Privacy Policy

TitoHR ("we", "our", or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our HR management platform.

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Organization and employee profile data
• Employment records, salary information, and contract details
• Documents uploaded to the platform (resumes, contracts, general documents)
• Goals and assessment data
• Usage data and analytics

We use the information we collect to:

• Provide, maintain, and improve our HR management services
• Process and manage employee records within your organization
• Enable collaboration features such as goal sharing and team visibility
• Generate AI-powered summaries and insights (e.g., resume summarization, contract term extraction)
• Send service-related communications
• Ensure platform security and prevent unauthorized access

We implement industry-standard security measures to protect your data. All data is encrypted in transit and at rest. We use Row Level Security (RLS) policies to ensure strict data isolation between organizations, so your data is never accessible to other tenants on our platform.

We do not sell your personal information. We may share your data only in the following circumstances:

• With your organization's authorized administrators as part of the HR management functionality
• With third-party service providers that help us operate our platform (e.g., hosting, AI processing)
• When required by law or to respond to legal process
• To protect the rights, safety, or property of TitoHR, our users, or the public

We retain your data for as long as your account is active or as needed to provide our services. When an organization terminates its account, we will delete all associated data within 90 days, unless retention is required by law.

If you were invited to answer an assessment or survey, the organization that invited you — your employer, or the client company on whose behalf a consultant runs it — decides why and how your answers are used. Under data protection law that organization is the data controller. TitoHR is the data processor: we store and process your answers on that organization’s behalf, on its instructions, and we do not use them for our own purposes or sell them.

Before you answer, you are shown a notice naming that organization, and your acknowledgement is recorded. Requests to access, correct or delete your answers go to the controller, and we assist it in fulfilling them. Anonymous surveys are stored without your name and cannot be traced back to you. Analysis is AI-assisted; results are recommendations that people review, never automatic decisions about you.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for optional data processing

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

If you have any questions about this Privacy Policy, please contact us at privacy@titohr.com.