Effective date: September 15, 2026
Last updated: September 15, 2026

This Privacy Policy explains how HRYP.com (“HRYP”, “we”, “us” or “our”) collects, uses, stores and discloses personal information when you use hryp.com, check.hryp.com, and HRYP tools, directories, forms, paid services and related functionality (collectively, the “Services”).

This notice is intended to provide transparency under applicable privacy and data-protection laws, including the General Data Protection Regulation (“GDPR”) where applicable and California privacy law.

1. Scope and contact

This Privacy Policy applies to personal information processed through HRYP websites and Services.

For privacy questions, requests or concerns, contact:

Email: support@hryp.com

Where you submit personal information relating to another individual, including candidate or employee information, you are responsible for ensuring that you are legally permitted to provide and process that information through the relevant Service.

2. Information we collect

Depending on the Service you use, we may collect the following categories of information.

2.1 Contact and account information

  • Name and business contact details.
  • Email address and telephone number where provided.
  • Account username and related account information.
  • Company, organisation, role or business information.
  • Information submitted when contacting HRYP or requesting support.

2.2 Transaction and purchase information

  • Products or Services purchased.
  • Transaction status, amount, currency and transaction references.
  • Billing-related information required to administer a purchase or meet legal obligations.

Payment card processing is handled by third-party payment providers such as Stripe. HRYP does not need to store your full card number or card security code in order to provide the HRYP AI Hiring Readiness service.

2.3 HR tool and user-submitted information

Some HRYP tools allow users to submit information such as CVs, resumes, job descriptions, candidate information, benchmark information, profile text or other HR-related material.

You should submit only information that is necessary for the requested Service and that you are legally authorised to process. Please avoid including unnecessary sensitive or special-category personal information.

2.4 HRYP AI Hiring Readiness information

When you use the HRYP AI Hiring Readiness Check, we may process:

  • Your email address.
  • Optional company name.
  • Optional company-size information.
  • Your answers about how your organisation uses AI in recruitment.
  • The readiness findings generated from those answers.
  • Report, payment and delivery metadata.
  • Technical and security information associated with the assessment.

The HRYP AI Hiring Readiness Check is designed to evaluate organisational processes. It does not require you to upload candidate CVs, identity documents or candidate files as part of the readiness assessment.

2.5 Technical and usage information

When you use our Services, we may automatically receive technical information such as:

  • IP address.
  • Browser, device and operating-system information.
  • Pages and functions accessed.
  • Date and time of requests.
  • Referral and campaign information, including UTM parameters where present.
  • Security, error and abuse-prevention logs.
  • Cookie and similar technology information where applicable.

3. How we collect information

We may collect personal information:

  • Directly from you when you use a tool, purchase a Service, create an account, submit a listing, contact us or complete a form.
  • Automatically when you access our websites or Services.
  • From payment, email, analytics, security or infrastructure providers where necessary to operate the Services.
  • From information you intentionally provide through HRYP tools.

4. Why we use personal information

We may process personal information to:

  • Provide and deliver the Services you request.
  • Generate and deliver reports and tool outputs.
  • Process payments and maintain transaction records.
  • Operate accounts, listings and paid features.
  • Provide customer support.
  • Send transactional communications.
  • Maintain security, prevent fraud, investigate abuse and protect our infrastructure.
  • Measure and improve the reliability, usability and performance of our Services.
  • Comply with legal, tax, accounting and regulatory obligations.
  • Send marketing communications where permitted by law and, where required, with your consent.

5. Legal bases under the GDPR

Where the GDPR applies, our legal basis depends on the context and may include:

  • Performance of a contract: where processing is necessary to provide a Service you requested or purchased.
  • Legitimate interests: including operating, securing, maintaining and improving our Services, preventing abuse and supporting our business, where those interests are not overridden by your rights.
  • Consent: where required, including for certain marketing or tracking technologies.
  • Legal obligation: where processing is necessary to comply with applicable law, accounting, tax or regulatory requirements.

6. AI-assisted tools and automated processing

Some HRYP Services use automated or AI-assisted processing to generate analyses, summaries, scores, reports, recommendations or other outputs.

HRYP tools are intended to support human workflows. HRYP does not make hiring, rejection, promotion or other employment decisions on behalf of employers or recruiters.

The HRYP AI Hiring Readiness Check automatically evaluates organisational responses against a versioned assessment framework and generates readiness findings. This process evaluates the organisation’s reported practices and is not intended to make a decision producing legal or similarly significant effects about an individual candidate or employee.

7. Service providers and disclosures

We may disclose information to service providers where necessary to operate the Services. Categories of recipients may include:

  • Website, server, hosting and infrastructure providers.
  • Payment processors, including Stripe.
  • Transactional email providers, including Brevo.
  • Analytics, security, fraud-prevention and technical service providers.
  • AI or software infrastructure providers used to perform a user-requested function.
  • Professional advisers where reasonably necessary.
  • Public authorities where disclosure is required by applicable law or a valid legal process.

