Privacy policy

Hirus is operated by Agentbird Inc., United States ("Hirus", "we", "us"). This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit hirus.ai, use our recruiting services or contact us. Agentbird Inc. is responsible for the personal information we process for these purposes.

For privacy questions or requests, email founders@hirus.ai with the subject Hirus privacy request.

1. Your profile and your approval

Your recruiting profile is not a public listing. Creating an account, saving your profile, submitting work for review or expressing interest in a role does not give a hiring company access to your profile.

Before an introduction is shared, you can review the receiving company, the role and the exact version of the information proposed for disclosure. The company receives access to the introduction you approve, including a selected résumé if one is included. It does not receive unrestricted access to your profile, future edits or private internal reviewer notes. A changed disclosure requires approval of that version.

You can revoke future company access through Hirus. Revocation cannot retrieve information already viewed, downloaded or copied outside Hirus. A receiving company is responsible for its own subsequent handling of that information.

Your introduction approval is separate from the processing by Hirus personnel and service providers described in this policy, including analytics and session replay.

2. Information we collect

Information you provide. We collect your email address, name and the information you add to your account. Recruiting information can include your work headline, location, professional links, career history, contributions, supporting evidence, interests, availability, working preferences and an optional résumé. Company users may provide their organisation, role, company details and hiring requirements. When you contact us, we receive your message, contact details and any attachments.

Optional fields are your choice. Missing required information may prevent account setup, profile review or an introduction. Please do not include government identification documents, financial account details, sensitive medical information or confidential material you are not entitled to share.

Information generated during recruiting. We keep profile submissions, review findings, internal review notes, clarification questions and answers, proposed introductions, corrections, approvals, refusals and revocations. We receive company responses and information about an introduction's progress or outcome. These records may contain information about you provided by reviewers or hiring-company members. We may consult professional links and supporting materials you supply.

Account and technical information. We process sign-in and verification records, session identifiers, permissions, company memberships and records of account activity. Our infrastructure providers may process IP addresses, browser and device information, request timestamps, diagnostic information and security logs to deliver and protect the service.

Agreements and cookie choices. We store the versions and copies of the terms and privacy policy you accept or acknowledge, the time of your acceptance, your essential-cookie acknowledgement and your optional analytics choice. Portal access requires a saved acknowledgement of the current legal documents. A substantive document update requires a new acknowledgement; changing the contact email or footer label alone does not.

Public content. Information intentionally included in a published Hirus article or information page, such as an author's name or an image, is available to visitors and may be indexed by search engines. Publishing editorial content is separate from candidate profile sharing.

3. How we use information

We use personal information to operate and secure accounts; save and review recruiting profiles; manage candidate-approved introductions; record recruiting progress; answer support and privacy requests; prevent misuse; investigate errors; improve usability and performance; and maintain records needed for accountability, disputes and applicable legal obligations.

The current recruiting workflow uses human review. Hirus does not autonomously score, rank or reject candidates in that workflow. Review does not guarantee an introduction, interview or employment.

Where applicable law requires a legal basis, we process information as necessary to provide the service you request, for legitimate interests such as protecting the service and resolving support issues where those interests do not override your rights, to meet legal obligations, or with consent where required. Approval of an introduction is specific to that disclosure; it is not blanket consent to every use of information. You may withdraw consent for processing that relies on it, without affecting the lawfulness of earlier processing.

4. Analytics, session replay and browser storage

We use PostHog for page events, interactions, service-usage events and session replay for visitors and signed-in users, including during signup before agreements are saved. PostHog recording does not depend on the optional analytics preference. With that preference enabled, we also use Vercel Web Analytics and Speed Insights to measure page usage and browser performance. Events can describe actions such as completing onboarding, saving a profile or deciding on an introduction, and server events may be associated with your account identifier.

Session replay can record page text, images, clicks, scrolling and ordinary form values, including personal information you enter or see. Recording may occur before you submit or save a form. Password fields are masked; other fields and page content are not comprehensively masked. Do not assume a recording is anonymous: it may contain identifying content or be associated with an account identifier.

The browser recorder excludes hidden sign-in tokens and disables console-log recording, network request and response bodies and headers, cross-origin iframe recording and canvas recording. Page-event and replay page-metadata URLs are filtered to remove query strings, fragments and private record identifiers. That filtering does not remove personal information from visible content or ordinary form fields. Server-side usage and error reporting is separate from these browser recording restrictions.

