1. Introduction
Interactive Foundry AG ("we", "us", or "our"), operating the HireFlow platform, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered recruitment platform.
We process personal data in accordance with the Swiss Federal Act on Data Protection (nDSG), the General Data Protection Regulation (GDPR) where applicable, and other relevant data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
3. Information We Collect
3.1 For Employers (Our Customers)
- Account information (company name, contact details, email address)
- Billing and payment information
- Job posting content and requirements
- Communication preferences
- Usage data and platform interactions
3.2 For Candidates
- Contact information (name, email, phone number)
- Professional information (CV, work experience, qualifications, certifications)
- Work authorization status (e.g., Swiss work permit type)
- Language proficiency
- Availability and scheduling preferences
- Communication records (WhatsApp, SMS, voice interactions with our AI)
- Interview recordings and assessments (with consent)
3.3 Automatically Collected Information
- Device and browser information
- IP address and location data
- Cookies and similar tracking technologies
- Platform usage analytics
4. How We Use Your Information
We use the collected information for the following purposes:
- Providing and improving our AI-powered recruitment services
- Screening and matching candidates with job opportunities
- Facilitating communication between employers and candidates
- Scheduling interviews and sending reminders
- Processing payments and managing accounts
- Analyzing and improving our AI algorithms
- Ensuring platform security and preventing fraud
- Complying with legal obligations
- Sending service-related communications
5. Legal Basis for Processing
We process personal data based on the following legal grounds:
- Contract performance: Processing necessary to provide our services
- Legitimate interests: Improving our services, ensuring security, and marketing
- Consent: Where you have given explicit consent (e.g., for voice recordings)
- Legal obligation: Compliance with applicable laws and regulations
6. AI and Automated Decision-Making
HireFlow uses artificial intelligence to screen candidates, assess qualifications, and provide matching scores. Our AI systems:
- Analyze candidate responses against job requirements
- Generate qualification scores to assist hiring decisions
- Conduct automated conversations via WhatsApp, SMS, and voice
Important: Final hiring decisions are always made by human recruiters. Candidates have the right to request human review of any AI-generated assessment and to contest automated decisions.
7. Data Sharing and Disclosure
We may share your personal data with:
- Employers: Candidate data is shared with employers for recruitment purposes
- Service providers: Cloud hosting, communication services, payment processors
- Legal authorities: When required by law or to protect our rights
We do not sell personal data to third parties for marketing purposes.
8. Data Storage and Security
All data is stored in secure data centers located in Switzerland. We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption in transit and at rest
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
9. Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this policy:
- Active accounts: Data retained while the account is active
- Candidate data: Retained for 2 years after last activity, unless deletion is requested
- Legal requirements: Some data may be retained longer for compliance purposes
10. Your Rights
Under applicable data protection laws, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Withdraw consent at any time where processing is based on consent
To exercise your rights, contact us at hello@hireflow.ch.
11. International Data Transfers
Your data is primarily processed and stored in Switzerland. If data is transferred outside Switzerland or the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
12. Cookies
We use cookies and similar technologies to improve your experience on our platform. You can manage cookie preferences through your browser settings. Essential cookies are required for the platform to function properly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our website and updating the "Last updated" date.
14. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.