Privacy Policy

1. Who we are

OneStopHire is an AI-powered job platform operated from India. When this policy says "we", "us", or "OneStopHire", we mean the team and legal entity that runs the platform you access at onestophire.ai. You can reach our privacy team at privacy@onestophire.ai.

2. What we collect

We collect three categories of data:

• Account data — name, email, phone, password hash, authentication tokens, role (candidate / recruiter / institute).
• Profile and work data — resume content (parsed and raw), education, work experience, skills, preferences, job posts you create, applications you submit, messages you exchange.
• Usage and device data — IP address (hashed for storage), browser type, pages visited, AI tool usage volume, error and performance telemetry.

3. Why we collect it

We use your data to:

• operate the service (matching, applications, messaging);
• train and improve our AI models on aggregated, de-identified data only;
• communicate with you about your account and the service;
• enforce our terms, prevent fraud, and meet legal obligations;
• generate aggregated, anonymized insights for industry research.

We do not sell your resume or contact details to third parties. Candidate data is only revealed to a recruiter when the candidate has applied to that recruiter's job, or has explicitly opted in to be discoverable.

4. AI processing

OneStopHire is AI-native. Your resume, job descriptions, and the prompts you submit to our AI tools are processed by large-language-model providers (currently Anthropic and OpenAI). We send only what is required to deliver the feature and we never include AI-customer identifiers in the prompt. We retain AI inputs and outputs only as required to provide the feature (typically the duration of your session plus a short cache window for cost optimization).

5. Data retention

• Active account — for the duration your account is active.
• Closed account — we delete or anonymize most personal data within 90 days of account closure. We retain a minimal record of transactions and consent for as long as required by Indian law (typically 7 years for billing records).
• Job applications — visible to the recruiter you applied to for as long as their account remains active.

6. Your rights

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to access, correct, and erase your personal data, and to withdraw consent. To exercise these rights, email privacy@onestophire.ai or use the in-app data controls under Settings → Privacy.

7. Security

We use industry-standard encryption in transit (TLS 1.2+), encryption at rest for sensitive fields, hashed passwords, role-based access controls, and audit logging on all AI operations. No system is perfectly secure — please use a strong, unique password and report suspicious activity to security@onestophire.ai.

8. Sharing

We share data only with: (a) recruiters you apply to, (b) infrastructure providers under signed processor agreements (cloud hosting, email, payment, AI), and (c) regulators where required by law. We never sell your data.

9. International transfers

Our cloud providers may store data in regions outside India. Where this occurs, we ensure protections at least equivalent to what the DPDP Act requires.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

11. Changes to this policy

We will notify you in-app and by email of any material changes at least 7 days before they take effect. Continued use after that date constitutes acceptance.

12. Contact us

Questions? Email privacy@onestophire.ai or use our contact form. We aim to respond within 1 business day.