Privacy Policy

HireEngineers.AI (“HireEngineers.AI,” “we,” “our,” or “us”) operates the platform and services available at https://hireengineers.ai (the “Service”). We are committed to protecting the privacy and security of all users, including professionals (“Jobseekers”) and employers and facilities (“Employers”) (collectively, “users,” “you,” or “your”).

This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you access or use our Service. It also describes the rights available to you and how to exercise them.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you must discontinue use of the Service immediately.

This Policy applies to all information collected through the Service, including information collected through our website, mobile applications, APIs, and any related communications. It does not apply to third-party websites or services that may be linked from our platform. Nothing in this Policy constitutes legal advice. We recommend consulting qualified legal counsel for advice specific to your situation.

For purposes of this Privacy Policy, the following terms have the meanings set forth below:

• Personal Information: Any information that identifies, relates to, describes, or is reasonably capable of being associated with a specific individual.
• Sensitive Personal Information: Government-issued identification numbers, financial account information, biometric data, precise geolocation, and account login credentials.
• Processing: Any operation performed on Personal Information, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• Controller: The entity that determines the purposes and means of processing Personal Information (HireEngineers.AI in respect of data we collect directly).
• Service Provider / Processor: A third party that processes Personal Information on our behalf pursuant to a written data processing agreement.

We collect only the minimum personal information necessary to provide and improve the Service. The categories of information we collect include:

3.1 Information You Provide Directly

• Identity and contact information: full name, email address, telephone number, mailing address
• Professional information: professional license numbers, license type and state, credentials, employment history, education, and resume or curriculum vitae
• Account credentials: username and password (stored in hashed form; we do not store plaintext passwords)
• Profile content: professional biography, skills, preferences, and availability
• Communications: messages, support requests, and feedback submitted through the Service
• Direct messages: the content of private messages you exchange with other platform users through the in-platform messaging feature; messages are stored on our servers and are not end-to-end encrypted
• Payment information: billing name, address, and payment card data (processed directly by our PCI-DSS-compliant payment processor; we do not store full card numbers)

3.2 Information Collected Automatically

When you access or use the Service, we and our service providers may automatically collect:

• Network identifiers: IP address, device identifiers, and browser fingerprint data
• Device and browser information: device type, operating system, browser type and version, language preferences
• Usage data: pages visited, features used, timestamps, session duration, click-stream data, and interaction logs
• Location data: general geographic location inferred from IP address (not precise GPS location unless you explicitly grant permission)
• Referral information: URL of the page from which you accessed our Service

3.3 Cookies and Tracking Technologies

We use cookies and similar technologies (web beacons, pixels, local storage) for the following purposes:

• Strictly Necessary: maintaining authenticated sessions and platform security (these cannot be disabled without impairing core functionality)
• Functional: remembering your preferences, saved searches, and settings
• Analytics: understanding aggregate usage patterns to improve the Service (we use privacy-preserving analytics configurations where available)
• Marketing: serving relevant advertisements or measuring the effectiveness of campaigns (subject to your consent in applicable jurisdictions)

We use personal information only for the specific purposes disclosed at the time of collection or as otherwise permitted by applicable law. These purposes include:

4.1 Service Delivery

• Creating, authenticating, and managing your account
• Matching Jobseekers with relevant job opportunities and Employers with qualified candidates
• Facilitating interviews, offers, and onboarding workflows
• Processing payments and issuing invoices
• Verifying professional licenses, certifications, and credentials
• Providing customer support and responding to inquiries

4.2 Platform Improvement and Research

• Analyzing aggregate usage patterns to improve platform performance and user experience
• Conducting internal research and developing new features
• Training and improving AI/ML matching models using de-identified or aggregated data

4.3 Communications

• Sending transactional messages related to your account or applications (these are service communications that you cannot opt out of while maintaining an account)
• Sending marketing communications, newsletters, and promotional materials (with your consent where required by law; you may contact support@hireengineers.ai)
• Sending platform notifications, job alerts, and match recommendations based on your preferences

4.4 Safety, Security, and Legal Compliance

• Detecting, investigating, and preventing fraud, abuse, unauthorized access, and security incidents
• Enforcing our Terms of Service and other applicable agreements
• Complying with applicable laws, regulations, and legal process
• Protecting the rights, property, and safety of HireEngineers.AI, our users, and the public
• Responding to lawful requests from law enforcement and governmental authorities

