Privacy
What this site and the product collect, and how candidate data is handled.
DraftThis is an early-stage draft written by the team, not reviewed by counsel. It will be replaced before the product is generally available. If you are relying on it for a procurement decision, ask us first.
// 001
Creating an account
Creating an account collects your name, email address, and a hashed password — we never store your password itself. Creating an organization stores its name and the settings you configure.
Signing in issues a session cookie that identifies your account and organization. It is not shared with third parties.
// 002
What this website collects outside the product
There is no analytics script, no advertising pixel, and no third-party tracker on any page.
The theme switch stores one value in your browser's local storage so the page does not flash the wrong background on your next visit. It is not sent anywhere and it identifies nothing.
The contact form on this site is not connected to an inbox yet; submitting it does not send or store anything, and it says so at the point of submission.
// 003
Candidate data in the product
Candidate documents and details are stored for the organization that received the application and are scoped to that organization at the data layer — every query is checked against your session, not passed in from the client.
During the beta, uploaded documents are stored on the application server. Cloud storage is planned but not yet available.
Access within an organization is controlled by role, and meaningful actions on candidate records are recorded in the audit log.
// 004
Server logs
This site is served by a hosting provider that records ordinary request logs, including IP address and user agent. We do not add to those logs and do not use them to build a profile of you.
// 005
What is not decided yet
Sub-processors, retention periods, data residency, and a formal data processing agreement are not finalised. If your organization needs these details before using YoHe with real candidate data, contact us first.
// 006
Reaching us
We do not publish a dedicated privacy inbox yet. Use the contact page and mark your message as a privacy request; we read everything that comes through it.
Also read Terms