Privacy Policy

Last updated: April 2026

This Privacy Policy describes how NadeemHR collects, uses, and protects your personal information when you use our AI-powered recruitment platform.

1Information We Collect

We collect information you provide directly to us when you create an account, use our services, or communicate with us. This includes: • Account information: name, email address, password, phone number, and company details. • Profile data: job titles, department information, and professional preferences. • Recruitment data: job postings, candidate information, CV content, interview transcripts, and assessment results you upload or generate using our platform. • Usage data: how you interact with our platform, features you use, and actions you take. • Device and technical data: IP address, browser type, operating system, and cookies.

2How We Use Your Information

We use the information we collect to: • Provide, maintain, and improve our recruitment platform and AI services. • Process and evaluate job applications and candidate assessments. • Personalize your experience and deliver AI-powered insights through Layla, our AI HR Director. • Send you technical notices, updates, security alerts, and support messages. • Respond to your comments, questions, and customer service requests. • Monitor and analyze usage trends to improve our platform. • Detect, investigate, and prevent fraudulent transactions and other illegal activities. • Comply with legal obligations.

3Data Isolation & Multi-Tenancy

NadeemHR operates as a multi-tenant platform. Each organization has its own isolated workspace. We enforce Row-Level Security (RLS) at the database level to ensure: • Your organization's data is completely separated from other organizations. • No organization can access, view, or modify another organization's data. • Candidate information, job postings, and assessments are strictly scoped to your workspace. Our security architecture has been reviewed and tested to ensure this isolation is enforced at all levels.

4AI & Automated Processing

NadeemHR uses artificial intelligence to assist in recruitment decisions. Our AI system (Layla) evaluates candidates across 7 professional dimensions. Important disclosures: • AI assessments are recommendations only and do not constitute final employment decisions. • Human recruiters retain full control over all hiring decisions. • AI scores are generated based on professional qualifications and job requirements, not personal characteristics protected by law. • You have the right to request human review of any AI-generated assessment. • We do not use sensitive personal data (race, religion, gender, nationality) in AI scoring models.

5Data Sharing & Third Parties

We do not sell your personal data. We may share information with: • Service providers: companies that perform services on our behalf (cloud hosting, email delivery, analytics). • AI providers: we use Anthropic's Claude models to power Layla. Candidate data submitted for assessment may be processed by these models under strict data processing agreements. • LinkedIn/Unipile: for candidate sourcing via LinkedIn search with your explicit authorization. • Legal authorities: if required by law, court order, or governmental authority. All third-party providers are contractually required to protect your data and use it only for the specified purpose.

6Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically: • Account data: retained until account deletion plus 30 days. • Candidate data: retained for the duration of the recruitment process plus 12 months, unless you request earlier deletion. • AI session memory: Layla's session memory per candidate is retained for 90 days after last interaction. • Backup data: retained for 30 days then automatically deleted. You may request deletion of your data at any time by contacting support@nadeemhr.com.

7Your Rights

Depending on your location, you may have the following rights regarding your personal data: • Access: request a copy of the personal data we hold about you. • Correction: request correction of inaccurate or incomplete data. • Deletion: request deletion of your personal data ("right to be forgotten"). • Portability: receive your data in a machine-readable format. • Objection: object to automated decision-making or AI-based assessments. • Withdrawal of consent: withdraw consent for data processing at any time. To exercise any of these rights, contact us at support@nadeemhr.com.

8Security

We implement industry-standard security measures to protect your data including: • TLS/HTTPS encryption for all data in transit. • AES-256 encryption for sensitive data at rest. • Row-Level Security (RLS) enforced at the database level. • Regular automated backups stored in Google Cloud Storage. • Access controls and authentication requirements for all team members. • Security incident response procedures. No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we commit to notifying affected users within 72 hours of a confirmed breach.

9Cookies

We use cookies and similar tracking technologies to: • Maintain your session and keep you logged in. • Remember your language preference. • Analyze platform usage and improve performance. You can control cookie settings through your browser preferences. Disabling certain cookies may affect platform functionality.

10Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: Email: support@nadeemhr.com Website: nadeemhr.com We will respond to all privacy-related inquiries within 5 business days.

Questions about your privacy?

support@nadeemhr.com