Privacy Policy

Last updated 17 September 2026

This policy explains how Hamid Soheili, doing business as Soheili Labs ("we") handles personal data in RecruitHelper, a structured candidate screening service for recruiting teams. It covers both the recruiting organizations who subscribe to RecruitHelper and the candidates they invite to complete a screening.

Our two roles

RecruitHelper handles personal data in two distinct capacities, and your rights differ depending on which applies.

• We are the controller for the account data of the recruiting organizations that subscribe to the service — the people who sign in, their organization, and their billing relationship with us.
• We are a processor for candidate data. When a recruiting organization invites a candidate, that organization decides what to ask, why, and how long to keep it. We process that data on their instructions. Candidates exercising their rights over screening data should contact the recruiting organization that invited them; we will assist that organization in responding.

Data we collect

From recruiting organizations

• Account details: name, email address, and a password that we store only as a salted scrypt hash.
• Organization details: company name, optional logo, brand color, and support email address.
• Team structure: which people belong to the organization and the role assigned to each.
• Billing details: subscription status, customer and subscription identifiers, and billing email. Card details are entered directly with Stripe and never reach our servers.
• Content you create: jobs, screening questions, candidate records, notes, decisions, and pipeline history.

From candidates

• Identifying details supplied by the recruiter who invited you: your name and email address.
• The answers you write in response to the screening questions.
• Resume text, where a recruiter imports a resume document into your candidate record.
• Assessment data recorded by the recruiter about you: stage, notes, tags, and decisions.

How we use it

We use personal data to operate the service: authenticating users, delivering screening invitations, storing and displaying responses, running the hiring pipeline, taking subscription payments, sending transactional email such as password resets, and keeping the service secure and available.

We do not sell personal data. We do not share it with advertisers. We do not use candidate screening responses to train machine learning models. RecruitHelper does not score, rank, or automatically reject candidates — hiring decisions are made by the recruiter, not by this software.

Cookies and local storage

We set only strictly necessary cookies. These are the signed, HTTP-only session cookies that keep a signed-in user authenticated; they expire after 12 hours. We do not use advertising cookies and we do not track anyone across other websites.

We may measure visits to our public marketing pages — the home page, pricing, demo request, and these legal pages — using a privacy-focused analytics service that counts page views without cookies and without building a profile of you. That measurement never runs on the candidate screening page or anywhere inside a recruiter's workspace: candidates and signed-in users are not counted.

On the candidate screening page, draft answers are saved in your own browser's local storage so that you do not lose work in progress. That draft never leaves your device until you submit the screening, and you can clear it by clearing your browser data.

Service providers

We share personal data with a small number of providers who process it on our behalf:

• Stripe — subscription payments and billing management.
• Resend — delivery of transactional email such as password resets, account setup links, and workspace notices.
• Our hosting infrastructure — the private server and database that run the service.

We may also disclose data where we are legally required to, or to establish, exercise, or defend legal claims.

Where data is stored

Application data is held in a PostgreSQL database on a private server, reachable only through our application. Traffic is encrypted in transit with TLS. We take daily database backups and retain them for 14 days.

How long we keep it

• Candidate records are kept until the recruiting organization deletes them. Recruiters can permanently delete a candidate and their screening data at any time.
• When an organization closes its workspace, its data is retained for 30 days so that the closure can be reversed, and is then deleted.
• Password reset links expire one hour after they are issued.
• We keep the minimum billing records we need to meet tax and accounting obligations.

Security

We protect accounts with salted scrypt password hashing, signed and expiring sessions, protection against cross-site request forgery, and strict separation between organizations so that one customer's recruiting data is never reachable from another's. Candidate screening links use high-entropy random tokens, expose no internal record identifiers, and can be expired or revoked by the recruiter. No system is perfectly secure, but we treat access to candidate data as the most sensitive thing we hold.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, and to object to or restrict how it is used.

• If you are a candidate, the recruiting organization that invited you decides how your screening data is used. Please direct your request to them. If you are not sure who to contact, write to us and we will identify the organization and pass your request on.
• If you are a subscriber, you can export your organization's data and close your workspace from Company Settings, or contact us for help.

Children

RecruitHelper is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

If we make a material change to this policy we will update the date above and notify subscribing organizations by email before the change takes effect.

Contact

Privacy questions and data rights requests: privacy@soheililabs.com.

Recruiting organizations processing candidate data through RecruitHelper are covered by our Data Processing Agreement, which applies automatically to every subscription. Write to the address above if you need a signed copy.