Effective from 10.05.2025
Learn how we protect your data
The controller of your personal data are NODE Piotr Nowicki, with its registered office at Al. KEN 36/112B, 02-797 Warsaw, NIP: 9512304601, REGON: 147233931, operating the service under the brand HireMate AI ("Controller").
Contact with the Controller regarding personal data protection is possible via the e-mail address: info@hiremateai.com.
The Controller processes your personal data for the following purposes:
To provide electronic services, including maintaining an Account and implementing the Website's functionalities (legal basis: Article 6(1)(b) of the GDPR – necessity for the performance of a contract).
To analyze CVs, voice recordings, and transcriptions to generate personalized feedback and recommendations by AI systems (legal basis: Article 6(1)(b) of the GDPR – performance of a contract).
For analytical and statistical purposes, including improving and developing the Website and AI models. Where possible, this data are anonymized (legal basis: Article 6(1)(f) of the GDPR – legitimate interest of the Controller).
To fulfill legal obligations incumbent on the Controller, e.g., tax and accounting obligations (legal basis: Article 6(1)(c) of the GDPR).
For marketing purposes, if the User gives separate consent (legal basis: Article 6(1)(a) of the GDPR – consent).
The Controller processes the following categories of data:
Identification data: first and last name, e-mail address.
Authentication data: Account password (in encrypted form).
CV data: all information contained in the uploaded CV file, including but not limited to employment history, education, skills, contact details, image (photograph).
Biometric data (voice): audio recordings of the User's voice during simulation sessions.
Transcriptions: textual version of the User's statements.
Technical data: IP address, browser data, operating system, cookie files.
Your data may be entrusted for processing to third parties with whom the Controller cooperates to provide the Services. These include, among others:
a. Providers of hosting and cloud infrastructure services.
b. Payment operators.
c. External providers of artificial intelligence (AI) models used by the Website. In particular, we transfer:
content from CV files and session configuration data to generate personalized questions and scenarios;
voice recordings and their transcriptions to generate responses by the AI recruiter and to perform voice and speech analysis.
Due to the global nature of AI services, your data (including CV, voice recordings, transcriptions) may be transferred outside the European Economic Area (EEA), particularly to the United States.
Data transfer is based on standard contractual clauses approved by the European Commission or other mechanisms compliant with the GDPR that ensure an adequate level of protection.
d. System administrators: System administrators may have access to recruitment conversation recordings and their transcriptions solely for the following purposes: resolving technical issues reported by the user, providing user support upon their explicit request, ensuring system security and stability, and fulfilling legal obligations incumbent on the Controller. Administrator access is limited to the necessary minimum and is conducted in accordance with data security principles.
You have the following rights:
Right of access
Right to erasure
Right to withdraw consent at any time, if processing is based on consent.
to the President of the Personal Data Protection Office.
To exercise the above rights, please contact us at: info@hiremateai.com.
Data related to the User's Account is stored for the duration of its existence on the Website and, after its deletion, for the period necessary to pursue any potential claims (but no longer than 3 years).
Data from CV files and session audio recordings are stored in the User's Account and are accessible to them until the Account is deleted or the data are manually deleted by the User from within the Website (if such functionality is available).
We store data processed on the basis of consent until it is withdrawn.
The Controller applies appropriate technical and organizational measures to protect your personal data, including, but not limited to, connection encryption (SSL), access control, and regular backups.
The Website uses cookie files to ensure its proper functioning, as well as for analytical and statistical purposes.
The User has the ability to manage cookie files from their web browser settings.
The Controller reserves the right to introduce changes to this Privacy Policy. Users will be informed of any changes in accordance with the provisions of the Terms of Service.