You have rights over your personal data under India’s Digital Personal Data Protection Act, 2023 and, where they apply to you, the EU and UK GDPR and other laws. This page explains how to use them on SuprHiro. Our Privacy Policy explains what we collect and why.
1. Your rights
- Access — know what personal data is held about you and how it is used.
- Correction — fix data that is wrong, and complete data that is missing.
- Erasure — have your data deleted when it is no longer needed or you withdraw consent.
- Withdraw consent — at any time, for processing based on consent. This does not undo processing that already happened.
- Human review — ask a person to review a decision made about you by an automated process.
- Portability and objection — where the GDPR applies, receive your data in a usable format, and object to or restrict some processing.
- Nomination — nominate someone to exercise your rights if you die or become unable to.
- Grievance — complain to us, and then to the Data Protection Board of India or your data protection authority.
2. Who to ask
Who handles your request depends on your relationship with SuprHiro:
| You are | Who is responsible | Where to go |
|---|---|---|
| A candidate or new hire | The company you applied to or are joining | Contact that company first. If you cannot reach them, write to us and we will pass your request on within 2 business days and help them respond. |
| A user of a SuprHiro workspace | Your employer for workspace data; SuprHiro for your account | Ask your workspace admin, or write to us about your account. |
| A website visitor | SuprHiro | Write to us. |
3. What you can do yourself
- Candidates can sign in to the candidate portal with a one-time link sent to their email to see the status of their applications and interviews, and to update their location and work preferences.
- Users can update their notification settings, and disconnect a connected Google or Microsoft calendar, from Settings.
- Workspace admins can export candidate data from the Exports page and archive candidates.
- Analytics cookies can be blocked in your browser — see the Cookie Policy.
4. How to make a request
Email hiring@supahiro.co from the email address we hold for you, and tell us:
- which right you want to use;
- whether you are a candidate, new hire, user or visitor — and, if a candidate, which company you applied to;
- anything that helps us find your data, such as the job title and roughly when you applied.
To protect you, we may ask you to confirm your identity before acting — usually by replying from the email address on file. We will not ask for more than we need. Someone can make a request on your behalf if they show us they are authorised to.
5. Timelines
- We acknowledge requests within 48 hours.
- We respond within 30 days. If a request is complex we will tell you why, and when to expect an answer.
- There is no charge, unless a request is clearly unfounded or repetitive.
6. What erasure does
When a candidate is erased, their name, email, phone, links, pay details and resume text are removed, and their files, messages, call and interview transcripts, notes, feedback and scorecards are deleted. The record that an application existed is kept, anonymised, so the company’s hiring numbers stay accurate. Once erased, the candidate portal can no longer be used with that email and automations skip the record.
7. Stopping messages and calls
To stop receiving emails, WhatsApp messages or calls about a role, reply to the message asking the company to stop, or email hiring@supahiro.co and we will pass your request to the company. You can end an AI call at any time.
8. If you are not satisfied
Contact our Grievance Officer at hiring@supahiro.co. If you are still not satisfied, you can complain to the Data Protection Board of India or, if you are in the EU or UK, your local data protection authority.