): Work experience, education, skills, certifications, career goals, profile photo
- Profile information (Recruiters): Company name, job title, company description, team size
- Job postings: Role descriptions, requirements, salary ranges, location
- Communications: Messages sent through the platform, contact form submissions, support requests
Information collected automatically
- Usage data: Pages visited, features used, time spent, click patterns
- Device information: Browser type, operating system, device type, screen resolution
- Network information: IP address, approximate location (city/country level)
- Cookies: Essential cookies for authentication and preferences (see our Cookie Policy)
Information from third parties
- OAuth providers: If you sign in via Google or LinkedIn, we receive your name, email, and profile photo
- Certification providers: When you complete courses, providers may share completion status with us
How We Use Your Information
- To provide our services: Matching job seekers with roles, powering AI screening, enabling recruiter pipelines
- To improve our platform: Analytics, A/B testing, feature development (aggregated, anonymised data)
- To communicate: Service updates, job alerts, recruiter notifications (you can opt out)
- To ensure security: Fraud detection, abuse prevention, account security
- Legal compliance: Responding to lawful requests, enforcing our terms
AI and Automated Decision-Making
Hiup uses AI to assist with candidate matching, skill gap analysis, and assessment scoring. Important points:
- AI assists — it does not make final hiring decisions. Recruiters always make the final call.
- All AI match scores are explainable — candidates can see exactly why they received their score.
- Recruiters can override any AI recommendation at any time.
- You have the right to request human review of any automated decision that significantly affects you.
Legal Basis for Processing (GDPR)
- Contract performance: Processing necessary to provide the service you signed up for
- Legitimate interest: Platform improvement, security, fraud prevention
- Consent: Marketing communications, optional analytics cookies
- Legal obligation: Tax records, responding to lawful authority requests
Data Sharing
We do not sell your personal data. We share data only in these circumstances:
- With recruiters: When you apply for a role, your profile information is shared with the recruiter for that role
- With job seekers: Recruiters' company and job information is visible to job seekers
- Service providers: AWS (hosting), Stripe (payments), email delivery services — all bound by data processing agreements
- Legal requirements: When required by law or to protect our rights
Data Retention
- Active accounts: Data retained while your account is active
- Deleted accounts: Personal data deleted within 30 days; anonymised analytics data retained
- Cancelled recruiter accounts: Data retained for 90 days (export window), then permanently deleted
- Legal records: Financial records retained for 7 years as required by Irish law
Your Rights
Under GDPR, you have the right to:
- Access: Request a copy of all personal data we hold about you
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your data
- Object: Object to processing based on legitimate interest
- Withdraw consent: Where processing is based on consent, withdraw at any time
To exercise any right, email privacy@hiupapp.com. We respond within 30 days.
Data Security
We implement appropriate technical and organisational measures including:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Access controls and principle of least privilege
- Regular security assessments and penetration testing
- Incident response procedures with 72-hour breach notification
International Transfers
Your data is processed within the EU (AWS eu-west-1, Ireland). Where we use sub-processors outside the EU, we ensure adequate safeguards through Standard Contractual Clauses or adequacy decisions.
Children
Hiup is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately.
Changes to This Policy
We may update this policy from time to time. Material changes will be notified via email or in-app notification at least 30 days before taking effect.
Contact
For privacy-related questions or to exercise your rights:
Email: privacy@hiupapp.com
Post: Data Protection, Olive Group Limited, Dublin, Ireland
Supervisory Authority: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, Ireland — www.dataprotection.ie