Privacy Policy

1. Who is responsible

HireValid is operated by Recordskeeper Inc, a Delaware C-Corp. Our business mailing address is 2261 Market Street STE 86483, San Francisco, CA 94114. We act as controller for website inquiries, newsletter subscriptions and our business administration. An employer normally controls candidate assessment information; our Candidate Privacy Notice and the employer’s notice explain that separate relationship.

2. Information we collect

We receive the details you enter in a contact form, such as name, work email, company, team size, country, topic and message, together with your consent choice. Newsletter submissions include an email address and subscription consent. Technical processing may include IP address, browser information, request time, security events and delivery records. When configured, we send your public IP address to ipstack over HTTPS to determine your country and display regional pricing. We request only the country code, not precise coordinates. A bounded server cache retains a hashed lookup identifier and country result for up to 24 hours. Optional analytics and campaign attribution operate according to your cookie choices. Do not put sensitive candidate records in website forms.

3. Purposes and legal bases

We use inquiries to respond and administer our relationship, subscription information to send requested hiring notes, and technical information to operate and protect the site. Where GDPR or similar law applies, the bases are steps requested before a contract or contract performance, legitimate interests in support and security, consent for optional communications or tracking, and compliance with legal obligations. You may withdraw consent without affecting earlier lawful processing.

5. Recipients and disclosures

Information is shared only as needed with authorized personnel and providers supporting hosting, email, security and configured analytics. Providers must use data under appropriate contractual restrictions. We may disclose information to comply with law, protect rights or investigate abuse, or in a business transaction subject to continuing safeguards. We do not sell contact-form or subscriber information for money. Optional advertising technologies, if enabled with your choice, may constitute sharing under some privacy laws; you can decline them in cookie settings.

6. Retention and safeguards

We retain information for the purpose for which it was collected, taking account of the relationship, outstanding requests, statutory recordkeeping, disputes and security needs. Inquiries and email copies are handled through our business mailboxes; deletion requests must cover those records as well as any account records. Subscription records remain necessary while subscribed, with limited suppression records after opt-out. Restricted access, secure transmission and proportionate security measures reduce risk, but no system is perfectly secure.

7. International processing

We operate from the United States and providers may process information in other countries. Where applicable law restricts a transfer, an appropriate mechanism, such as an adequacy decision or applicable standard contractual clauses with necessary supplementary measures, must cover it. We do not claim that all data remains in a particular region. Contact us for information about safeguards relevant to your service.

8. Your rights

Depending on applicable law, you may request access, correction, deletion, portability or a copy of information, restrict or object to processing, withdraw consent, or appeal a decision on a request. California residents may have rights to know, correct, delete, opt out of sale or sharing and limit qualifying uses of sensitive information where the CCPA applies. We do not discriminate for exercising applicable rights. Authorized agents may act with verifiable authority. Exceptions may apply for security, legal obligations or others’ rights; we will explain a refusal and available appeal routes.

9. Requests and complaints

Contact [email protected] or use the Privacy topic on our contact form. We may request proportionate information to verify your identity or authority; do not send identity documents unless requested through an appropriate channel. We respond within applicable statutory time limits and explain permitted extensions. If your request concerns an employer’s assessment, we will help direct it to that employer and assist under our agreement. You may also complain to your competent data-protection authority; Delaware contractual jurisdiction does not limit that right.

10. Children and policy changes

Our business website is not directed to children under 16, and we do not knowingly solicit their information through subscription forms. Contact us if a child has supplied information so we can investigate and take appropriate action. Material policy changes will be identified through an updated date and additional notice where required; a new use requiring consent will not be justified solely by changing this notice.