Depending on your jurisdiction, we rely on one or more of the following legal bases to process your personal information:

• Contract Performance: processing necessary to perform the agreement with you (e.g., account creation, job matching, payment processing)
• Legitimate Interests: processing necessary for our legitimate business interests, where those interests are not overridden by your rights (e.g., fraud prevention, platform security, product improvement)
• Legal Obligation: processing required to comply with applicable law or regulation (e.g., record-keeping, responding to lawful process)
• Consent: processing where you have given clear, specific, and informed consent (e.g., marketing emails, certain cookies, AI model training using your data)
• Vital Interests: processing necessary to protect the vital interests of you or another person in emergency circumstances

For California residents, we also rely on our obligations under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). See Section 9 for jurisdiction-specific disclosures.

6.1 We Do Not Sell Your Personal Information

We do not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. We do not engage in “sharing” of personal information for cross-context behavioral advertising, as defined under the CPRA, without your opt-in consent.

6.2 Sharing with Service Providers

We share personal information with Service Providers who process it on our behalf under written data processing agreements that require them to protect your information and use it only for the specific purposes we direct. Categories of Service Providers include:

• Cloud hosting and infrastructure providers (e.g., Amazon Web Services)
• Authentication and identity management providers (e.g., Auth0)
• Payment processors (e.g., Square) — governed by their own PCI DSS compliance programs
• Communications and messaging providers
• Analytics providers
• Credential verification and background check providers
• Customer relationship management and support platforms

6.3 Sharing with Employers

If you are a Jobseeker, we will share your profile information, application materials, and credential verification status with Employers to whom you apply or are matched. We will not share your contact information with an Employer without your prior consent, and we will not share your profile with prospective Employers beyond the scope of active job matching without your authorization.

6.4 Sharing with Jobseekers

If you are an Employer, we will share your facility name, location, job posting details, and relevant organizational information with Jobseekers in connection with the recruitment process.

6.5 User-Controlled Content Visibility

Content you post to communities or your activity feed is visible to the audience you select at the time of posting: followers only, members of a specific community, or all authenticated platform users. You may change the visibility setting on your content at any time through your account settings. HireEngineers.AI does not make community or feed content accessible to unauthenticated users or to third parties outside the platform, except as required by law.

6.6 Legal Disclosures

We may disclose personal information to courts, law enforcement agencies, regulators, or other governmental authorities where we are legally required to do so, or where we believe disclosure is necessary to: (a) comply with a subpoena, court order, or other legal process; (b) protect the rights or property of HireEngineers.AI; (c) prevent or investigate a possible crime or harm; or (d) protect the personal safety of users or the public. Where permitted by law, we will notify you of such requests.

6.7 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, sale of all or substantially all assets, or similar transaction, personal information may be transferred to the acquiring entity. We will notify you by email and/or a prominent notice on our Service before your personal information becomes subject to a different privacy policy as a result of such a transaction, and you will have the opportunity to request deletion of your data.

6.8 Aggregate and De-Identified Data

We may share aggregate, statistical, or de-identified information that cannot reasonably be used to identify you with third parties for industry research, analytics, or other purposes. We will not attempt to re-identify de-identified data.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, or to enforce our agreements. Our general retention standards are:

• Active account data: retained for the duration of your account and for two (2) years after account closure, unless a longer period is required by law
• Job application records: retained for two (2) years from the date of application, or as otherwise required by applicable employment or anti-discrimination law
• Background check authorizations: retained for a minimum of five (5) years as required under the FCRA
• Financial and billing records: retained for seven (7) years to comply with tax and accounting obligations
• Security and audit logs: retained for one (1) year
• De-identified or aggregated data: may be retained indefinitely

When retention periods expire, we securely delete or anonymize personal information in accordance with industry-standard data destruction practices. You may request earlier deletion of your personal information as described in Section 8, subject to legal retention obligations.