Service providers are permitted to process information only for the purposes for which it is provided to them, subject to applicable contractual and legal requirements.

We may also transfer relevant information in connection with a merger, acquisition, financing, reorganisation, sale of assets or similar business transaction, subject to applicable law.

8. Payments

Paid Services may be processed through Stripe or another payment provider identified at checkout.

The payment provider processes payment credentials under its own privacy and security framework. HRYP receives information necessary to confirm and administer the transaction, such as payment status, amount, currency and transaction identifiers, but does not need to receive or store the complete payment-card number or CVC for the AI Hiring Readiness purchase flow.

9. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to applicable legal, accounting, tax, security and dispute-resolution requirements.

HRYP AI Hiring Readiness

For the HRYP AI Hiring Readiness service:

  • Assessment and report content is currently configured for retention for up to 90 days, unless a longer period is necessary for security, dispute handling or another applicable legal reason.
  • Private report download links are currently configured to expire after 7 days.
  • Payment, accounting and transaction records may be retained separately for longer periods where required for financial, tax, fraud-prevention, chargeback or legal purposes.

Other HRYP Services may use different retention periods depending on the nature of the Service, account, content and applicable obligations.

10. International data transfers

Some service providers may process information in countries outside your country of residence.

Where applicable law requires safeguards for international transfers, we use or rely on appropriate transfer mechanisms made available by our service providers, which may include adequacy decisions, standard contractual clauses or other legally recognised safeguards.

11. Your GDPR rights

Where the GDPR applies, you may have the right to:

  • Request access to personal data concerning you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion in circumstances provided by law.
  • Request restriction of processing.
  • Object to certain processing, including direct marketing.
  • Receive certain information in a structured, commonly used and machine-readable format where the right to data portability applies.
  • Withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.
  • Raise concerns regarding qualifying solely automated decisions where applicable.
  • Lodge a complaint with the competent data-protection supervisory authority.

We may need to verify your identity before acting on a request.

12. California privacy rights

California residents may have rights under the California Consumer Privacy Act, as amended, subject to applicable thresholds, definitions and exceptions. These may include the right to:

  • Know the categories and specific pieces of personal information collected about them.
  • Know relevant categories of sources, purposes and recipients.
  • Request deletion of qualifying personal information.
  • Request correction of inaccurate personal information.
  • Opt out of the sale or sharing of personal information where those activities occur as defined by California law.
  • Limit certain uses or disclosures of sensitive personal information where the statutory right applies.
  • Exercise applicable privacy rights without unlawful discrimination.

HRYP does not sell personal information for monetary consideration.

Depending on the technologies and providers used on our websites, certain advertising or analytics disclosures could potentially be treated as “sharing” under California law. Where an applicable opt-out right is required, we will honour qualifying requests and applicable consent or preference mechanisms.

We do not knowingly sell or share personal information of consumers under 16 years of age.

An authorised agent may submit a qualifying request where permitted by law, subject to appropriate verification.

13. Cookies and similar technologies

HRYP may use cookies and similar technologies for functionality, security, preferences, analytics and, where applicable, advertising or marketing purposes.

Where required by applicable law, non-essential technologies are subject to the relevant consent or preference mechanism. Browser settings may also allow you to control or delete cookies, although disabling certain cookies may affect Service functionality.

14. Security

We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

These measures may include access controls, encrypted connections, restricted storage, security logging, private report links and other infrastructure protections appropriate to the Service.

No internet transmission or storage system can be guaranteed to be completely secure.

15. Children and age requirements

HRYP Services are intended for adults and business users. In accordance with our Terms of Use, users must be at least 18 years old to use HRYP.com and its tools.

We do not knowingly collect personal information directly from children through Services intended for adult or professional use. If we learn that personal information was collected contrary to this requirement, we may take appropriate steps to delete it.

16. Marketing communications

Transactional communications necessary to provide a purchased or requested Service are separate from marketing communications.

Where required, marketing communications will be sent only with the appropriate legal basis or consent. You may unsubscribe from marketing communications using the available unsubscribe mechanism or by contacting us.

17. Third-party links

Our websites may contain links to third-party websites, services, vendors or resources. Their privacy practices are governed by their own notices, and HRYP is not responsible for third-party privacy practices outside our control.

18. Changes to this Privacy Policy

We may update this Privacy Policy when our Services, providers, legal requirements or data practices change.

We will publish the updated version on this page and revise the “Last updated” date. Material changes may be communicated through additional means where appropriate or legally required.

19. Contact and privacy requests

For privacy questions or to exercise applicable privacy rights, contact:

HRYP.com
Email: support@hryp.com

Please describe your request sufficiently for us to understand and process it. We may request reasonable information necessary to verify identity, authority or the scope of the request.