Privacy Policy

HireLens is open-source software that you self-host. There is no HireLens cloud service holding your data, and there is no HireLens account to sign up for on this website. That shape makes this policy short — and it puts the data in your hands, not ours.

The short version

• We don't collect your data. Running HireLens does not send your resumes, rubrics, scores, or audit logs anywhere. Everything lives in your own Postgres database.
• Optional telemetry is opt-in. Error tracking (Sentry), LLM tracing (Langfuse), and product analytics (PostHog) are off by default and activate only if the operator explicitly configures the corresponding keys.
• Candidate data is yours to govern. Whoever operates a HireLens instance is the data controller for the candidate data in it. This page is not a substitute for your own privacy obligations to candidates.

What this website collects

This marketing site is static. It sets no advertising or tracking cookies. If the operator of the deployment has enabled PostHog, standard web analytics (page views, referrer) are collected with autocapture disabled — meaning only explicit product events are recorded, never raw DOM content or form input.

What a self-hosted instance stores

• Account email, name, and a hashed password (or OAuth identity) — for sign-in only.
• Job descriptions, rubrics, and uploaded resume documents.
• Parsed candidate records, scores, evidence spans, and decisions.
• An append-only, hash-chained audit log of every scoring run, override, and decision.
• Demographic self-reports are opt-in, per candidate, per dimension, stored in an isolated table that is never joined into scoring queries. Candidates may decline; non-reporting is bucketed as “undisclosed” in audits — because not knowing who you rejected is itself an audit finding.

LLM providers

Scoring runs through a model you choose: a cloud provider (Gemini, Anthropic, Groq, OpenRouter) with your own API key, or a fully local Ollama instance. If resume privacy is paramount, use local mode — then resumes never leave your infrastructure. When you use a cloud provider, that provider processes the resume text under its terms and its own privacy policy; HireLens adds nothing to that data path.

Retention and erasure

There is no vendor retention period to negotiate — your database, your retention policy. Deleting a candidate removes their documents, parsed records, scores, and evidence. Audit log entries are append-only by design so that a deletion is itself auditable.

Contact

Questions about this policy? See the contact page — GitHub issues are the fastest channel for a project like this.

Compliance note. HireLens is a tool that helps organizations meet obligations like NYC Local Law 144 or the EU AI Act's documentation duties. It is not legal advice and does not by itself make any deployment compliant. An AI score is a screening aid, not a hiring decision.