Candidate Privacy Notice

Last updated: October 23, 2026

Our Privacy Policy is the full legal document and covers everyone who uses Arihance Systems Private Limited. This notice is the candidate's version: what an employer can see about you, when that changes, and what you decide.

1. The shape of it

CalHire sits between you and employers as an identity broker. You prove your skills once. Employers evaluate the proof without knowing who you are. Your real identity moves to exactly one employer, at a defined point, only because you agreed to it.

That is the product, not a privacy setting, so it cannot be switched off by an employer, a plan, or an administrator.

2. What an employer sees before a reveal

They see: your verified scores and the evidence behind them, the skills you declared, and the anonymous handle the platform gave you.

They do not see: your name, your email, your phone number, your photo, your current or previous employers, your education, your age, your gender, your nationality, or where you live beyond the working region a role actually requires.

There is no "request full profile" button that skips this. An employer who has not completed a reveal has no route to your identity through the product.

3. When your identity is revealed

A reveal happens when three things are true at once:

1. You are far enough along. Reveals are only possible at stages the platform allows — in practice, once you have been shortlisted and the process is genuinely progressing.
2. You agreed to this one. Consent is per employer and per reveal. Agreeing once does not put you on a list; the next employer starts from zero.
3. It is written down. Every reveal is recorded permanently: which employer, which role, when, and the consent it rested on. That record is append-only, so nobody can later dispute or erase it.

You can withdraw future consent at any time. Withdrawal stops new reveals; it cannot un-tell an employer something they were already told, and we would rather say that plainly than imply otherwise.

4. Right-to-work and nationality

Questions about visa status, right to work, or Emirati nationality are only asked after a reveal, when they have become relevant to an actual offer. Before that point they are not collected, so they cannot influence an evaluation that is supposed to be about your skills.

Where you choose to have Emirati status document-verified, the documents you upload are reviewed by a person and then purged 30 days after the decision. The verified result remains; the documents do not.

5. Your private identity and photos

Before your first vetted assessment starts, you complete a short private identity step. You agree to it, enter your full legal name and the country or region you live in (your phone number and city are optional), and take a selfie with your camera. The step is filled in for you next time, and a vetted assessment needs a selfie taken in the 24 hours before it starts. During the AI interview the camera takes two more photos: one when the interview starts and one just before you send your last answer.

Why we take them. So that a person can confirm that the talent who sat the vetted assessment, the talent in the interview, and the person a company later meets are the same person. That is the only purpose.

Who sees them, and when.

• A CalHire reviewer, when your sitting needs an integrity review, can compare your profile selfie with the two interview photos. Every photo they open is recorded.
• A company's interviewer, only after you have agreed to share your identity with that company, can see the selfie taken for your latest vetted assessment and record whether you are the person they met. If you added your selfie only after that assessment, they see that selfie and are told it was added afterwards. Every view is recorded. No company sees a photo before that point, and companies never see your interview photos.
• Nobody else. Your photos never appear on your public profile or your directory card.

As with anything shared in a reveal, once a company has seen your photo we cannot make it unsee it.

What we do not do. No software compares, matches or analyses your face. There is no face matching, no facial recognition and no liveness detection; a person makes every comparison. Your photos are never sent to an AI model. We do not ask for a passport, an ID card or any other government document.

How they are kept. Photos are stored encrypted, as your private identity details are. Location and other metadata your camera adds to an image are removed before it is stored.

How long we keep them.

• Your current profile selfie, while your account exists. When you take a new one, the replaced selfie is deleted 30 days after it was replaced, unless it is the selfie taken for your latest vetted assessment. That one is the photo a company compares you with after a reveal, so it is kept until a newer vetted assessment replaces it, and is then deleted 30 days after the newer assessment's result is issued.
• Your interview photos, 90 days after they were taken. A record that a photo was taken stays with the sitting; the photo itself does not.
• Everything, when you delete your account: every photo and your private identity record are deleted when the deletion becomes permanent (section 8).

If a photo is missing, or a company reports a different person. A missing interview photo is noted for a reviewer at a low weight and never declines you. If a company's interviewer reports that you are not the person in your profile photo, nothing is declined automatically: your application is flagged and CalHire's team is alerted to review it.

If you cannot use a camera. You can continue on the CalHire mobile app, or reach us through the contact page for a manual check with a person instead. After a manual check you add your details without a photo.

6. Your report card, and never being ghosted

If an employer decides not to proceed, you get a report card explaining where you stood and what would move it — automatically, not on request. If an employer simply stops responding, the process closes itself and you are told.

Being told "no" is not pleasant. Not being told anything is worse, and it is the thing we have designed hardest against.

7. What you control

• Your anonymous directory card. When you set up your account, you choose whether a minimal, anonymous card is listed in the CalHire talent directory. The switch starts on. If it is on, the card is listed once you complete the vetted assessment and add your private identity. It shows your role area, your score band (never your exact score), the labels of your verified skills, your broad working region and how recently you were verified. It never shows your name, email, phone number, photo, employers or any other personal identifying information, and it lives at an opaque URL that is not derived from your name or email. We tell you this when you sign up, ask you during setup, and remind you on your result screen.
• One tap makes it private. Switch your public profile off at any time and it leaves the directory within a few minutes; its link stops working. If you set up your account before the directory launched, nothing about you is listed unless you choose to join.
• Everything else on a public profile is your choice. Your exact score, sub-scores and strengths are shown only if you turn them on. Before you change what is shown, you can run a re-identification check (a "what would this actually reveal about me?" review) and decide afterwards.
• Percentile rankings are hidden by default, including on a published profile.
• Marketing consent is separate from everything else and separately withdrawable.
• Every consent you give is separately withdrawable. There is no single switch that quietly bundles them.

8. Getting your data out, or deleting it

• Export. Request a full copy of your data from your privacy settings. You get an encrypted bundle; the download link expires after 48 hours.
• Deletion. Request account deletion, confirm it with a one-time code, and there is a 30-day grace period before it becomes permanent — cancellable throughout, because an irreversible action taken in a bad hour should be reversible in a better one. After that, your data is hard-deleted and the audit trail is anonymised rather than kept about you.
• Some records survive deletion in anonymised form where the law requires it — financial records, for instance, have statutory retention periods. Section 7 of the Privacy Policy has the detail.

9. AI, and contesting a result

AI assists; a person decides. No model receives your identity, and no code path can decline you. If you disagree with a score or an integrity flag, a human will review it within 48 hours.

• AI Transparency Notice — where AI is used and what it may decide
• Appeals Policy — how to contest an outcome
• Accommodations Policy — adjustments so the assessment measures the right thing

10. Your legal rights

Access, correction, deletion, portability, objection and withdrawal of consent apply wherever you are, and Sections 9 to 14 of the Privacy Policy set out the region-specific detail for the EU, the UK, the United States, the UAE and India — including the supervisory authority you can complain to.

To exercise anything here, write to privacy@calhire.com.