Privacy Policy

Last updated: 30 March 2026

Hiroo ("we", "our", "us") is operated by Tibii Pty Ltd (ABN pending). We are committed to protecting the privacy of our users, candidates, and clients. This policy explains how we collect, use, store, and protect personal information.

1. Information We Collect

We collect information you provide directly:

Account information: Name, email address, phone number, organisation name
Candidate data: Resumes, application responses, video interview recordings, contact details
Usage data: Pages visited, features used, device and browser information
Payment information: Processed securely through Stripe — we do not store card details

2. How We Use Your Information

Provide and improve the Hiroo platform
Process job applications and conduct AI-assisted candidate screening
Send transactional emails (application confirmations, interview invitations, onboarding notifications)
Analyse platform usage to improve features and performance
Comply with legal obligations

3. AI Processing

Hiroo uses artificial intelligence to analyse video interview responses and application data. AI analysis is used to assist hiring decisions — it does not make autonomous hiring decisions. All AI-generated insights are reviewed by human hiring managers before any employment decisions are made.

4. Data Storage & Security

All data is hosted in Australia (ap-southeast-2 region) on infrastructure provided by Supabase (backed by AWS). We implement industry-standard security measures including:

Encryption in transit (TLS 1.3) and at rest (AES-256)
Row-level security policies on all database tables
Regular security audits and vulnerability scanning
Multi-tenant data isolation between organisations

5. Data Sharing

We do not sell personal information. We share data only with:

Service providers: Supabase (database), Vercel (hosting), Resend (email delivery), Stripe (payments)
Your organisation: Hiring managers in the organisation you applied to can access your application data
Legal requirements: When required by Australian law or valid legal process

6. Data Retention

Candidate data is retained according to the hiring organisation's retention policy (configurable, default 6 months). Video interview recordings follow a separate retention schedule. Users can request data deletion at any time.

7. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

Access your personal information
Request correction of inaccurate information
Request deletion of your data
Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies or tracking pixels.

9. Contact Us

For privacy-related enquiries, contact us at privacy@hiroo.world.