Last updated: 9 September 2026
HireFlow AI (“HireFlow”, “we”, “us” or “our”) is operated by Bradley Jones trading as HireFlow AI. We provide software for employers and recruitment agencies to review and prioritise candidate CVs against a job description.
Our website is hireflow.london. For privacy questions or data requests, contact bradley@hireflow.london.
For account, billing and service-operation data, HireFlow determines how it operates the service. When a recruiter or employer uploads candidate information, that organisation may be the controller of the candidate data and HireFlow generally processes it to provide the requested screening service. Recruiters and employers must give candidates any required notices and have the authority and lawful basis needed to upload and process their information.
HireFlow currently extracts text from PDF, DOCX and TXT files in the browser. The extracted job description and CV text are sent to our AI service provider, OpenAI, to produce a screening score, category and written reasons. The screening result is saved in the recruiter's HireFlow workspace so it can be reviewed, shortlisted, placed in a pipeline and exported.
HireFlow is an assistance and prioritisation tool. AI output can be incomplete or wrong and must be reviewed by a suitably qualified human. Do not upload information you are not authorised to process, and consider whether a CV contains sensitive or special-category information before using the service.
The applicable legal basis depends on the context and the parties involved. Common bases include performing a contract, legitimate interests in operating and securing the service, legal obligations, and consent for optional advertising or analytics storage. This policy is not a substitute for a recruiter's own candidate-data assessment.
We do not sell personal data. We use service providers where needed to operate HireFlow, including:
These providers may process information in countries outside the UK. The relevant provider's terms and safeguards apply to that processing. We do not claim that every provider or transfer is suitable for every recruitment use case; users remain responsible for their own controller and vendor assessments.
Essential authentication cookies are required for sign-in and protected workspace features. Before optional consent, HireFlow does not load the Google Ads tag, Vercel Analytics, campaign attribution storage or non-essential funnel measurement.
If you select Accept optional, HireFlow may use local storage and cookies for campaign attribution, Google Ads conversion measurement and Vercel Analytics. If you select Reject optional, those optional tools remain disabled. Use the Cookie settings control on the site to change your choice later.
We keep account, workspace and screening data while it is needed to provide the service and maintain a user's workspace. HireFlow does not currently operate an automatic 12-month candidate deletion job or a self-service account-erasure control. Job deletion does not necessarily remove detached candidate records.
To request access, correction or deletion, email bradley@hireflow.london with enough information for us to identify the account. We will assess and respond in line with applicable law and may retain information where necessary for legal, security, billing or dispute purposes. Copies already exported to an ATS or another system must also be managed with that provider.
Depending on the applicable law and your relationship with the organisation that uploaded your data, you may have rights to access, correct, erase, restrict or object to processing, and to data portability. You may also withdraw consent for optional tracking. Contact us first using the address above; you may also contact the relevant data protection regulator, including the ICO in the UK.
We use authentication, access controls, HTTPS and provider security features appropriate to the service. No internet service can guarantee absolute security. Production database policies, storage bucket visibility and ATS-secret encryption also depend on the Supabase configuration being correctly applied and must be checked operationally.
We may update this policy when the service or its processing changes. The date above shows when it was last revised. Questions or requests can be sent to bradley@hireflow.london.
Choose optional cookies
Essential cookies keep HireFlow secure and signed in. With your permission, we also use Google Ads and privacy-preserving analytics to measure marketing and improve the site. You can change this choice later from Cookie settings.