Privacy Policy
Your privacy is fundamental to us. This policy explains how HirAgent collects, uses, and protects your personal data in compliance with Luxembourg and European Union law.
Last updated: 27/07/2025
Privacy at a Glance
Luxembourg-Based
EU data protection laws apply
No Cookies
We currently don't use cookies
Your Rights
Full GDPR rights protection
Data Controller
The data controller responsible for your personal data is:
Information We Collect
Account Information
- • Name and email address when you create an account
- • Company information for business accounts
- • Profile preferences and settings
Usage Information
- • How you interact with our AI agents and platform
- • Technical logs for security and performance
- • IP address and browser information for security purposes
Business Data
- • Data you provide to AI agents for processing
- • Workflow configurations and automations
- • Reports and analytics generated by our platform
Legal Basis and Purpose
We process your personal data based on the following legal grounds under GDPR:
Contract Performance
Processing necessary to provide our AI agent services
Legitimate Interest
Platform security, fraud prevention, and service improvement
Legal Compliance
Meeting regulatory requirements and tax obligations
Consent
Marketing communications (where explicitly consented)
Data Sharing
We do not sell, rent, or trade your personal data. We may share data only in these limited circumstances:
Service Providers: EU-based cloud infrastructure and essential service providers under strict data processing agreements
Legal Requirements: When required by Luxembourg or EU law enforcement
Business Transfer: In case of merger or acquisition (with continued privacy protection)
Data Retention
We retain your personal data only as long as necessary:
Account Data
Until account deletion plus 30 days for security
Business Data
As per service agreement or 7 years for compliance
Usage Logs
12 months for security and performance analysis
Marketing Data
Until consent withdrawal or 3 years of inactivity
Your Data Protection Rights
Under GDPR, you have the following rights regarding your personal data:
Access
Request copies of your personal data
Rectification
Correct inaccurate personal data
Erasure
Request deletion of your data
Restriction
Limit processing of your data
Portability
Transfer your data to another service
Object
Object to processing based on legitimate interest
Withdraw Consent
Withdraw consent for future processing
Complain
File complaint with supervisory authority
To exercise your rights, contact us at privacy@hiragent.com. We will respond within 30 days as required by law.
Data Security
We implement comprehensive security measures to protect your personal data:
Technical Measures
- • End-to-end encryption for data transmission
- • Encryption at rest for stored data
- • Regular security audits and penetration testing
- • Multi-factor authentication requirements
Organizational Measures
- • Employee training on data protection
- • Access controls and principle of least privilege
- • Incident response and breach notification procedures
- • Regular backup and disaster recovery testing
Cookies and Tracking
Our website currently operates without cookies or tracking technologies. We rely on server-side processing and do not store any tracking data on your device.
If we implement cookies in the future, we will update this policy and request your consent where required by law. Essential cookies for website functionality would be used based on legitimate interest, while optional cookies would require your explicit consent.
International Data Transfers
We prioritize keeping your data within the European Economic Area (EEA):
Primary Infrastructure: All main services hosted within the EU/EEA on European infrastructure
Third-Party Services: Limited use of adequacy decision countries or Standard Contractual Clauses where necessary
Self-Hosted Option: Enterprise customers can use Sovr.AI for complete data sovereignty
Policy Updates
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by:
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights:
Privacy Inquiries
Supervisory Authority
You have the right to complain to the Luxembourg data protection authority:
Commission Nationale pour la Protection des Données (CNPD)
cnpd.public.lu