calhire

Candidate Privacy Notice

Last updated: September 20, 2026

Our Privacy Policy is the full legal document and covers everyone who uses Arihance Systems Private Limited. This notice is the candidate's version: what an employer can see about you, when that changes, and what you decide.

1. The shape of it

CalHire sits between you and employers as an identity broker. You prove your skills once. Employers evaluate the proof without knowing who you are. Your real identity moves to exactly one employer, at a defined point, only because you agreed to it.

That is the product, not a privacy setting, so it cannot be switched off by an employer, a plan, or an administrator.

2. What an employer sees before a reveal

They see: your verified scores and the evidence behind them, the skills you declared, and the anonymous handle the platform gave you.

They do not see: your name, your email, your phone number, your photo, your current or previous employers, your education, your age, your gender, your nationality, or where you live beyond the working region a role actually requires.

There is no "request full profile" button that skips this. An employer who has not completed a reveal has no route to your identity through the product.

3. When your identity is revealed

A reveal happens when three things are true at once:

  1. You are far enough along. Reveals are only possible at stages the platform allows — in practice, once you have been shortlisted and the process is genuinely progressing.
  2. You agreed to this one. Consent is per employer and per reveal. Agreeing once does not put you on a list; the next employer starts from zero.
  3. It is written down. Every reveal is recorded permanently: which employer, which role, when, and the consent it rested on. That record is append-only, so nobody can later dispute or erase it.

You can withdraw future consent at any time. Withdrawal stops new reveals; it cannot un-tell an employer something they were already told, and we would rather say that plainly than imply otherwise.

4. Right-to-work and nationality

Questions about visa status, right to work, or Emirati nationality are only asked after a reveal, when they have become relevant to an actual offer. Before that point they are not collected, so they cannot influence an evaluation that is supposed to be about your skills.

Where you choose to have Emirati status document-verified, the documents you upload are reviewed by a person and then purged 30 days after the decision. The verified result remains; the documents do not.

5. Your report card, and never being ghosted

If an employer decides not to proceed, you get a report card explaining where you stood and what would move it — automatically, not on request. If an employer simply stops responding, the process closes itself and you are told.

Being told "no" is not pleasant. Not being told anything is worse, and it is the thing we have designed hardest against.

6. What you control

  • Your public profile is off by default. If you choose to publish one, it carries no personal identifying information and lives at an opaque URL that is not derived from your name or email. Before you publish, you can run a re-identification check — a "what would this actually reveal about me?" assessment — and decide afterwards.
  • Percentile rankings are hidden by default, including on a published profile.
  • Marketing consent is separate from everything else and separately withdrawable.
  • Every consent you give is separately withdrawable. There is no single switch that quietly bundles them.

7. Getting your data out, or deleting it

  • Export. Request a full copy of your data from your privacy settings. You get an encrypted bundle; the download link expires after 48 hours.
  • Deletion. Request account deletion, confirm it with a one-time code, and there is a 30-day grace period before it becomes permanent — cancellable throughout, because an irreversible action taken in a bad hour should be reversible in a better one. After that, your data is hard-deleted and the audit trail is anonymised rather than kept about you.
  • Some records survive deletion in anonymised form where the law requires it — financial records, for instance, have statutory retention periods. Section 7 of the Privacy Policy has the detail.

8. AI, and contesting a result

AI assists; a person decides. No model receives your identity, and no code path can decline you. If you disagree with a score or an integrity flag, a human will review it within 48 hours.

9. Your legal rights

Access, correction, deletion, portability, objection and withdrawal of consent apply wherever you are, and Sections 9 to 14 of the Privacy Policy set out the region-specific detail for the EU, the UK, the United States, the UAE and India — including the supervisory authority you can complain to.

To exercise anything here, write to privacy@calhire.com.