DRAFT – NOT LEGAL ADVICE – to be reviewed (ideally with a lawyer) before publishing. Fill all [PLACEHOLDERS].
Privacy Policy – HireCheck (hirecheck.eu)
Last updated: [DATE]
1. Controller
[FULL NAME], operating as a sole proprietor (FIE) in Estonia, registry code [CODE], address [ADDRESS], email hello@hirecheck.eu [placeholder – confirm mailbox exists].
2. What we collect and why (GDPR Art. 6)
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email, hashed password / OAuth ID | Account | Contract (6(1)(b)) | Until account deletion + 30 days |
| Job-ad text you paste | Generate the practice assignment | Contract | Not stored: held only in a temporary file during generation (seconds) and deleted right after; never written to our database or logs. Sent to our AI provider for processing. We keep the generated assignment (title, template, ZIP) |
| Solutions you submit for feedback | Produce AI feedback | Contract | Until you delete them or account deletion |
| Usage logs, IP | Security, abuse prevention | Legitimate interest (6(1)(f)) | 90 days |
| Analytics (cookieless, [Plausible/Umami]) | Improve the site | Legitimate interest | Aggregated |
Do not paste personal data of others or confidential employer material into the job-ad field.
3. Payments
Payments are processed by Stripe Payments Europe Ltd. (Ireland) as our payment processor. Card details go directly to Stripe and never reach our servers. We receive and store your Stripe customer ID, subscription status, billing country/address and (if provided) VAT ID, needed for invoicing and EU VAT. Accounting records are kept for 7 years as required by Estonian law. See Stripe's privacy policy.
4. Processors
Hosting: [Hetzner, Germany]. AI model provider: [PROVIDER, region, no training on API data – verify]. Email: [PROVIDER]. Transfers outside the EEA rely on Standard Contractual Clauses / EU-US Data Privacy Framework where applicable.
5. Your rights
Access, rectification, erasure, restriction, portability, objection; withdraw consent any time. Contact hello@hirecheck.eu [placeholder – confirm mailbox exists]. Complaints: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee.
6. Cookies
Only strictly necessary session cookies. No advertising trackers.
7. Security, minors, changes
Encryption in transit, access restricted to the operator. Service not intended for under-16s. Material changes notified by email.