Effective date: August 4, 2026
This Privacy Policy explains how Hyrexia AI ("we," "us," or "our") collects, uses, discloses, and protects personal information when you use our website, applications, and related services (the "Service"). It applies to all users regardless of location.
This Policy is provided for general information and does not constitute legal advice. Our Terms and Conditions and Terms and Conditions (International) govern your use of the Service, including recording consent for interview sessions.
1. Privacy principles
We handle personal information responsibly and in line with applicable privacy laws, including Canadian privacy principles under PIPEDA and substantially similar provincial legislation, and — where applicable — the EU/UK GDPR, U.S. state privacy laws, and other local privacy regimes.
2. Information we collect
- Account and profile information — name, email address, mobile phone number (provided during signup for account verification SMS), authentication credentials, timezone, and preferences you provide during registration or in settings.
- Resume and uploaded files — documents you upload (e.g., PDF, DOCX) and derived parsed or AI analysis data.
- Interview session data — audio, video (where enabled), transcripts, scores, evaluations, hiring-style recommendations, and session metadata.
- Billing and wallet records — credit purchases, usage deductions, and transaction history (payment card details are processed by our payment provider, not stored by us).
- Support and communications — messages you send through contact forms or support channels.
- Technical data — limited logs needed to secure, operate, and troubleshoot the Service.
3. How we use information
- To create and manage your account and deliver the Service.
- To verify your identity by sending transactional SMS one-time passcodes (OTPs) to the mobile number you provide at signup or when you request a new code. We do not use your mobile number for marketing, advertising, or promotional text messages.
- To run AI features, including interviewers, evaluators, resume analysis, and coaching tools via our infrastructure and subprocessors.
- To process payments, manage credits, prevent fraud, and comply with law.
- To respond to support requests, enforce our terms, and protect users and the Service.
- To send product updates or interview tips by email where you have opted in to marketing communications (email marketing is separate from SMS verification).
- To improve reliability, security, and product quality.
4. SMS / text messaging program (account verification)
Hyrexia AI operates a transactional SMS program used solely to verify accounts and protect user security. By providing your mobile phone number during account registration on https://www.hyrexia.com/signup and completing signup (including accepting this Privacy Policy and our Terms), you consent to receive automated text messages from Hyrexia AI at that number for account verification purposes.
Who opts in: End users creating a Hyrexia AI candidate (or other) account on our website.
Where opt-in happens: On our public signup page (www.hyrexia.com/signup). Users enter their mobile number with country code and check a separate, required consent box reading: “I agree to receive automated account verification text messages (one-time passcodes) from Hyrexia AI at the phone number provided. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe, HELP for help.” The “Create account” button remains disabled until that box is checked. This is the only opt-in method for this program; we never purchase, rent, or import phone numbers.
Full program details are published at www.hyrexia.com/sms-terms.
What messages you receive: One-time passcodes and related account verification / security notices only. We do not send marketing or promotional SMS.
Message frequency: Message frequency varies. Typically you will receive one verification SMS when you create an account, and additional messages only if you request a new code or need to re-verify. You will not receive recurring promotional texts.
Message and data rates may apply. Your mobile carrier’s standard messaging and data rates may apply to any SMS we send you.
Mobile number non-sharing: We do not sell, rent, or share your mobile phone number with third parties or affiliates for their marketing or promotional purposes. We may share your number with service providers that send messages or operate the Service on our behalf (for example, our SMS delivery provider), solely to deliver verification messages and secure your account, under agreements that limit their use of your information.
Opt-out: You can cancel SMS verification messages at any time by replying STOP. After you send STOP, we will send you a confirmation and you will no longer receive SMS from this program. You may also contact us via Contact us to update or remove your phone number. Note that opting out of SMS may prevent you from completing phone-based account verification.
Help: Reply HELP for help, or contact us through Contact us.
Consent to receive SMS is not a condition of purchasing credits or other paid features. Providing a phone number is required only where phone verification is part of account activation.
5. Legal bases and consent
We collect and use personal information with your consent where required, including when you create an account, accept this Privacy Policy, provide your mobile number for SMS verification, participate in recorded interview sessions, or opt in to email marketing. We may also use information where necessary to perform our contract with you, comply with legal obligations, or pursue legitimate interests that are not overridden by your rights (such as securing the Service).
Where required by applicable law, we rely on lawful bases such as contract performance, legitimate interests, consent, and legal obligation. You may withdraw consent where processing is consent-based, without affecting prior lawful processing.
6. Interview recordings
When you start or participate in an interview session, we capture and process audio, video (where enabled), transcripts, and related metadata as described in our Terms. Recordings are used to provide playback, AI evaluation, billing where applicable, troubleshooting, and product improvement. You are responsible for using the Service in compliance with applicable recording and consent laws in your jurisdiction.
7. Storage and cross-border processing
Content may be stored on servers operated by us or trusted providers (including cloud storage, real-time communications, SMS delivery, and AI/voice providers). Data may be processed or stored in Canada, the United States, or other countries where our providers operate.
Where personal information is transferred across borders, we take reasonable steps to require comparable protection by contract or law. Where you are in the European Economic Area (EEA), United Kingdom, Switzerland, or another jurisdiction restricting cross-border transfers, we implement appropriate safeguards where required (such as Standard Contractual Clauses or equivalent mechanisms), in addition to technical and organizational security measures.
8. Retention
We retain personal information only as long as needed for the purposes described in this Policy or as required by law. Interview video recordings are subject to a limited retention period (by default, a few days after session completion, configurable by us), after which video files are removed from storage while related transcripts, evaluations, and billing records may be kept longer where permitted and necessary.
When you delete your account through settings, we delete or anonymize associated data subject to legal retention requirements and backup cycles.
11. Your rights
Depending on your location, you may have rights to access, correct, delete, or port your personal information; restrict or object to certain processing; withdraw consent; lodge a complaint with a supervisory authority (e.g., in the EEA/UK or with the Office of the Privacy Commissioner of Canada); or opt out of certain processing under U.S. state laws where applicable.
You can export your data or delete your account from Privacy & data settings. To make other privacy requests, contact us via Contact us. We may verify your identity before responding. Some rights may limit features you can use.
12. Children
The Service is not directed to individuals below the minimum age required in their jurisdiction. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us so we can take appropriate steps.
13. Security
We implement technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and secure infrastructure practices. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
14. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the revised Policy on this page with an updated effective date. Material changes may be communicated through the Service or by email where appropriate. Continued use after changes take effect constitutes acceptance of the revised Policy, subject to applicable law.
15. Contact
Questions about this Privacy Policy, SMS program, or privacy requests: Contact us through the Service.