VarahiHire Privacy Policy

Google user data (Gmail)

Recruiters can connect their organisation’s Gmail so that resumes sent by email are imported into VarahiHire (“Import from Gmail”). This section describes exactly what VarahiHire does with data it receives from Google.

Access we request

VarahiHire requests read-only access to Gmail (the gmail.readonly scope). With this access we cannot send, change or delete email. Recruiters sign in on Google’s own page; we never see the Gmail password.

What we read

We search the connected mailbox for emails that carry PDF or Word attachments. Sent mail, drafts and chats are excluded. For each such email we read the sender’s name and address, the subject, the date, and the names and sizes of the attachments, to decide whether an attachment is a resume. We download only the PDF and Word (.docx) attachments that are imported as resumes. We do not store email bodies.

What we store

• An encrypted Google refresh token. The encryption key is kept separately from the database.
• A record of each attachment found: sender, subject, date, file name, size and import status.
• The imported resume files, and the candidate profile extracted from them, inside the customer’s own VarahiHire account.

How we use it

Only to import resumes into the customer’s own VarahiHire account and to screen them for that customer’s jobs. Imported resumes are read by an AI service provider that we use to extract the resume details and score them against the job.

What we never do

• We do not sell Gmail data.
• We do not use Gmail data for advertising.
• We do not use Gmail data to train or improve generalised AI or machine-learning models.
• We do not let people read Gmail data, except the customer’s own staff in their own account; or with the user’s permission; or where needed for security investigations; or where the law requires it.

Sharing

We share Gmail data only with service providers that host and process data on our behalf for this purpose — hosting, and the AI service that reads resumes — and never otherwise.

Disconnecting and deletion

“Disconnect” in VarahiHire revokes our access at Google immediately, stops importing, and deletes the stored token and the records of attachments that were not imported. Resumes already imported stay in the customer’s account as candidate records until the customer deletes them.

You can also remove VarahiHire’s access at any time from your Google Account at https://myaccount.google.com/permissions. To ask us to delete data, write to hello@varahitechnologies.com.

Limited Use

VarahiHire's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.