Skip to content
Hirify

Privacy policy

Last updated: June 17, 2026.

This policy describes how personal data is processed for visitors of the hirify.fr site and for people who request a demo. Hirify is a service designed in France. The data processed is hosted in the European Union and is not transferred outside the EU.

Data controller

Hirify SAS, 12 rue de la Part-Dieu, 69003 Lyon, SIREN 991 477 951, represented by its President Robin Marquet. For any question about your data, you can contact our data protection point of contact: rgpd@hirify.fr.

Our two roles depending on the data

For the data of site visitors and prospects (demo requests), Hirify is the data controller: this policy applies.

For candidate data processed within the platform on behalf of our recruiter clients, Hirify acts as a data processor within the meaning of Article 28 of the GDPR. Those processing activities are governed by the contract and the data processing agreement (DPA) entered into with each client, who is the controller, and not by this policy. Candidates exercise their rights with the relevant recruiter client.

Data collected on this site

  • Audience measurement (PostHog Cloud EU, Frankfurt datacenter, Germany): page views and interaction events (button clicks, opening of the demo dialog).
    Purpose: measure and improve the site's audience and usability. Legal basis: legitimate interest (Article 6(1)(f) GDPR), within the CNIL audience-measurement consent exemption (see the Cookies section).
  • Demo request (HubSpot, hosted in the EU): name, email address, company, message.
    Purpose: respond to your request and arrange a sales conversation. Legal basis: performance of pre-contractual measures (Article 6(1)(b)) and legitimate interest in responding to professional prospects (Article 6(1)(f)).

Retention periods

  • Prospect data (demo requests): 3 years from your last contact with us.
  • Audience-measurement trackers: maximum lifetime of 13 months.
  • Aggregated traffic statistics: 25 months maximum.

Cookies and trackers

Audience measurement (PostHog). The site sets a first-party cookie on the hirify.fr domain and uses browser local storage for audience-measurement purposes. This measurement is configured to meet the conditions of the CNIL consent exemption: purpose limited to audience measurement, no cross-site tracking, no identifier shared with other services, truncated IP address, lifetime limited to 13 months. Requests pass through a same-origin relay (/h-link) that ensures reliable collection; PostHog Cloud EU remains the recipient of the data as a processor.

Booking (HubSpot). The demo-booking tool only loads when you open the demo dialog, and may then set its own cookies, which are necessary for it to work.

Refusal. Because the audience measurement is exempt from consent, no banner is shown. You can nonetheless object at any time by configuring your browser to block or delete cookies, without affecting your access to the site.

Recipients and sub-processors

  • Scalingo: hosting of the site and the Hirify application (France, Paris region).
  • PostHog: audience measurement (EU, Frankfurt).
  • HubSpot: booking and sales follow-up (EU).

Your data is neither sold nor transferred outside the European Union.

Security

Hirify implements appropriate technical and organizational measures: hosting in France (Scalingo, osc-fr1 region), encryption of data in transit, access control and logging.

Automated decision-making

No decision producing legal effects or similarly significantly affecting you is made by automated means about site visitors. For the candidate talent pool processed within the platform (where Hirify is a processor), the tool provides decision support (interview summaries, search across the base), with no percentage scoring and with explainable reasoning; the final decision remains human and rests with the recruiter. Informing candidates under Articles 13, 14 and 22 of the GDPR is the responsibility of the client controller.

Your rights

You have the rights of access, rectification, erasure, restriction of processing, objection and portability, as well as the right to withdraw your consent at any time for processing that relies on it (without affecting the lawfulness of processing already carried out) and the right to set instructions regarding the fate of your data after your death.

To exercise these rights, write to rgpd@hirify.fr. We respond within one month (extendable by two months if necessary). Exercising your rights is free of charge; proof of identity may be requested in the event of reasonable doubt.

If you believe your rights are not being respected, you may lodge a complaint with the French supervisory authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr).