Legal
Last updated: 26 July 2026. Written in plain English. If anything's unclear, email hello@hirestepx.com.
Account email, your resume (uploaded by you), transcripts of your mock sessions, and basic usage telemetry (page views, session counts, plan type). We do not store audio or video recordings of your sessions: if you answer by voice, your speech is streamed to our speech-to-text provider for live transcription and is not retained. No location, no contacts, no microphone access outside of an active interview round.
To run the product. The resume tunes the AI's questions to your background. The transcripts power scoring and the report you read after each session. Email is for login, receipts, and support replies.
Transcripts auto-delete after 90 days unless you explicitly save a session. Account data persists until you delete your account, after which it's purged within 30 days.
Nobody. We do not share transcripts, scores, or resumes with employers, recruiters, colleges, or third parties. We use the following third-party sub-processors, each under a data-processing agreement that prevents retention or use beyond what we authorise:
Voice audio is streamed live to Deepgram or Sarvam for real-time transcription and is not stored by either provider beyond the duration of the API call. We do not send your resume or session transcripts to Razorpay, Resend, PostHog, or Upstash. Google AdSense is only active on public content pages and is never loaded inside authenticated product surfaces (dashboard, interview sessions, reports).
India's Digital Personal Data Protection Act, 2023 gives you the right to access, correct, and erase the data we hold on you, to nominate another person to exercise these rights on your behalf, and to a grievance redressal process. Lawful basis for processing is performance of contract (delivering the service you signed up for) for everything except optional analytics, which run on explicit consent only.
Cross-border transfers: we process data within India and the United States, governed by standard contractual clauses with each sub-processor. If a grievance isn't resolved to your satisfaction, you may escalate to the Data Protection Board of India.
We respond to any request within 7 working days. For data requests, complaints, or privacy questions, contact our Grievance Officer at .
Strictly-necessary cookies by default (session token, CSRF). Analytics cookies (PostHog) load only after explicit consent via the banner on first visit. On public content pages (blog, interview questions, salary guides), Google AdSense may set advertising cookies to serve relevant ads; these are not present on any authenticated page. You can opt out of personalised ads at any time via Google Ad Settings or by enabling "Do Not Track" in your browser.
HireStepX is not directed at users under 16. If you believe a minor has created an account, email us and we'll remove it.
We post updates here and, for material changes, email all account holders 14 days before they take effect. The diff between versions is published on this page.