GDPR & Data Rights

If you are in the European Economic Area, the UK, or a jurisdiction with similar data- protection law, you have specific rights over your personal data. This page explains those rights and how to exercise them. It complements our Privacy Policy.

Controller

Hyrrd Labs is the data controller for personal data processed through the platform. For candidate data used in a specific hiring process, the hiring company may act as an independent or joint controller. You can reach our data-protection contact at privacy@hyrrd.tech.

Your rights

• Access: obtain a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data (“right to be forgotten”).
• Portability: receive your data in a structured, machine-readable format.
• Restriction & objection: limit or object to certain processing, including processing based on legitimate interests.
• Withdraw consent: where processing relies on consent (e.g. connecting GitHub), withdraw it at any time without affecting prior processing.
• Automated decisions: match scores are decision-support tools, not solely automated decisions with legal effect. You may request human review of any hiring-related concern.

How to exercise your rights

Self-service

Signed-in users can export or delete their data directly from account settings. Export produces a machine-readable copy of your profile and associated records; deletion removes or irreversibly anonymizes your personal data.

By request

Email privacy@hyrrd.tech with your request. We will verify your identity and respond within 30 days (extendable where legally permitted for complex requests). We do not charge a fee for reasonable requests.

Retention

We keep personal data only as long as needed for the purposes described in our Privacy Policy, after which it is deleted or anonymized. Deletion requests are honored within 30 days, subject to limited legal or security retention.

International transfers

Some subprocessors operate outside the EEA/UK. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses. A current list of subprocessors is available on request.

Complaints

We hope to resolve any concern directly. You also have the right to lodge a complaint with your local supervisory authority (for example, in the EEA, your national data-protection authority; in the UK, the ICO).