Sub-processors

Stores all user accounts, billing records, analysis metadata, and audit logs.

Processing location: Brazil South / East US

Stores uploaded CV PDFs and job description files during the active retention window.

Processing location: Brazil South / East US

Performs AI-powered candidate CV analysis against job descriptions. CV content is transmitted for processing and is not retained by Azure OpenAI beyond the request.

Processing location: East US 2

Routes analysis jobs between the web application and background worker processes.

Processing location: Brazil South / East US

Sends transactional emails including email verification, password reset, and analysis-complete notifications. Only the recipient email address and notification content are transmitted.

Processing location: Brazil South / East US

Collects frontend technical telemetry: page views, browser errors, and performance timings. Cookieless — no user identity or personal data is sent. Query strings and free-text fields are redacted before transmission.

Processing location: Brazil South / East US

Production environment only. Not active in development or staging.

Provides product analytics (heatmaps and aggregate session-behaviour insight) to help improve the application. Only activated when analytics consent is granted. Candidate names, scores, and all sensitive recruiting data are masked and never transmitted. No personal identifiers are sent.

Processing location: United States (Microsoft Corporation)

Production environment only. Requires explicit analytics consent. Never active in development or staging.

Processes subscription payments and one-time purchases. Hirelyzer stores only Stripe customer and subscription IDs; full card data is handled exclusively by Stripe.

Processing location: United States (Stripe, Inc.)

Provides Sign in with Google authentication. When a user chooses to sign in with Google, their name and email address are shared with Hirelyzer for account creation or login. No other Google data is accessed.

Processing location: United States (Google LLC)

Only applies to users who choose Sign in with Google. Email/password users are not affected.

When the Greenhouse integration is enabled by a Recruiter-plan customer, candidate data is synced between Greenhouse and Hirelyzer via the Greenhouse Harvest API. Only customers who explicitly connect their Greenhouse account are affected.

Processing location: United States (Greenhouse Software, Inc.)

Recruiter-plan customers only. Requires explicit connection of a Greenhouse account.