HRStream
RUKZENUZ
Log in
CallWhatsAppEmail

Privacy Policy

Effective date: 1 March 2025 · Last updated: 7 October 2026

1. General Provisions

This Privacy Policy (hereinafter — the "Policy") establishes the procedure for processing and protecting the personal data of users of the HRStream platform (hereinafter — the "Platform", the "Service"), located at hr-stream.ru and app.hrstream.kz.

The personal data controller is ТОО «HRStream» (hereinafter — the "Company", "we"), registered under the laws of Республики Казахстан, г. Алматы.

By using the Platform, you confirm that you have read this Policy and consent to the processing of your personal data in the manner described herein.

2. Data We Collect

Depending on your role on the Platform, we may process the following categories of data:

2.1. User Data (recruiters, HR managers, administrators)

  • Full name
  • Email address
  • Phone number
  • Organisation name and job title
  • Authentication credentials (hashed password, session tokens)
  • IP address, device type, browser version

2.2. Candidate Data

  • Full name
  • Contact details (email, phone, Telegram, WhatsApp)
  • CVs and cover letters
  • Work experience, education, skills
  • Assessment and interview results
  • Salary expectations

2.3. Technical Data

  • Cookies and similar technologies
  • Service usage data (actions, visit timestamps)
  • Device and browser data

3. Purposes of Data Processing

We process personal data solely for the following purposes:

  • Providing and operating the Service
  • User registration and authentication
  • Managing recruitment processes
  • Facilitating communication between employers and candidates
  • Generating analytical reports for clients
  • Technical support and maintenance
  • Performance of contractual obligations
  • Compliance with legal requirements

4. Legal Bases for Processing

Personal data is processed on the following legal bases:

  • Consent of the data subject in accordance with the personal data legislation of Республики Казахстан
  • Performance of a contract to which the data subject is a party
  • Legitimate interests of the Company (security assurance, fraud prevention)
  • Compliance with the legal requirements of Республики Казахстан

5. Storage and Protection of Data

Personal data is stored on servers located in Республики Казахстан. We apply organisational and technical measures to protect data, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Restriction of access to personal data on a least-privilege basis
  • Regular data backups
  • Monitoring and auditing of data access
  • Password hashing using cryptographic algorithms

Data is retained for the duration of the account and contractual relationship. Upon account deletion, data is erased within 30 calendar days, except where retention is required by law.

6. Disclosure of Data to Third Parties

We do not sell or transfer your personal data to third parties, except in the following circumstances:

  • Service providers — hosting providers, email delivery services, analytics systems — operating under contracts with confidentiality obligations
  • Legal requirements — upon request of authorised public authorities in accordance with the legislation of Республики Казахстан
  • With your consent — in other cases only with your express consent

7. Calendar and Video Conferencing Integrations (Google Calendar, Zoom, Microsoft Outlook/Teams)

With your explicit consent, HRStream connects your calendar (Google Calendar, Microsoft Outlook/Teams) and video conferencing service (Zoom) and creates, modifies and deletes interview events and meeting links. Access to calendar data is used only for this purpose and to display availability when scheduling interviews.

Permissions requested:

  • Google: the calendar.events scope (create, modify and delete calendar events) and the account email address
  • Microsoft: Calendars.ReadWrite and User.Read
  • Zoom: create and manage meetings

HRStream's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google API Services User Data Policy

Google data is not sold and is not transferred to third parties, except where necessary to provide the feature you requested or where required by law. It is not used for advertising or for training artificial intelligence models. HRStream employees do not read this data, except for security purposes, where required by law, or with your consent.

Access tokens are stored on secured servers located in the Republic of Kazakhstan with restricted access. You can revoke access in the HRStream integration settings and at myaccount.google.com/permissions. When access is revoked, tokens are deleted and related data is deleted within 30 days. Questions: support@hrstream.kz

8. Cookies

The Platform uses cookies and similar technologies to operate the Service, conduct analytics and improve the user experience. You may manage cookie settings in your browser. Disabling cookies may limit the functionality of the Service.

9. Your Rights

In accordance with the legislation of Республики Казахстан, you have the right to:

  • Obtain information about the processing of your personal data
  • Request correction of inaccurate data
  • Request deletion of your personal data
  • Withdraw consent to data processing
  • Receive a copy of your data in a structured format
  • Lodge a complaint with the competent supervisory authority against the controller

To exercise your rights, please send a request to support@hrstream.kz. We will respond within 15 business days.

10. Changes to the Policy

We reserve the right to amend this Policy. In the event of material changes, we will notify you by email or through the Platform interface. Continued use of the Service following publication of changes constitutes acceptance of the updated Policy.

11. Contact Information

For questions relating to the processing of personal data, please contact us: