HYREMYND AI INC.

1. Introduction

HyreMynd AI Inc. ("HyreMynd," "we," "us," or "our") is committed to protecting the privacy and security of personal information. This Privacy Policy describes how we collect, use, disclose, retain, and safeguard personal information through our AI-powered psychometric assessment platform (the "Services").

This Privacy Policy applies to job candidates and applicants ("Candidates"), enterprise customers and their authorized users ("Enterprise Customers"), and visitors to our website and platform ("Visitors").

HyreMynd AI Inc. is incorporated under the laws of Ontario, Canada, with its principal place of business in Toronto, Ontario. We operate in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, Quebec's Act respecting the protection of personal information in the private sector as amended by Law 25 (Loi 25), and applicable United States state privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

2. Definitions

"Personal Information" means any information about an identifiable individual, including factual or subjective information, recorded or not.

"Sensitive Personal Information" means personal information that reveals racial or ethnic origin, religious beliefs, genetic data, biometric data processed for identification purposes, or health information.

"Assessment Data" means information generated through your completion of psychometric assessments, including behavioral trait indices, cognitive patterns, and assessment scores.

"Automated Decision-Making Technology (ADMT)" means any technology that processes personal information and uses computation to assist in or influence human decision-making.

3. Information We Collect

3.1 Candidate Personal Information

We collect the following categories of personal information from Candidates:

• Account Information: Full name, email address, phone number, and login credentials
• Professional Information: Resume/CV content, employment history, educational background, skills, certifications, and professional qualifications
• Assessment Data: Responses to psychometric assessments, behavioral indices (ODI, API, RCI, AII, SDI, RRI), cognitive trait profiles, and assessment scores
• Technical Data: IP address, device type, browser information, operating system, session duration, and platform interaction data
• Communication Data: Records of communications with our support team

3.2 Enterprise Customer Information

• Business contact information (name, title, company, email, phone)
• Billing and payment information
• Account administrator credentials
• Service usage and configuration data

3.3 Website Visitor Information

• Cookies and similar tracking technologies
• Website analytics data
• Contact form submissions

3.4 Information from Third-Party Integrations

HyreMynd integrates with third-party platforms and services via application programming interfaces (APIs) to enhance our Services. When you connect your accounts or authorize access, we may collect information from the following sources:

• LinkedIn: Professional profile information, employment history, education, skills, endorsements, and professional network data (with your authorization)
• Calendly: Scheduling information, appointment details, availability data, and calendar integration data for interview coordination
• Other Third-Party Services: We may integrate with additional platforms including applicant tracking systems (ATS), human resource information systems (HRIS), job boards, and other recruitment or productivity tools

Information collected through third-party integrations is governed by this Privacy Policy. You may revoke API access at any time through your account settings or by contacting us. Please also review the privacy policies of connected third-party services, as their data practices are governed by their own policies.

3.5 Future Data Collection

HyreMynd may in the future collect biometric data (such as voice analysis or facial recognition data) as part of enhanced assessment features. Should we implement such features, we will update this Privacy Policy accordingly, obtain appropriate consent, and provide you with specific notice prior to any such collection.

4. How We Use Your Information

4.1 Primary Purposes

• Service Delivery: To provide, operate, and maintain our psychometric assessment platform
• Assessment Generation: To analyze your assessment responses and generate behavioral trait profiles and scores
• Employer Sharing: To share your assessment results with prospective employers who have engaged our Services
• Account Management: To manage your account and provide customer support
• Resume Analysis: To utilize AI-powered tools to analyze resume content for matching purposes

4.2 Secondary Purposes

• Platform Improvement: To improve and optimize our Services, including algorithm refinement
• Research and Development: To conduct research using de-identified or aggregated data
• AI Model Training: To train and improve our AI models using de-identified data that cannot be used to identify you (see Section 7)
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To detect, prevent, and address fraud, security breaches, and technical issues

5. Use of Artificial Intelligence and Automated Decision-Making

5.1 How We Use AI

HyreMynd utilizes artificial intelligence and machine learning technologies to analyze assessment responses and resume content, generate behavioral trait profiles and indices, provide insights to Enterprise Customers, and match candidate profiles to job requirements.

5.2 Human Oversight

Important: HyreMynd's AI technology provides assessment scores and recommendations to assist hiring decisions. However, the final decision regarding any employment matter rests solely with the Enterprise Customer (the prospective employer). HyreMynd does not make hiring, rejection, or other employment decisions. Our AI outputs are designed to inform and support human decision-makers, not replace them.

5.3 Your Rights Regarding ADMT

Depending on your jurisdiction, you may have the right to request information about the logic involved in automated processing, to obtain a meaningful explanation of how AI-generated scores were determined, and to request human review of automated decisions that significantly affect you. To exercise these rights, contact us at [email protected].

5.4 Quebec Law 25 — Automated Decision-Making Notification

In accordance with Quebec Law 25, we hereby inform you that decisions regarding your assessment results are based in part on automated processing of your personal information. Our AI technology analyzes your assessment responses and generates behavioral trait profiles and scores. You have the right to be informed about such automated processing and, upon request, to have a human review any decision that significantly affects you. The final employment decision always rests with the prospective employer, not with HyreMynd's automated systems.

