Privacy Policy

Last updated: January 1, 2025

1. Introduction

Stebr Canada Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our HIRY AI platform and related services.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email, company details)
• Candidate information submitted for screening
• Assessment responses and results
• Communication preferences
• Payment information (processed by third-party providers)

2.2 Information We Collect Automatically

• Usage data and analytics
• Device and browser information
• IP addresses and location data
• Cookies and similar tracking technologies

3. How We Use Your Information

• Provide and maintain our services
• Process candidate assessments and screenings
• Detect and prevent fraud
• Communicate with you about our services
• Improve our AI algorithms and platform
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With your explicit consent
• With service providers who assist in our operations
• To comply with legal requirements
• To protect our rights and prevent fraud
• In connection with a business transfer or merger

5. Data Security

We implement industry-standard security measures including:

• End-to-end encryption of data in transit and at rest
• Regular security assessments and penetration testing
• SOC 2 Type II compliance
• Multi-factor authentication
• Regular employee security training

6. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access your personal information
• Correct inaccurate information
• Delete your information
• Restrict processing of your information
• Data portability
• Object to processing based on legitimate interests

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place through:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Binding corporate rules
• Other approved transfer mechanisms

8. Retention Period

We retain your information for as long as necessary to provide our services and comply with legal obligations. Specific retention periods include:

• Account information: Duration of account plus 7 years
• Assessment data: 3 years after completion
• Usage logs: 2 years
• Communication records: 5 years

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Email notification
• Prominent notice on our platform
• In-app notifications

11. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

12. Jurisdiction-Specific Information

12.1 European Union (GDPR)

If you are in the EU, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with a supervisory authority.

12.2 California (CCPA)

California residents have specific rights under the California Consumer Privacy Act, including the right to know what personal information is collected and the right to delete personal information.

12.3 Canada (PIPEDA)

We comply with Canada's Personal Information Protection and Electronic Documents Act and provincial privacy legislation where applicable.