Privacy Policy

We collect information you provide directly to us and information generated as you use the platform.

1.1 Account & Profile Information

• Full name, email address, and password (hashed — never stored in plain text)
• Phone number (candidates and recruiters)
• Profile photo (uploaded voluntarily)
• Candidates: work experience, education, skills, preferred roles, salary expectations, CV/resume documents
• Recruiters: company name, company website, LinkedIn profile, job titles posted, subscription tier

1.2 Usage Information

• Pages visited, features used, and time spent on the platform
• Job searches, applications submitted, and candidates viewed
• Messages sent between candidates and recruiters
• Device type, browser, IP address, and general location (country/state)

1.3 OAuth / Third-Party Sign-In

If you sign in via Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.

We use your information to:

• Create and manage your account
• Match candidates to relevant job postings using our AI matching engine
• Enable recruiters to discover and contact suitable candidates
• Deliver in-platform notifications (application updates, new messages, job matches)
• Send transactional emails (email verification, password resets, interview reminders)
• Prevent fraud, abuse, and unauthorised access
• Comply with applicable Nigerian laws and regulations
• Improve platform features through anonymised, aggregated analytics

We do not sell your personal data to third parties. We do not use your data for advertising on external platforms.

We share your information only in these circumstances:

3.1 Between Candidates and Recruiters

When you apply for a job or a recruiter contacts you, relevant profile information (name, skills, experience, profile photo) is shared with the other party. Sensitive details such as your exact address or national ID are never shared automatically.

3.2 Service Providers

We use trusted third-party services to operate the platform:

• Cloudinary — secure image and file storage
• MongoDB Atlas — encrypted cloud database
• Google OAuth — optional third-party authentication
• Gmail SMTP — transactional email delivery

These providers are contractually bound to process your data only as instructed by GoHire.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process (court order, regulatory request).

We implement industry-standard measures to protect your data:

• All data in transit is encrypted via HTTPS/TLS
• Passwords are hashed using bcrypt (never stored in plain text)
• Authentication tokens are stored as HTTP-only, Secure cookies
• Access to production databases is restricted to authorised personnel
• Rate limiting protects against brute-force attacks

No system is 100% secure. If you suspect your account has been compromised, contact us immediately at gohire@immersiavr.com.

We retain your personal data for as long as your account is active or as necessary to provide services. Specifically:

• Account data is retained until you request deletion or your account has been inactive for 24 months
• Application records are retained for 12 months after a job closes
• Messages are retained for 6 months after a conversation ends
• Anonymised analytics data may be retained indefinitely

You may request deletion of your account and personal data at any time (see Section 7).

We use the following cookies:

We do not use advertising or tracking cookies. You can clear cookies in your browser settings at any time, though this will sign you out.

Under the Nigeria Data Protection Act (NDPA) 2023, you have the following rights:

• Access — request a copy of the data we hold about you
• Correction — update inaccurate or incomplete data
• Deletion — request erasure of your personal data
• Portability — receive your data in a machine-readable format
• Objection — object to processing in certain circumstances
• Withdraw consent — where processing is based on consent

To exercise any of these rights, email gohire@immersiavr.com from the address associated with your account. We will respond within 30 days.

GoHire is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered on our platform, please contact us and we will promptly delete the account.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by a prominent notice on the platform at least 14 days before the change takes effect. Your continued use of GoHire after the effective date constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out: