Privacy Policy
Last updated: October 7, 2026. Applies to recruiting.shsxnk.com and all accounts.
Who we are
Recruiting AI is operated by an independent recruiter-tool business based in Hyderabad, India. For privacy questions, rights requests, or grievances, contact devshsxnk@gmail.com — this address also serves as the grievance contact under India's DPDP Act, 2023. We respond within 30 days.
What we collect
Account data you give us: email address, display name, password hash (never the password), and session records. Google sign-in users additionally share the verified email and Google account ID Google returns.
Workspace content you create: searches, job descriptions, evaluations, pipeline stages, and decisions. Candidate records are designed around opaque IDs — do not submit candidate names, emails, phone numbers, or other unnecessary personal information. Imports are auto-scrubbed of contact details and known identity columns are never ingested.
Payments (via PayU): we store the order reference, amount, item, and payment status. Card/UPI credentials go directly to PayU and never touch our servers.
Analytics (only with your consent): if you accept the cookie banner, Microsoft Clarity records event names (e.g. “search_string”) — never resume text, never emails. Reject, and nothing loads.
Security logs: hashed signup identifiers and rate-limit counters used to block abuse.
Why we use it (lawful bases)
Providing the service you signed up for (contract); keeping accounts secure and preventing abuse (legitimate interests); tax and financial record-keeping (legal obligation); analytics and marketing only with your consent, withdrawable anytime by rejecting cookies or emailing us.
Who processes it
Cloudflare (hosting, AI inference, database), PayU (payments), Google (if you use Google sign-in), Microsoft Clarity (only after consent). No sale of personal data, ever. Processors act only on our instructions under their data-processing terms.
International transfers
Infrastructure may process data outside India/the EU (e.g. edge caching). Transfers rely on the processors' standard contractual clauses and equivalent safeguards; contact us for details.
How long we keep it
Workspace and account data: until you delete your account. AI cache: 7 days. Abuse-prevention hashes: 30 days. Rate counters: 24 hours. Anonymized payment totals (no link to you): 8 years per Indian books-of-account rules.
Your rights — access, correction, erasure, portability
Delete everything yourself anytime: workspace Settings → Delete account removes your account, sessions, workspace data, AI cache, credit ledger, and abuse-prevention hashes instantly (payment rows are anonymized, never attributable). For access, correction, portability, or grievances, email the address above — we respond within 30 days. EU/UK users may also complain to their supervisory authority; Indian users to the Data Protection Board of India.
Children
This is a professional recruiting tool, not directed at children under 18. Accounts suspected to belong to children are removed.
Security and breaches
Passwords are PBKDF2-hashed, sessions are hashed tokens in httpOnly cookies, abuse hashes are SHA-256. If a breach affecting your data occurs, we notify you and the relevant authority within 72 hours of confirmation, as the law requires.
Changes
Material changes are announced in-app and dated here. Continued use after changes take effect constitutes acceptance.