Effective date: September 27, 2026
HireKey is operated by Rozea, LLC, 100 N Howard St, Suite R, Spokane, WA 99201. This policy covers our public website at hirekey.io and our application at app.hirekey.io. Contact privacy@hirekey.io about your information.
Only upload information you have permission to use. Avoid unnecessary sensitive personal information in resumes, job notes and interview answers.
We use information to provide the features you request, authenticate your account, save your work, process subscriptions and credits, send service notices, respond to requests, prevent abuse, diagnose problems and improve HireKey. Website email subscriptions also let us send the updates you sign up to receive; you can unsubscribe from those messages.
Product improvement includes feature-use measurements and session replay as described below. It can involve reviewing content visible in an enabled replay or information needed to investigate a support, security or technical issue. It does not mean training our own AI model on your content.
Where applicable privacy law requires a legal basis, we process information as needed to provide our service, meet legal obligations, pursue legitimate interests such as security and service improvement, or obtain consent where required. You may contact us about the basis for a particular use or to withdraw consent for processing based on consent.
The application uses OpenAI for AI-generated content and coaching. Relevant inputs may include your resume, job description, interview answers, conversation context and information you choose to include. Names or contact details contained in your resume or answers can be part of those inputs.
We do not use your content to train AI models. OpenAI states that API inputs and outputs are not used to train its models by default. Provider processing can still involve temporary storage and abuse-monitoring retention. HireKey's saved-record rules do not describe all provider retention. See our AI Usage Policy.
If you use the microphone, your browser's speech-recognition service converts speech to text. Depending on your browser, audio may be processed by its speech provider. You can type instead. HireKey does not save raw microphone recordings or generated playback audio as files in its application storage.
Separately hosted tools embedded in our public website may have a different processing flow from the signed-in application. Their tool-specific notices apply alongside this policy.
We use PostHog on the website and in the application to understand usage and diagnose problems. Application events are linked to a stable HireKey account identifier. They are not anonymous just because the identifier is not your email address.
When session replay is enabled, it can capture pages, clicks, interactions and visible text or inputs, including resume, job or other content shown outside live voice interview coaching. Password inputs are masked. Content in live voice interview coaching is excluded from replay and automatic interaction capture; page visits and deliberately recorded feature events may still be measured without the conversation text.
The public website also uses Google Analytics. Our Cookie Policy explains website choices and browser storage. Do not assume that deleting a saved document also deletes an earlier analytics record or replay. Contact us for a privacy request involving those systems.
We use providers for hosting, authentication, storage, AI, speech, payments, email, error reporting, website forms, video playback and analytics. The Data Security and Retention policy explains the principal services and what they process.
We may disclose information to meet a valid legal requirement, protect people and our service, or transfer the business in a merger or acquisition. We will provide notice of a business transfer as appropriate. Providers may process information in countries other than yours, including the United States. Contact us for information about safeguards applicable to a particular transfer.
We do not sell your personal information, provide candidate data to employers or recruiters for their use, or share personal information for cross-context behavioral advertising. We do not display advertising in HireKey.
Different records have different rules:
When you request deletion of your personal data, we delete the requested data from systems and records HireKey controls within seven days of receiving your request. This includes our application and database records, uploaded files, logs, backups and release archives, and analytics or session replays that HireKey controls. A request to delete your account and all personal data covers all such records. This deadline does not govern data retained independently by third-party providers under their own policies.
If applicable law requires us to retain a particular record, we retain only the information required for that purpose and explain the exception when responding to your request. The seven-day deletion deadline does not create an account-recovery period. Copies you downloaded to your own device remain under your control.
You can manage documents using the controls in Documents, export account records from Settings, and request account deletion in Settings. An account-record export is not a complete backup of all uploaded files or temporary browser content. Download documents and a completed coaching transcript separately if you want to keep them.
Not every category has a separate in-product delete button. Email privacy@hirekey.io for access, correction, deletion or other requests beyond the available controls. Depending on applicable law, your rights may include a portable copy, restriction of processing, objection, withdrawal of consent and a complaint to a supervisory authority. We may need to verify your identity before acting. Applicable exceptions can limit a request; we will explain them when relevant. We do not penalize you for exercising applicable privacy rights.
Deleting your account is different from canceling Premium. Account deletion removes your account and associated application records, forfeits purchased credits and stops future subscription charges. Cancellation keeps your account and ends Premium at the end of its paid period. The seven-day deletion deadline and any legally required exception described above apply.
We use the safeguards described in Data Security and Retention. No service can guarantee that every security incident will be prevented. Report a suspected issue to privacy@hirekey.io.
HireKey is not directed at children under 16, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information.
When we make material changes to this policy, we will notify you by email or in-product notice before they take effect. The effective date identifies the current version.