Log in

Privacy Policy

Effective date: 1 March 2025 · Last updated: 5 March 2026

1. General Provisions

This Privacy Policy (hereinafter — the "Policy") establishes the procedure for processing and protecting the personal data of users of the HRStream platform (hereinafter — the "Platform", the "Service"), located at hr-stream.ru and app.hrstream.kz.

The personal data controller is ТОО «HRStream» (hereinafter — the "Company", "we"), registered under the laws of Республики Казахстан, г. Алматы.

By using the Platform, you confirm that you have read this Policy and consent to the processing of your personal data in the manner described herein.

2. Data We Collect

Depending on your role on the Platform, we may process the following categories of data:

2.1. User Data (recruiters, HR managers, administrators)

  • Full name
  • Email address
  • Phone number
  • Organisation name and job title
  • Authentication credentials (hashed password, session tokens)
  • IP address, device type, browser version

2.2. Candidate Data

  • Full name
  • Contact details (email, phone, Telegram, WhatsApp)
  • CVs and cover letters
  • Work experience, education, skills
  • Assessment and interview results
  • Salary expectations

2.3. Technical Data

  • Cookies and similar technologies
  • Service usage data (actions, visit timestamps)
  • Device and browser data

3. Purposes of Data Processing

We process personal data solely for the following purposes:

  • Providing and operating the Service
  • User registration and authentication
  • Managing recruitment processes
  • Facilitating communication between employers and candidates
  • Generating analytical reports for clients
  • Technical support and maintenance
  • Performance of contractual obligations
  • Compliance with legal requirements

4. Legal Bases for Processing

Personal data is processed on the following legal bases:

  • Consent of the data subject in accordance with the personal data legislation of Республики Казахстан
  • Performance of a contract to which the data subject is a party
  • Legitimate interests of the Company (security assurance, fraud prevention)
  • Compliance with the legal requirements of Республики Казахстан

5. Storage and Protection of Data

Personal data is stored on servers located in Республики Казахстан. We apply organisational and technical measures to protect data, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Restriction of access to personal data on a least-privilege basis
  • Regular data backups
  • Monitoring and auditing of data access
  • Password hashing using cryptographic algorithms

Data is retained for the duration of the account and contractual relationship. Upon account deletion, data is erased within 30 calendar days, except where retention is required by law.

6. Disclosure of Data to Third Parties

We do not sell or transfer your personal data to third parties, except in the following circumstances:

  • Service providers — hosting providers, email delivery services, analytics systems — operating under contracts with confidentiality obligations
  • Legal requirements — upon request of authorised public authorities in accordance with the legislation of Республики Казахстан
  • With your consent — in other cases only with your express consent

7. Cookies

The Platform uses cookies and similar technologies to operate the Service, conduct analytics and improve the user experience. You may manage cookie settings in your browser. Disabling cookies may limit the functionality of the Service.

8. Your Rights

In accordance with the legislation of Республики Казахстан, you have the right to:

  • Obtain information about the processing of your personal data
  • Request correction of inaccurate data
  • Request deletion of your personal data
  • Withdraw consent to data processing
  • Receive a copy of your data in a structured format
  • Lodge a complaint with the competent supervisory authority against the controller

To exercise your rights, please send a request to support@hrstream.kz. We will respond within 15 business days.

9. Changes to the Policy

We reserve the right to amend this Policy. In the event of material changes, we will notify you by email or through the Platform interface. Continued use of the Service following publication of changes constitutes acceptance of the updated Policy.

10. Contact Information

For questions relating to the processing of personal data, please contact us: