Loading...Loading...Loading...Loading...Legal
Last updated: 11 October 2026. Written in plain English. If anything's unclear, email hello@hirestepx.com. Privacy or data complaints: grievance@hirestepx.com.
Account email and name, your resume (uploaded by you), your answers and the transcripts of your mock sessions, scores and reports, payment records (order and plan details; card or UPI details are handled by Razorpay and never reach us), and basic usage data (page views, session counts, plan type). We do not store audio or video recordings of your sessions: if you answer by voice, your speech is streamed to our speech-to-text provider for live transcription and is not retained by us. We do not collect location or contacts, and we use the microphone only during an active interview round. If you choose to connect Google Calendar, we read and write the calendar events needed for interview scheduling.
To run the product. The resume tunes the AI's questions to your background. Your answers and transcripts power scoring and the report you read after each session. Email is for login, receipts, and support replies. Usage data helps us fix bugs and improve the product; analytics and advertising technologies run only if you opt in (see Cookies below).
Your resume, transcripts, scores, and reports are kept until you delete your account. We do not run an automatic transcript-deletion job. When you delete your account, it is deactivated immediately and you can restore it by signing in within 7 days. After 7 days your profile, sessions, transcripts, resume text, and uploaded resume files are permanently deleted. Payment records are kept in anonymised form for as long as tax law requires. Copies in backups are overwritten within 30 days. To get a copy of your data first, email .
We do not sell your data, and we do not share your transcripts, scores, or resume with colleges or advertisers. The one exception is employers on HireStepX, covered in the next section. To run the product we use the providers below. Each processes data on our behalf under its own data processing terms, only for the purpose listed:
We do not send your resume or session transcripts to Razorpay, Resend, PostHog, Google Analytics, Upstash, or AdSense, and we never send your email address or name to PostHog. Voice audio goes only to Deepgram or Sarvam for live transcription. Advertising is never loaded inside signed-in product surfaces (dashboard, interview sessions, reports).
Employer discovery is switched on by default for candidate accounts. It is not opt-in. Employers can find a masked version of your practice profile (skills and scores, with no name) and can pay to unlock your contact details. You can switch this off any time in Settings → Employer visibility, and you can still use HireStepX fully with it off.
What employers see before they unlock you. A masked profile: an anonymous label (“Candidate #…”, not your name), your skill strengths and verified capabilities, readiness and answer-structure (STAR) scores, a resume summary with your name, past employers, schools, phone and LinkedIn removed, your city, and when you last practised. Your scores come from your own practice sessions on HireStepX; they are not independently verified assessments.
What an employer gets by unlocking. An employer can pay to unlock a candidate. Unlocking releases your name, email, phone, LinkedIn, your resume, and short word-for-word excerpts from your practice answers to that employer. Employers sign up on their own and have different verification levels; we do not vet every employer, so treat outreach with the same care you would give any job approach. Employers agree to use candidate data only to evaluate and contact you about the role, and not to resell it or send unrelated bulk messages (see the employer terms).
Switching it off. When you switch discovery off, you are removed from employer search and from new matches immediately. An unlock an employer has already paid for stays valid and they keep the details they received, but they see nothing new from you and cannot contact you again after you switch it off. We keep a record of when you turned discovery on or off, which you can see in Settings. You can also block or report a specific employer from your Jobs or Messages screens; blocked employers can no longer see or contact you.
Retention. Employer discovery uses the same practice data described above, so it follows the same retention. Deleting your account removes you from employer discovery.
Questions or complaints. Contact our Grievance Officer.
India's Digital Personal Data Protection Act, 2023 gives you the right to access, correct, and erase the data we hold on you, to nominate another person to exercise these rights on your behalf, and to a grievance redressal process. We process your data to deliver the service you signed up for and, for optional analytics and advertising, only on your consent, which you can withdraw at any time as easily as you gave it.
Cross-border transfers: our providers process data in India, the United States, and other regions where they operate (for example Supabase in Ireland). If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India once it is constituted.
Timelines. For data requests, complaints, or privacy questions, write to our Grievance Officer at . We acknowledge within 24 hours and resolve within 15 days.
Essential (always on). Your sign-in session and device token (stored in your browser's local storage), security and rate-limiting tokens, and a record of your cookie choice. The product cannot work without these.
Analytics (only after you opt in). PostHog, Google Analytics 4, and Vercel Analytics set identifiers to count visits and see which features are used. Vercel Speed Insights reports anonymised page-speed metrics without cookies.
Advertising (only after you opt in). Google AdSense may set advertising cookies on public content pages (blog, interview questions, salary guides) to show relevant ads. None are used on signed-in pages.
Your choice. The banner lets you accept all optional cookies, reject all of them, or choose analytics and advertising separately; rejecting is as easy as accepting, and nothing optional is switched on by default. Use the “Cookie settings” link in the site footer (or the account menu when signed in) to change or withdraw consent at any time; withdrawing stops analytics and advertising from loading on your next page view. You can also clear site data in your browser and manage ads at Google Ad Settings.
HireStepX is not directed at anyone under 18, the age of a child under the DPDP Act. We do not knowingly process the personal data of children. If you believe a minor has created an account, email and we will remove it.
We post updates on this page and change the “last updated” date above. For material changes we also email account holders at least 14 days before they take effect. Version history: 13 October 2026 (cookie banner now lets you choose analytics and advertising separately); 11 October 2026 (corrected processors, retention, deletion, cookie and age wording); 10 October 2026.