Depending on the law applicable to you, you may have the following rights regarding your personal information:

• Right of Access: to request confirmation of whether we process your personal information and to receive a copy of that information
• Right to Rectification / Correction: to request that we correct inaccurate or incomplete personal information
• Right to Deletion / Erasure: to request deletion of your personal information, subject to certain legal exceptions (e.g., legal hold, compliance obligations)
• Right to Restriction: to request that we restrict processing of your personal information in certain circumstances
• Right to Data Portability: to receive your personal information in a structured, commonly used, machine-readable format
• Right to Object: to object to processing based on legitimate interests or for direct marketing purposes
• Right to Opt Out of Sale/Sharing: to opt out of the sale or sharing of your personal information for cross-context behavioral advertising (California residents)
• Right to Withdraw Consent: to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal
• Right to Non-Discrimination: we will not discriminate against you for exercising any of your privacy rights
• Right to Lodge a Complaint: to file a complaint with the relevant supervisory authority (e.g., your State Attorney General, the FTC, or, for EEA residents, your national data protection authority)

8.1 How to Exercise Your Rights

To exercise any of the above rights, please contact us using one of the following methods:

• Email: support@hireengineers.ai
• Subject Line: Privacy Rights Request
• Website: https://hireengineers.ai/privacy-policy

We will respond to verifiable requests within thirty (30) days, or within the timeframe required by applicable law. We may extend this period by up to sixty (60) additional days where necessary, in which case we will notify you of the extension. We may require you to verify your identity before processing your request. We will not charge a fee for responding to requests unless they are manifestly unfounded, excessive, or repetitive.

9.1 California Residents (CCPA / CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). The following disclosures apply:

• Categories of personal information collected in the past 12 months: Identifiers; Professional or employment-related information; Education information; Internet or other electronic network activity information; Inferences drawn from other personal information; Sensitive personal information (license/credential numbers, account login credentials)
• Business or commercial purposes for collection: as described in Section 4
• Categories of third parties with whom we share personal information: as described in Section 6
• We do not sell personal information and do not share personal information for cross-context behavioral advertising without opt-in consent
• Sensitive personal information: we use sensitive personal information only for the purposes permitted by the CPRA (i.e., providing the services reasonably expected by you) and do not use it to infer characteristics about you

To exercise your California rights, contact us at support@hireengineers.ai or visit https://hireengineers.ai/privacy-policy. You may also designate an authorized agent to submit requests on your behalf with appropriate written authorization.

9.2 Nevada Residents

Nevada law (NRS 603A) provides consumers the right to opt out of the sale of certain personal information. We do not currently sell personal information as defined under Nevada law. For inquiries, contact support@hireengineers.ai.

9.3 Other U.S. State Privacy Laws

Residents of Colorado, Connecticut, Virginia, Texas, Oregon, Montana, and other states with comprehensive privacy legislation may have rights similar to those described in Section 9. We honor these rights as required by applicable law. Contact support@hireengineers.ai to exercise your rights.

We implement and maintain a risk-based information security program that includes administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Encryption of personal information in transit (TLS 1.2 or higher) and at rest (AES-256 or equivalent)
• Access controls and role-based permissions, limiting access to personal information to authorized personnel with a business need
• Multi-factor authentication for administrative access to production systems
• Regular security assessments, penetration testing, and vulnerability management
• SOC 2 Type II audit program (in progress; certification expected [Q4 2026])
• Incident response procedures, including notification protocols compliant with applicable breach notification laws

The Service is intended solely for use by adults aged 18 or older. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected personal information from a minor, we will take prompt steps to delete that information. If you believe we may have collected information from a minor, please contact us at support@hireengineers.ai.

The Service may contain links to third-party websites, tools, or services that are not operated by us. This Privacy Policy does not apply to those third-party platforms. We have no control over and assume no responsibility for the content, privacy practices, or security of any third-party site or service. We strongly encourage you to review the privacy policy of every website you visit. The inclusion of any link on our platform does not constitute an endorsement of the linked site or service.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the revised Privacy Policy on the Service with an updated “Last Updated” date
• Provide at least thirty (30) days’ advance notice via email to the address associated with your account and/or a prominent banner on the Service, before material changes take effect
• Obtain your affirmative consent where required by applicable law (e.g., for material changes to the processing of sensitive personal information)

Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the changes, to the extent permitted by law. If you do not agree with any changes, you must stop using the Service and may request deletion of your account and personal information.

We will not make retroactive changes that materially reduce your privacy rights with respect to personal information collected before the change without your separate consent.

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, or to exercise any of your rights described in this Policy, please contact us:

• Company: HireEngineers.AI
• Email: support@hireengineers.ai
• Website: https://hireengineers.ai
• Privacy Rights Portal: https://hireengineers.ai/privacy-policy

We aim to acknowledge your inquiry within three (3) business days and to resolve privacy complaints within thirty (30) days. If you are not satisfied with our response, you have the right to escalate your complaint to the appropriate regulatory authority in your jurisdiction.