Privacy Policy

FluxHire.AI Pty Ltd (trading as "FluxHire.AI", "we", "us" or "our") is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, process and protect your personal information when you use our AI-powered recruitment platform and related services (the "Services").

FluxHire.AI Pty Ltd is an Australian-incorporated entity headquartered in Sydney, NSW. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs)issued by the Office of the Australian Information Commissioner (OAIC). For visitors and customers in the European Union or United Kingdom, we additionally honour rights and obligations equivalent to those provided under the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, where those laws apply to our processing.

Personal Information You Provide

• Contact details (name, email address, telephone number, job title, company name)
• Account credentials and authentication information
• Profile information and preferences
• Communications and correspondence with us
• Recruitment and candidate data you upload or process through our Services
• Payment and billing information (processed by third-party payment processors)
• Any other information you choose to provide

Information We Collect Automatically

For the public early-access form, we store the six details you submit, not raw IP addresses or browser user-agent strings in the application record. The abuse-protection service uses keyed hashes of the email address and trusted client IP to limit attempts. Necessary hosting and security logs are separate from website and platform analytics. Do not include candidate information or other sensitive details in the application.

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, features used)
• Location information (based on IP address)
• Cookies and similar tracking technologies
• Log files and system activity
• Performance and analytics data

Information from Third Parties

• Data from recruitment platforms and integrations (with your consent)
• Social media platforms (where you grant permission)
• Business contact databases and verification services
• Analytics and marketing partners

In line with APP 6 (Use or disclosure of personal information), we use your personal information only for the purposes for which it was collected or for a directly related secondary purpose you would reasonably expect:

We may share your personal information in the following circumstances:

Candidate and customer personal information is hosted on Australian infrastructure by default. Where we engage offshore service providers (for example, transactional email or model inference), we comply with APP 8 (Cross-border disclosure of personal information) by:

• Taking reasonable steps to ensure the overseas recipient does not breach the APPs
• Disclosing the country of recipient before transfer where practicable
• Using contractual safeguards equivalent to Australian standards
• Obtaining your consent where the APPs require it (APP 8.2(b))

We retain your personal information for as long as necessary to:

• Provide our Services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Fulfil legitimate business purposes

Specific retention periods vary based on data type and purpose, typically ranging from 3-7 years for business records, or until account deletion for user-generated content.

Our Google Analytics Standard property retains event-level and user-level analytics data for 14 months. Its reset-on-activity setting restarts the period for a user identifier when new activity occurs; event-level expiry remains based on the event date. This is therefore not a fixed deletion deadline for an active user identifier, and aggregated reporting may not be governed by the same control.

The Australian Privacy Principles give you the following rights over the personal information we hold about you:

To exercise any of these rights, contact our Privacy Officer using the details below. We will respond within thirty (30) days of receiving your verified request, in line with the OAIC's guidance.

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption in transit and at rest using industry-standard protocols
• Access controls and authentication mechanisms
• Regular security assessments and penetration testing
• Employee training on data protection and security
• Incident response and breach notification procedures

No SOC 2, ISO 27001 or other certification is claimed. Our security overview explains how to request current evidence for the controls relevant to your review.

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and you transmit information at your own risk.

Essential storage supports security and platform functionality. We also use Google Analytics, provided by Google LLC, to understand how our website and platform are used so we can improve them. Google may process this information on servers outside Australia, including in the United States.

• In Australia and most countries, analytics cookies are on by default. You can opt out at any time
• In the European Economic Area, the United Kingdom and Switzerland, analytics cookies stay off until you accept them. Without cookies, Google Analytics receives limited, cookieless signals that it uses to estimate overall traffic
• Analytics run on our public website and in the signed-in platform. They do not run on authentication, invitation, unsubscribe or API routes
• Page locations exclude query strings and fragments, except standard campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content). In the platform, record identifiers are replaced with placeholders, so pages are reported as, for example, /candidates/:id
• For signed-in users we send a pseudonymous, one-way hashed user identifier together with your role and division. We never send names, email addresses, phone numbers, search text or the content of candidate, contact or company records
• Advertising storage, advertising user data, advertising personalisation and Google Signals are disabled. We do not use analytics data for advertising
• A first-party cookie records only whether your region requires prior consent. It does not store your country or IP address

Use the Cookie preferences link in the website footer to accept or opt out at any time. We remember your choice for 180 days. Opting out removes accessible first-party Google Analytics cookies from our site and stops new analytics cookies being set. It does not retrospectively delete data already processed. You can also block or delete cookies in your browser settings.

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the effective date above. Your continued use of our Services constitutes acceptance of the updated policy.