Privacy Policy

HYrion ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the choices you have. By using HYrion, you agree to the practices described here.

If you have questions about this policy, contact us at privacy@hyrion.app.

Account Information: When you register, we collect your name, email address, and password (stored as a secure hash).

Profile & Career Data: Resumes, cover letters, work history, skills, job preferences, and application records that you upload or create within the platform.

Usage Data: Pages visited, features used, search queries within the platform, and interaction timestamps — used to improve the product.

Device & Technical Data: Browser type, IP address (anonymized), operating system, and referring URLs for security and analytics purposes.

Payment Information: For paid plans, payments are processed by Stripe. We do not store your full card number, CVC, or expiry date.

• Provide and improve the HYrion service
• Personalize AI-powered features (resume tailoring, job matching, interview prep)
• Send transactional emails (account confirmations, application status updates)
• Send product updates and tips (you can unsubscribe at any time)
• Detect and prevent fraud or unauthorized access
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your career data to train AI models without your explicit opt-in consent.

We share your data only in the following limited circumstances:

• Service Providers: Trusted vendors (cloud hosting, email delivery, payment processing) who process data on our behalf under strict data protection agreements.
• AI Partners: When AI features are used (resume parsing, cover letter generation, interview prep, job matching), resume text and job description content are sent to OpenAI (OpenAI, L.L.C.) for processing. OpenAI processes this data under its API data usage policy and does not use API-submitted data to train its models by default. We do not send your name, email, or payment information to OpenAI. See OpenAI's API data usage policy for details.
• Voice & Transcription Partner (ElevenLabs): When you use voice or video interview practice features, your spoken audio is transmitted to ElevenLabs (ElevenLabs, Inc.) for speech-to-text transcription. ElevenLabs returns a text transcript and word-level timestamps, which are used to compute filler word patterns and timing feedback. ElevenLabs also generates spoken interview questions via text-to-speech. We do not send your name, email, resume text, or payment information to ElevenLabs. See ElevenLabs' Privacy Policy for details.
• Legal Requirements: When required by law, court order, or to protect the rights and safety of users.
• Business Transfers: In the event of a merger or acquisition, your data may be transferred as part of that transaction, with notice provided to you.

The Video Interview practice feature uses your device's camera and microphone. We are transparent about exactly what is and is not transmitted:

• Camera feed — processed locally only. Your video is analyzed entirely within your browser using on-device AI (MediaPipe WebAssembly). No video frames, facial images, or facial landmark data are transmitted to Hyrion servers or any third party. The AI model runs locally and is loaded from a public CDN.
• What is measured on-device: eye contact (percentage of time your gaze is directed at the camera), head stability (posture consistency), audio energy variation (vocal expressiveness), and pause patterns. These are computed numbers, not biometric templates.
• What Hyrion stores: Only the computed metric values (e.g., eye contact 82%, pause count 3, longest pause 4.2s) and a list of timestamped moments (e.g., "filler words × 3 at 0:23–0:33"). No raw video or audio is stored on our servers.
• Audio transcription — transmitted to ElevenLabs. Your spoken answer is sent to ElevenLabs for transcription (see Section 4). Word-level timestamps returned by ElevenLabs are used to identify where filler words occur in your response.

This feature requires your explicit consent to AI data processing and a camera permission grant in your browser. You can decline camera access at any time; the feature will continue in audio-only mode.

We retain your account data for as long as your account is active. You may delete your account at any time from Settings, which permanently removes your personal data from active systems as part of the deletion workflow.

Anonymized, aggregated analytics data may be retained indefinitely as it cannot be linked back to you.

We record consent decisions (for example, terms/privacy acceptance and optional feature opt-ins) with timestamped audit evidence. This helps us demonstrate compliance and gives you transparency into your consent history.

You can review and manage consent-related settings from your account settings. We only process optional uses of data where explicit consent has been granted.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data.
• Portability: Request an export of your data in a machine-readable format.
• Opt-Out: Unsubscribe from marketing communications at any time.

To exercise these rights, email privacy@hyrion.app. We will respond within 30 days.

If you are in Canada, we process personal information in accordance with PIPEDA principles, including accountability, identifying purposes, consent, limiting collection, limiting use/disclosure/retention, safeguards, openness, individual access, and challenging compliance.

You may withdraw consent for optional processing at any time through account settings or by contacting us. Withdrawal of consent does not affect processing that was already completed lawfully before withdrawal.

On-device camera analysis: The Video Interview feature processes your camera feed locally in your browser to measure eye contact and head stability. No facial images or biometric templates are created or stored. The computed metrics (percentages and counts) are not biometric identifiers under PIPEDA or Quebec's Act respecting the protection of personal information in the private sector (Law 25). We disclose this processing here and in Section 4A to meet our transparency obligations.

Quebec residents: Under Law 25, you have the right to be informed of the existence of any profiling or automated decision-making that affects you. Hyrion's video analysis produces coaching feedback only — it is not used to make decisions about your eligibility for employment or access to services.

If you have unresolved concerns about our handling of your personal information, you may contact the Office of the Privacy Commissioner of Canada (federally) or the Commission d'accès à l'information (Quebec) after contacting us first at privacy@hyrion.app.

We use cookies for authentication, preferences, and analytics. See our Cookie Policy for full details.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, regular security audits, and access controls. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

HYrion is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform at least 30 days before they take effect.

HYrion Privacy Team
Email: privacy@hyrion.app