5.5 Proprietary Technology and Intellectual Property

The HyreMynd assessment engine, including its algorithms, methodologies, behavioral indices, and scoring systems, constitutes proprietary technology that is patent pending with the Canadian Intellectual Property Office (Application No. 3293113, filing date: November 16, 2025). During the 18-month patent pending period and thereafter, HyreMynd reserves the right to protect its intellectual property by limiting disclosure of trade secrets, proprietary algorithms, and confidential business information. Requests for information regarding AI logic and decision-making factors will be fulfilled to the extent required by applicable law, provided that such disclosure does not compromise our proprietary technology, trade secrets, or intellectual property rights.

6. Disclosure of Information

6.1 Disclosure to Enterprise Customers

When you complete an assessment through our platform, your assessment results, behavioral trait indices, and resume analysis (if applicable) will be shared with the Enterprise Customer who invited you to complete the assessment or with whom you have applied. Enterprise Customers use this information to evaluate your candidacy for employment opportunities.

6.2 Service Providers

We may share personal information with trusted third-party service providers who assist us in operating our platform, including cloud hosting providers, payment processors, customer support tools, and analytics services. These providers are contractually obligated to protect your information and may only use it for the purposes we specify.

6.3 Third-Party Platform Integrations

When you authorize connections to third-party platforms (such as LinkedIn, Calendly, or other integrated services), data may flow between HyreMynd and these platforms as necessary to provide the integrated functionality. This includes importing professional profile data from LinkedIn to supplement your candidate profile, sharing scheduling availability with Calendly for interview coordination, and exchanging data with applicant tracking systems and HRIS platforms used by Enterprise Customers. You control which integrations are active and may disconnect them at any time.

6.4 Legal Requirements

We may disclose personal information when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect the rights, property, or safety of HyreMynd, our users, or others.

6.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, personal information may be transferred to the successor entity, subject to the commitments made in this Privacy Policy.

7. Data Retention

7.1 Retention Period

We retain your personal information for as long as you maintain an active account with HyreMynd, plus three (3) years following account termination or your last interaction with our Services. This retention period allows for potential re-engagement with prospective employers and compliance with legal obligations.

7.2 De-Identified Data for AI Training

Upon your request to delete your personal information, we will remove all data that could be used to identify you. However, de-identified and aggregated data derived from your assessment responses—which cannot reasonably be used to identify you—may be retained and used to train and improve our AI models. This de-identified data contributes to enhancing the accuracy and fairness of our assessment algorithms for the benefit of all users.

7.3 Enterprise Customer Data

Enterprise Customer data is retained in accordance with our service agreements and applicable data retention requirements.

8. Your Privacy Rights

8.1 Rights Under PIPEDA (Canada)

• Right of Access: You may request access to the personal information we hold about you
• Right to Correction: You may request correction of inaccurate or incomplete personal information
• Right to Withdraw Consent: You may withdraw consent to processing, subject to legal or contractual restrictions
• Right to Complain: You may file a complaint with the Office of the Privacy Commissioner of Canada

8.2 Rights Under CCPA/CPRA (California Residents)

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions
• Right to Correct: You may request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: HyreMynd does not sell personal information. Sharing with Enterprise Customers is performed pursuant to your consent
• Right to Limit Use of Sensitive Personal Information: You may limit the use of sensitive personal information to specified purposes
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

8.3 Rights Under Quebec Law 25 (Quebec Residents)

If you are a resident of Quebec, you have the following rights under the Act respecting the protection of personal information in the private sector, as amended by Law 25:

• Right to Access: You may request access to the personal information we hold about you
• Right to Rectification: You may request correction of inaccurate or incomplete personal information
• Right to Erasure (Right to be Forgotten): You may request the deletion or anonymization of your personal information
• Right to De-Indexation: You may request that we cease disseminating your personal information or de-index any hyperlink attached to your name, where such dissemination contravenes the law or a court order
• Right to Data Portability: You may request your personal information in a structured, commonly used technological format, and have it transmitted to another organization
• Right to Object to Automated Decision-Making: You have the right to be informed when a decision is based exclusively on automated processing of your personal information, and to request human intervention in such decisions
• Right to Withdraw Consent: You may withdraw your consent at any time, subject to legal or contractual restrictions
• Right to Complain: You may file a complaint with the Commission d'accès à l'information du Québec (CAI)

8.4 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within the timeframes required by applicable law (generally 30 days under PIPEDA; 45 days under CCPA).

9. Cross-Border Data Transfers

HyreMynd operates in North America, and personal information may be transferred to, stored, and processed in Canada and the United States. When personal information is transferred outside of your jurisdiction of residence, we ensure appropriate safeguards are in place, including contractual protections with service providers, compliance with applicable cross-border transfer requirements, and maintaining security standards equivalent to those in your home jurisdiction.

10. Data Security

We implement industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption of data in transit and at rest, secure access controls and authentication protocols, regular security assessments and vulnerability testing, and employee training on data protection practices. While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

11. Age Requirements

Our Services are intended for individuals who are at least 18 years of age, or the age of majority in their jurisdiction of residence if higher. We do not knowingly collect personal information from individuals under these age thresholds. If we become aware that we have collected personal information from a minor, we will take steps to delete such information promptly.

Quebec Residents: In accordance with Law 25, for individuals under 14 years of age, consent must be obtained from a parent or legal guardian. However, as our Services are employment-related assessments, they are not intended for use by individuals under 18 years of age.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website with a new effective date, sending email notification to registered users, and, where required by law, obtaining your consent. We encourage you to review this Privacy Policy periodically.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:

14. Complaints

If you are not satisfied with our response to your privacy concern, you may file a complaint with the applicable regulatory authority: