Privacy Policy

Last updated: December 6, 2025

1. Introduction

Hire Spark (hereinafter "we", "our" or "the Platform") is committed to protecting the privacy of its users. This privacy policy explains how we collect, use, store, and protect your personal data when you use our recruitment management platform (ATS).

2. Data Controller

The data controller is:
Hire Spark SAS
[Address to complete]
Email: privacy@hirespark.io

3. Data Collected

3.1 User Data (recruiters)

  • Identification information: last name, first name, professional email
  • Connection data: IP address, connection logs
  • Usage data: actions performed on the platform
  • Billing data: billing address, payment information (processed by our payment provider)

3.2 Candidate Data

  • Identification information: last name, first name, email, phone
  • Application data: CV, cover letters, portfolio
  • Additional documents: diplomas, certifications, identity documents (if requested)
  • Interaction history: interviews, exchanges, evaluations
  • Browsing data: use of application tracking page

4. Processing Purposes

We process your data for the following purposes:

  • Provision and improvement of our ATS services
  • User account management and authentication
  • Processing applications on behalf of our clients
  • Communication with candidates (notifications, emails)
  • Recruitment analysis and statistics
  • Billing and subscription management
  • Customer support and technical assistance
  • Compliance with our legal obligations

5. Legal Basis for Processing

Our processing is based on:

  • Contract performance: provision of our services to client companies
  • Legitimate interest: improvement of our services, anonymized statistics
  • Consent: non-essential cookies, marketing communications
  • Legal obligation: retention of billing data

6. Retention Period

  • User data: duration of contract + 3 years
  • Candidate data: 2 years after last contact or according to client company policy
  • Billing data: 10 years (legal obligation)
  • Connection logs: 1 year

7. Data Recipients

Your data may be shared with:

  • Client companies using our platform (for candidate data)
  • Our technical subcontractors (hosting, email, payment)
  • Competent authorities if required by law

We never sell your personal data to third parties.

8. International Transfers

Your data is hosted on servers located in the European Union. In case of transfer outside the EU, we ensure that appropriate safeguards are in place (standard contractual clauses, adequacy decision).

9. Data Security

We implement appropriate technical and organizational measures:

  • Data encryption in transit (HTTPS/TLS)
  • Encryption of sensitive data at rest
  • Secure authentication and access management
  • Regular backups and disaster recovery plan
  • Regular security audits

10. Your Rights

In accordance with GDPR, you have the following rights:

  • Right of access: obtain a copy of your data
  • Right to rectification: correct your inaccurate data
  • Right to erasure: request deletion of your data
  • Right to restriction: restrict processing of your data
  • Right to portability: receive your data in a structured format
  • Right to object: object to certain processing
  • Right to withdraw consent: withdraw your consent at any time

To exercise your rights, contact us at: privacy@hirespark.io

11. Cookies

Our use of cookies is detailed in our Cookie Policy.

12. Modifications

We may update this privacy policy. In case of substantial modification, we will inform you by email or via a notification on the platform.

13. Contact and Complaints

For any questions regarding this policy or your personal data:

You also have the right to lodge a complaint with the supervisory authority:
www.cnil.fr