Hyranse provides a Candidate sourcing platform that enables recruiters and hiring professionals to discover Candidates from publicly available sources ("Service"), available at https://hyranse.com/.
This Privacy Policy explains how Hyranse ("we", "our", or "us") collects, uses, and shares personal information, and how you can exercise your privacy rights. This Policy applies to:
- Information we collect when you visit our website or use the Service as a customer or user;
- Personal information of job Candidates contained in our Candidate database, compiled from publicly available professional sources.
1. Who This Policy Applies To
We process personal information relating to two categories of individuals:
Customers and Users — recruiters, hiring managers, and other professionals who register for and use the Hyranse platform.
Job Candidates/Candidates — individuals whose publicly available professional information (name, work history, qualifications, contact details) appears in our Candidate database and is surfaced to our Customers for recruitment purposes. Job Candidates have not directly interacted with Hyranse but may have a professional profile on publicly accessible websites, job boards, or professional networks.
2. Personal Information We Collect
2.1 From Customers and Users
When you register or use the Service, we may collect:
- Name, job title, company name, and email address;
- Account credentials and login information;
- Payment information (processed through Stripe, Inc.);
- Search queries, filters, and usage history within the platform;
- IP address, browser type, device information, and approximate location;
- Communications with our support team.
2.2 From the Candidate Database (Public Sources)
Hyranse compiles a database of professional information. Data sources include publicly available professional networking platforms, employer websites, public company biographies, conference speaker pages, public business directories and other lawful public professional sources. This information is used solely to help our Customers identify and engage qualified Candidates for open roles.
We do not collect information from private profiles, restricted areas or non-public accounts.
The personal information we collect about Candidates may include:
- Full name and professional headline;
- Current and previous job titles and employers;
- Educational background and professional qualifications;
- Skills and experience;
- Publicly listed contact information (where available).
We do not collect sensitive personal data about candidates (such as health information, political opinions, religious beliefs, or financial data) from public sources. We do not collect information from private accounts or non-public profiles.
2.3 Automatically Collected Information
- Log data: access times, pages viewed, browser type, IP address;
- Device information: hardware model, operating system, unique identifiers;
- Usage data: features used, frequency and duration of activities;
- Cookies and similar tracking technologies (see Section 8 below).
3. Legal Basis for Processing
We process personal information on the following legal grounds under the UK GDPR and, where applicable, the EU GDPR:
3.1 Customers and Users
3.2 Job Candidates
Hyranse acts as an Independent Data Controller with respect to the collection, organisation and maintenance of the Candidate database. Customers act as independent Controllers regarding their own recruitment activities.
We process personal information about job Candidates on the basis of legitimate interests — both ours and those of our Customers. Our legitimate interest is to provide an effective recruitment solution that enables hiring professionals to identify qualified Candidates. Candidates' professional information, published publicly on professional platforms and job boards, is made available precisely for the purpose of professional visibility and career opportunities.
The Company reasonably considers that individuals who publish professional information on publicly accessible professional platforms may reasonably expect such information to be used for recruitment-related discovery, subject to applicable data protection laws and appropriate safeguards.
We have conducted a Legitimate Interests Assessment (LIA) and concluded that this processing does not override the rights and freedoms of Candidates, given that:
- Only professional (not personal/private) information is collected;
- The data is sourced exclusively from publicly available sources;
- The processing is limited to recruitment purposes;
- Candidates can opt out at any time (see Section 7 below).
4. How We Use Personal Information
4.1 Customers and Users
- To provide, maintain, and improve the Service;
- To process payments and manage your subscription;
- To communicate with you about your account, updates, and support;
- To detect and prevent fraud and security incidents;
- To comply with applicable legal obligations;
- To send marketing communications (where you have opted in or where permitted by applicable law).
4.2 Candidates
- To enable our Customers to search, discover, and engage with candidates for legitimate recruitment purposes;
- To maintain the accuracy and completeness of Candidate profiles;
- To respond to opt-out, correction, or deletion requests.
We do not use Candidate data for advertising, profiling for non-recruitment purposes, or any purpose unrelated to talent acquisition.
5. Disclosure of Personal Information
We do not sell or rent personal information to third parties.
Service Providers — We share data with third-party providers who support our operations, including Stripe, Inc. (payment processing), cloud hosting providers, and analytics services. All providers are contractually bound to protect the data and use it only for specified purposes.
Customers (Candidate Data) — Candidate profile information is made available to our paying Customers for recruitment purposes in accordance with our Terms of Service.
Business Transfers — In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction.
Legal Compliance — We may disclose personal information if required by law, court order, or government authority, or to protect the rights, safety, or property of Hyranse or others.
Aggregated or De-identified Data — We may share aggregated or anonymised information that cannot reasonably identify any individual.
6. International Data Transfers
Personal information may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) as approved by the UK Information Commissioner's Office (ICO) and/or the European Commission or other lawful transfer mechanisms recognised under applicable law.
As Hyranse does not have an establishment in the United Kingdom or the European Economic Area, we will designate an appropriate representative in the relevant jurisdiction as required under Article 27 UK GDPR or Article 27 EU GDPR.
7. Your Rights and Choices
Where personal data has been obtained indirectly, Hyranse assesses its obligations under Article 14 UK GDPR and EU GDPR and provides required privacy information unless a statutory exemption applies. Upon receipt of a verified objection or deletion request, Сandidate profiles are removed from future Сustomer searches within a reasonable period, subject to legal retention obligations and backup limitations.
- Right to Access — request a copy of the personal information we hold about you;
- Right to Rectification — request correction of inaccurate or incomplete information;
- Right to Erasure — request deletion of your personal information (subject to legal obligations);
- Right to Restriction — request that we limit the processing of your information;
- Right to Object — object to processing based on legitimate interests;
- Right to Data Portability — receive your information in a structured, machine-readable format;
- Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time;
- Right to Lodge a Complaint — with the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
Candidates: To opt out of the Hyranse Candidate database, request correction or deletion of your information, contact us at support@hyranse.com. We will process your request within 30 days.
Customers: To exercise your rights, log in to your account or contact us at support@hyranse.com.
8. Cookies
We use cookies and similar technologies to operate the Service, analyse usage, and improve your experience. Upon your first visit, you will be presented with a cookie consent banner.
- Essential cookies — required for the Service to function;
- Analytics cookies — help us understand how the Service is used;
- Preference cookies — remember your settings and preferences.
9. Data Retention
- Customer account data — retained for the duration of the subscription and up to 3 years after account deletion;
- Candidate database information — regularly updated; removed upon valid opt-out request;
- Payment records — retained as required by applicable tax and financial regulations.
10. Children
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor's information has been collected, we will take steps to delete it promptly.
11. Third-Party Links
The Service may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending a notice to your registered email address. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.