Hirus uses essential cookies and similar storage for sign-in sessions, security and interface preferences. They are needed to provide the authenticated service. Analytics and replay tools may use identifiers and storage to recognise a browser or associate activity within a session. You can decline optional Vercel analytics and still use Hirus; this preference does not disable PostHog session replay. Change your choice through Cookie preferences in Settings or at the bottom of this page. Withdrawing that choice stops future Vercel analytics collection after the preference is saved; it does not erase data already collected. You can also restrict or clear storage in your browser, although blocking essential session cookies can prevent sign-in. Contact us to request deletion of previously collected data or raise another privacy concern.

5. Who receives information

Authorised Hirus personnel can access information needed for recruiting review, support, security or administration, subject to their permissions. Administrative oversight does not let a staff member approve an introduction on your behalf.

Hiring companies you approve receive the specific introduction described in section 1. Their use outside Hirus is also governed by their own responsibilities and privacy practices.

Service providers process information to supply the functions below. Depending on the function, that may include account data, recruiting records, files, email addresses, technical data or replay content.

Provider processing does not grant a hiring company access to your private profile. Private résumé storage is separate from images deliberately published in public editorial content.

Legal and security disclosures. We may disclose information where required by applicable law or valid legal process, or where legally permitted and necessary to address fraud, security incidents or threats to people's rights or safety.

6. International processing

Agentbird Inc. is based in United States. Hirus uses US infrastructure, including application compute and database hosting configured in Oregon and PostHog's US service. File storage is configured for western North America. Your information may therefore be processed outside the country where you live.

These primary infrastructure locations do not describe every provider's support operation, backup or subprocessor. Providers may process information in additional countries under their service arrangements. You can contact us for further information about providers and processing locations relevant to your data. Where applicable law requires safeguards for an international transfer, those requirements apply in addition to this policy; using Hirus does not waive your rights.

7. Retention and deletion

Retention depends on the type of information, whether you maintain an account or an active introduction, the purpose for which it was collected, outstanding support or security issues, and applicable legal or dispute-related requirements. We use these criteria rather than a single retention period for every category. Account records support your ongoing access; recruiting records support your profile and introductions; consent and audit records support access accountability. Provider logs, recordings and backups have separate retention settings and deletion processes.

In Settings, you can erase your recruiting content. This revokes associated company access and removes or clears your profile, experience, evidence, review content and personal recruiting content in introductions. Associated résumé files are marked for removal; file cleanup may finish after the database changes.

Recruiting-data erasure does not delete your account, company memberships or every service record. Minimal consent, audit and business-event metadata remain. It does not itself delete provider-held analytics or replay records. Backup copies and information already received by a company may persist separately; deletion is not a promise that every copy disappears immediately.

To request account deletion or deletion beyond the self-service control, email founders@hirus.ai. We may need to verify ownership and address company-owner dependencies, information involving other people or applicable retention obligations. We will explain any limitations relevant to your request.

8. Your choices and rights

You can edit your profile and experience, request corrections to a proposed introduction, inspect sharing records, export your recruiting data and revoke future company access through your workspace. The self-service export does not include every authentication record, internal opinion or provider-held record, and does not limit any statutory right of access.

Depending on the law that applies, you may have rights to access, correct or delete personal information; receive a portable copy; restrict or object to processing; withdraw consent; or complain to a privacy regulator. Some rights have exceptions, including where a request affects another person's rights or information must be retained by law.

Send requests to founders@hirus.ai. We may ask for proportionate evidence of identity before disclosing or changing information. We will assess your request and respond within the period required by applicable law. You do not need to delete your account to ask a privacy question or exercise a right.

9. Security

Hirus uses access controls, live permission checks, private file storage and authenticated access to protect information. Résumé download links are time-limited, and relevant staff actions and access decisions are recorded. No online service can guarantee absolute security.

If you suspect unauthorised access, contact us promptly. Do not include passwords, sign-in links or other credentials in your report.

10. Children and information about other people

Hirus is a professional recruiting service and is not designed for children. If you believe a child has provided personal information, contact us so we can investigate and address it. Only provide information about another person when you are entitled to do so, and avoid including unnecessary personal information in supporting materials.

11. Privacy concerns and complaints

Email founders@hirus.ai with the subject Hirus privacy request, explain your concern and tell us the outcome you are seeking. We will review the issue, investigate as appropriate and respond within the applicable legal timeframe. If you are dissatisfied with our response, you may contact the privacy regulator responsible for your jurisdiction.

Where Australian privacy law applies, you can contact the Office of the Australian Information Commissioner. Where UK data protection law applies, you can contact the Information Commissioner's Office. In the European Economic Area, you may complain to the supervisory authority in the country where you live or work, or where you believe an infringement occurred.

12. Changes to this policy

We will update this policy as our practices change and revise the date above. Where required, we will provide additional notice or obtain consent before a new use of personal information. A policy update does not approve a recruiting introduction on your behalf.