This policy explains how Hipped handles personal data when you use our platform, are recommended through it, or are in touch with us.
Recruitment Rising Oy, trading as Hipped ("Hipped", "we", "us"), is the controller of the personal data described here.
This policy covers the people who use Hipped (hiring companies and endorsers), candidates recommended through it, people in an endorser's professional network, website visitors and our business contacts. Some services, such as screening applicants for an event or programme, come with their own notice, which applies alongside this policy.
Please do not share sensitive information, such as health details or religious or political views. If it reaches us, we delete it.
Companies and endorsers need to give us their contact details to use Hipped. Candidates do not need to give us anything themselves.
| Purpose | Legal basis |
|---|---|
| Providing the platform and managing accounts | Contract |
| Handling endorsements, building candidate profiles, suggesting roles, and sharing a candidate's profile with the company hiring for the role they were recommended for | Legitimate interests: connecting people with relevant roles through people who know their work |
| Retrieving public professional profiles | Legitimate interests: keeping profiles accurate and complete |
| Paying rewards and keeping accounting records | Contract and legal obligation |
| Improving the platform and understanding how it is used | Legitimate interests, or consent where cookies are involved |
| Security and preventing misuse | Legitimate interests |
| Staying in touch with business contacts | Legitimate interests |
| Legal claims and requests from authorities | Legal obligation or legitimate interests |
Where we rely on legitimate interests for candidates, we keep it fair: you are recommended only by someone who knows your work, your profile goes only to a company hiring for a role you were recommended for, and you can object at any time. Where we rely on consent, you can withdraw it at any time.
We use AI to help people on Hipped work with candidate information, for example to summarise endorsements, tag skills and suggest which roles may fit someone. This counts as profiling.
The AI compares a person's skills, experience and endorser assessments with a role's requirements, and is instructed to ignore anything unrelated to professional ability, such as health. Its suggestions can influence which roles an endorser considers for someone, but they never decide anything. Endorsers choose whom to recommend and companies choose whom to hire. We make no decisions with legal or similarly significant effects by automated means alone.
AI processing of personal data takes place in the EU, and our AI providers do not use our data to train their models. You can object to this profiling, or ask a person at Hipped to review a suggestion about you (section 8).
We do not sell personal data. We share it with:
Our main database is hosted in the EU. Some service providers process data outside the EU, for example for email delivery or website security. When they do, we rely on an EU adequacy decision, such as the EU-US Data Privacy Framework, or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.
| Data | How long |
|---|---|
| User accounts | While active, and deleted 12 months after the last login |
| Candidate and network information, including AI summaries and public profile data | 12 months after the last endorsement or activity involving that person |
| Accounting records | As the Finnish Accounting Act requires |
| Business contacts and correspondence | 24 months after our last contact |
| Security logs | 12 months |
We keep data longer only where we need it for a dispute or legal claim, and we review what we hold regularly.
Your right to object. Where we rely on legitimate interests, including candidate profiles, AI suggestions and public profile retrieval, you can object at any time by emailing privacy@hipped.io. We will stop unless we have compelling grounds or need the data for a legal claim.
You can also ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to you in a portable format. You can withdraw consent at any time, without affecting what happened before.
Email privacy@hipped.io. You do not need an account. We reply within one month, and if a request is complex we may take up to two more months, in which case we tell you why within the first month. When we delete or correct data we shared with a hiring company, we let them know.
If you are unhappy with how we handle your data, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or the authority where you live or work.
We use cookies that are needed for the sites to work, for example to keep you signed in and protect against bots. Analytics tools, such as PostHog and Google Analytics, help us understand how our sites are used. Where they store information on your device, we ask for your consent first, and you can change your choice at any time. Our support chat loads when you use it.
We protect data with encryption, access controls and limited internal access. If a breach is likely to put you at risk, we notify the Data Protection Ombudsman, and if the risk is high, we tell you too.
We update this policy when our processing changes. For significant changes, we let account holders know in advance.
Contact:privacy@hipped.io · Recruitment Rising Oy, Agricolankatu 4, 20500 Turku, Finland