Privacy Policy
Last updated: June 9, 2026
This Privacy Policy is a template provided with the HireCheck platform and should be reviewed by your legal counsel before publication. It describes how HireCheck (“we”, “us”) collects, uses, and protects personal data when you use our consent-based employment verification service.
1. Introduction
HireCheck is designed around data minimisation and consent. We process personal data to enable employers to verify employment facts and references about a candidate, strictly after that candidate has authorised the specific check.
2. Data we collect
- Account data: name, email, mobile number, hashed password, and role.
- Employer data: company name, GST/CIN/PAN, address, authorised signatory, and KYC documents.
- Candidate data: profile details you provide, and employment records attested by employers.
- Verification data: requests, consents, references, and generated reports.
- Technical data: IP address, device/user-agent, and audit logs of key actions.
We do not use government identifiers such as Aadhaar as a lookup key, and we avoid collecting sensitive identifiers we do not need.
3. How we use data
- To create and secure accounts and authenticate users.
- To verify employers (KYC) and maintain a trustworthy network.
- To process consent-based verification requests and produce reports.
- To prevent fraud and abuse, and to maintain an audit trail.
- To provide support and send transactional communications.
4. Consent & lawful basis
A verification report about a candidate is generated only after the candidate provides explicit, scoped, time-bound consent for that specific request. Candidates may decline or revoke consent. Where we process data for security, fraud-prevention, or to meet legal obligations, we rely on the corresponding lawful bases.
5. Sharing & disclosure
Verification reports are disclosed only to the requesting employer the candidate authorised, for a limited access window. We use trusted processors (for example, payment and email providers) under appropriate agreements. We do not sell personal data, and we do not operate a public name-search database.
6. Retention
We retain data only as long as necessary for the purposes above or as required by law. Reports carry access windows; audit logs are retained for accountability. Account holders may request deletion subject to legal retention requirements.
7. Security
We apply technical and organisational measures including encryption of sensitive fields at rest, hashed passwords, CSRF protection, rate limiting, role-based access control, and audit logging. No system is perfectly secure, but we work to protect your data diligently.
8. Your rights
Subject to applicable law, you may have rights to access, correct, or delete your personal data, to withdraw consent, and to lodge a complaint. Candidates can additionally dispute inaccurate records through the platform.
9. Cookies
We use a strictly necessary session cookie to keep you signed in and to protect against cross-site request forgery. We do not use advertising cookies.
10. Contact
For privacy questions or requests, contact us at privacy@hirecheck.in or via our contact page.