Privacy Policy

Last updated: March 4, 2026

1. Introduction

SpringHire ("we", "our", "us") operates the SpringHire platform at springhire.io and app.springhire.io. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, organization name, and role. If you subscribe to a paid plan, we collect billing information through our payment processor (Razorpay).

Candidate Data

When candidates apply through your careers page, we collect the information they provide — name, email, phone, resume, cover letter, and responses to application form questions. Resumes are parsed by AI to extract skills, experience, and education.

Video Interview Data

When candidates complete video interviews, we store their recorded video responses, AI-generated transcriptions, and AI-generated scores. Videos are stored securely on AWS S3.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, browser type, IP address, and device information.

Google User Data

When you choose to connect your Google account (see Section 5), we collect and store an OAuth 2.0 refresh token and your Google email address. We do not collect or store your Google password.

3. How We Use Your Information

  • To provide and maintain the SpringHire platform
  • To process candidate applications and manage hiring pipelines
  • To run AI-powered resume scoring and interview analysis
  • To send transactional emails (interview invitations, stage updates)
  • To process payments and manage subscriptions
  • To improve our platform and develop new features
  • To respond to customer support requests
  • To send emails to candidates via Gmail on your behalf (when Google is connected)
  • To create and manage interview calendar events (when Google is connected)
  • To export candidate data to Google Sheets (when Google is connected)

4. AI Processing

SpringHire uses artificial intelligence to parse resumes, score candidates, transcribe video interviews, and generate hiring insights. AI processing is performed using third-party AI services (Anthropic Claude). We send only the necessary data for processing and do not use your candidate data to train AI models.

5. Google Account Integration & Google User Data

SpringHire offers an optional Google account integration. Connecting your Google account is entirely voluntary and is not required to use the core platform. When you connect your Google account from the Integrations page in your settings, we request access to the following permissions (scopes):

Scopes We Request

  • Gmail Send (gmail.send): Allows SpringHire to send emails to candidates on your behalf when you compose and send an email from the platform. We only send emails that you explicitly trigger. We do not read, scan, index, or store the contents of your inbox, drafts, or any other emails in your Gmail account.
  • Google Calendar Events (calendar.events): Allows SpringHire to create, update, and delete interview events on your Google Calendar when you schedule or manage interviews through the platform. We only access calendar events created by SpringHire and do not read, modify, or delete your personal or other calendar events.
  • Google Sheets (spreadsheets): Allows SpringHire to create a new Google Spreadsheet containing exported candidate data when you use the "Export" feature. We only create new spreadsheets. We do not read, modify, or delete any of your existing Google Sheets or Drive files.

How Google User Data Is Used

Data obtained through Google APIs is used solely to provide the features described above — sending emails you compose, managing interview calendar events you create, and exporting candidate reports you request. We do not use Google user data for any other purpose, including but not limited to advertising, analytics, market research, email tracking, or building user profiles.

Storage of Google Credentials

We store your Google OAuth 2.0 refresh token and associated email address in our encrypted database. Access tokens are short-lived, refreshed automatically, and not persisted. We do not store your Google account password. Google credentials are encrypted at rest and transmitted only over HTTPS.

Sharing of Google User Data

We do not share, transfer, sell, or disclose Google user data to any third party, except:

  • To our hosting infrastructure (AWS) as necessary to operate the service, under strict security controls
  • When required by law, regulation, or valid legal process

We do not transfer or sell Google user data to advertisers, data brokers, information resellers, or any unrelated third parties.

Revoking Google Access

You can disconnect your Google account at any time from the Integrations page in your SpringHire account settings. Disconnecting will immediately revoke our access and delete the stored Google OAuth tokens from our database. You can also revoke SpringHire's access directly from your Google Account Permissions page.

Google API Services User Data Policy Compliance

SpringHire's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google user data to provide and improve user-facing features that are prominent in SpringHire's interface
  • We do not transfer Google user data to third parties unless necessary to provide or improve user-facing features, with user consent, for security purposes, or to comply with applicable laws
  • We do not use Google user data for serving advertisements or for any purpose unrelated to the core functionality of SpringHire
  • No human reads Google user data unless you have given explicit consent, it is necessary for security purposes, it is required to comply with applicable law, or the data is aggregated and anonymized for internal operations

6. Data Sharing

We do not sell your data. We share information only with:

  • Service providers: AWS (hosting and storage), Anthropic (AI processing), Razorpay (payments), Google (Calendar, Gmail, and Sheets integrations — only when you choose to connect your Google account)
  • Your team: Organization members can access candidate data based on their role permissions
  • Legal requirements: If required by law, regulation, or legal process

7. Data Storage and Security

Your data is stored on AWS infrastructure in the US East (N. Virginia) region. We encrypt data in transit (TLS/HTTPS) and at rest. We implement role-based access controls with 6 permission tiers (Owner, Admin, Recruiter, Hiring Manager, Interviewer, Viewer). We perform regular backups to prevent data loss. OAuth tokens are stored encrypted and are only accessible by our backend services over secure connections.

8. Data Retention

We retain your data for as long as your account is active. You can export or delete candidate data at any time from the platform. When you delete your account, we remove your data within 30 days, except where we are required by law to retain it. Google OAuth tokens are deleted immediately when you disconnect your Google account or delete your SpringHire account.

9. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent for data processing
  • Disconnect third-party integrations (Google) at any time

To exercise these rights, contact us at privacy@springhire.io.

10. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies (Google Tag Manager, Vercel Analytics) to understand how visitors use our site. See our Cookie Policy for details.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. If changes affect how we handle Google user data, we will request your consent again before applying the new practices.

12. Contact Us

If you have questions about this Privacy Policy or our handling of Google user data, contact us at:
Email: privacy@springhire.io