whilehired while (!hired) { interview(); }
Menu

Privacy

An app that hears an interview owes you a precise answer.

This note is short on purpose. It says what we collect, what we deliberately do not keep, who touches it, and how to get rid of it.

Version 2.0 · Updated 31 October 2026 · Applies to whilehired.in and the WhileHired desktop app

Still under review

This note is being reviewed against the Digital Personal Data Protection Act, 2023 (PD-10) before public launch. Where the Act and this note disagree, the Act wins — and we will fix the note. It already covers paid packs and referral payouts, not just the free trial.

1. Who is responsible

WhileHired Technologies (Made in Bengaluru) is the data fiduciary for the personal data described here. Write to [email protected] for anything in this document. A named grievance officer and their direct contact are published before public launch, as the Act requires.

2. What we collect

Nothing on this list is inferred, enriched, bought or scraped. If a row says "not stored", no copy exists on our side after processing.

Categories of personal data and retention
Category What it is Retention
Account Name, email address, hashed password, and the pack you bought. Required to sign in. While your account exists
Brief The resume and job description you upload or paste, plus fields parsed from them. Until you delete the Brief
Audio Microphone and system audio frames, streamed for transcription. Not stored — dropped after transcription
Transcript Text of what was said in a Thread, detected questions and suggested answers. Until you delete the Thread, or not at all when Recall is off
Usage Minutes consumed, model calls, error codes, latency — tied to a request ID. 24 months for billing and reliability
Payments Razorpay order and payment identifiers, amount, GST invoice details. Card and UPI credentials never reach us. 8 years, as tax and accounting law requires
Referral payouts Your code, referred purchases, commission status, and the PAN, bank or UPI details you give us for payout. While your account exists, and 8 years for tax records
Device App version, operating system and version, and a rotating install identifier. While your account exists

3. Audio is the part that matters

Audio is streamed to our speech-to-text provider with a short-lived token scoped to one Thread, converted to text, and discarded. It is not written to your disk, our storage, or our logs. We cannot retrieve a recording of your interview, because there is no recording.

The microphone only runs while a Thread is live. When you pause or stop, capture stops — the status bar shows the truth, and a state that says "paused" means nothing is being captured.

4. Transcripts and Recall

Transcript text exists so the app can recognise a question and so you can read the Thread afterwards. Recall is a choice:

  • Recall on — the transcript, detected questions and suggestions are stored in a private bucket, readable only by your account, until you delete the Thread or close the account.
  • Recall off — the Thread is discarded when you press Stop. Nothing is kept for "quality" or "model improvement".

Deleting a Thread deletes its transcript, questions and suggestions. Backups roll off within 30 days.

5. Why we are allowed to process it

We rely on your consent, given when you create an account and again when you begin a Thread. The notice you see at that point states the purpose in plain language. You can withdraw consent at any time by deleting the data or the account; withdrawal does not affect processing already completed.

We do not sell personal data, do not use interview content to train models, and do not run advertising pixels on this site.

6. Who processes it

These are the only organisations that touch your data, and only for the purpose listed. Each is bound by a data-processing agreement.

Sub-processors
Processor Purpose Region
Supabase Database, authentication, private file storage India (Mumbai)
Deepgram Speech-to-text streaming United States
Google (Gemini API) Answer generation from your Brief and transcript context United States
Razorpay Payment orders, card processing, refunds India
Cloudflare Hosting and delivery of this website Global edge

Speech-to-text and answer generation currently run outside India. That means transcript text crosses borders. We will publish the transfer mechanism and any notified restrictions before public launch, rather than after a regulator asks.

7. Payments and referral payouts

Razorpay processes payments and receives the billing details you enter at checkout. We receive the order reference, the amount, the GST details and whether the payment succeeded. We never see or store your full card number, CVV or UPI PIN.

If you earn referral commission, we collect the PAN, bank account or UPI details you provide so we can pay you and meet tax obligations. That information is visible only to the people who process payouts, is not used for marketing, and is kept for the period tax law requires after your last payout.

8. Your rights

Under the DPDP Act you can:

  • ask for a summary of the personal data we hold about you, and who we shared it with;
  • correct or complete it;
  • erase it;
  • nominate someone to exercise these rights if you die or become incapacitated;
  • complain to the Data Protection Board of India.

Email [email protected]. We respond within 30 days. Account deletion is available in the app and removes your account, Briefs, Threads and stored files.

9. Security

Data is encrypted in transit and at rest. Every user-owned table is protected by row-level security, and our test suite includes a cross-user read attempt that must return zero rows. Provider keys never reach your machine. You can read the technical detail in our security policy.

10. Children

WhileHired is for adults in a job search. It is not intended for anyone under 18, and we do not knowingly process data of children.

11. Changes

If this note changes in a way that affects what we collect or how long we keep it, we will tell you in the app before the change takes effect. The version and date at the top are the record.

Contact

Privacy: [email protected] · Security: [email protected] · Everything else: [email protected]