Privacy Policy

HYrion ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the choices you have. By using HYrion, you agree to the practices described here.

If you have questions about this policy, contact us at privacy@hyrion.app.

Account Information: When you register, we collect your name, email address, and password (stored as a secure hash).

Profile & Career Data: Resumes, cover letters, work history, skills, job preferences, and application records that you upload or create within the platform.

Usage Data: Pages visited, features used, search queries within the platform, and interaction timestamps — used to improve the product.

Device & Technical Data: Browser type, IP address (anonymized), operating system, and referring URLs for security and analytics purposes.

Payment Information: For paid plans, payments are processed by Stripe. We do not store your full card number, CVC, or expiry date.

• Provide and improve the HYrion service
• Personalize AI-powered features (resume tailoring, job matching, interview prep)
• Send transactional emails (account confirmations, application status updates)
• Send product updates and tips (you can unsubscribe at any time)
• Detect and prevent fraud or unauthorized access
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your career data to train AI models without your explicit opt-in consent.

We share your data only in the following limited circumstances:

• Service Providers: Trusted vendors (cloud hosting, email delivery, payment processing) who process data on our behalf under strict data protection agreements.
• AI Partners: When AI features are used (resume parsing, cover letter generation, interview prep, job matching), resume text and job description content are sent to OpenAI (OpenAI, L.L.C.) for processing. OpenAI processes this data under its API data usage policy and does not use API-submitted data to train its models by default. We do not send your name, email, or payment information to OpenAI. See OpenAI's API data usage policy for details.
• Legal Requirements: When required by law, court order, or to protect the rights and safety of users.
• Business Transfers: In the event of a merger or acquisition, your data may be transferred as part of that transaction, with notice provided to you.

We retain your account data for as long as your account is active. You may delete your account at any time from Settings, which permanently removes your personal data from active systems as part of the deletion workflow.

Anonymized, aggregated analytics data may be retained indefinitely as it cannot be linked back to you.

We record consent decisions (for example, terms/privacy acceptance and optional feature opt-ins) with timestamped audit evidence. This helps us demonstrate compliance and gives you transparency into your consent history.

You can review and manage consent-related settings from your account settings. We only process optional uses of data where explicit consent has been granted.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data.
• Portability: Request an export of your data in a machine-readable format.
• Opt-Out: Unsubscribe from marketing communications at any time.

To exercise these rights, email privacy@hyrion.app. We will respond within 30 days.

If you are in Canada, we process personal information in accordance with PIPEDA principles, including accountability, identifying purposes, consent, limiting collection, limiting use/disclosure/retention, safeguards, openness, individual access, and challenging compliance.

You may withdraw consent for optional processing at any time through account settings or by contacting us. Withdrawal of consent does not affect processing that was already completed lawfully before withdrawal.

If you have unresolved concerns about our handling of your personal information, you may contact the Office of the Privacy Commissioner of Canada after contacting us first.

We use cookies for authentication, preferences, and analytics. See our Cookie Policy for full details.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, regular security audits, and access controls. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

HYrion is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform at least 30 days before they take effect.

HYrion Privacy Team
Email: privacy@hyrion.app