Last updated: 7 September 2026
ImmyHire Pty Ltd (“ImmyHire”, “we”, “us”) provides an AI-assisted talent assessment and decision-support platform for hiring, internal mobility and workforce development.
ImmyHire helps organisations create structured assessments, collect responses, identify role-relevant evidence, and support human reviewers in understanding strengths, development areas, gaps and areas where further evidence may be required.
This Privacy Policy explains how ImmyHire collects, uses, stores and discloses personal information.
For privacy enquiries, requests or complaints, contact: privacy@immyhire.com
This policy applies to personal information we handle about:
We refer to candidates and employees completing assessments collectively as Participants.
Depending on how ImmyHire is used, we may collect or process:
Participant information
Customer and reviewer information
Technical information
We may also collect information necessary to operate and secure the service, including:
ImmyHire assessments are designed to evaluate evidence contained in a Participant's responses against role-relevant assessment criteria.
ImmyHire is not designed to infer or evaluate:
This applies to ImmyHire's External Hiring and Internal Mobility assessment workflows.
The platform evaluates what a Participant says, describes or decides in the assessment context against relevant role criteria rather than attempting to infer hidden psychological, emotional or biometric characteristics.
If ImmyHire introduces a materially different assessment methodology in the future, that methodology will be transparently described to affected Participants and handled in accordance with applicable law.
We may collect personal information:
Where information is provided to us by an employer or another organisation, that organisation is responsible for ensuring that it is authorised to provide the information to ImmyHire and for providing any notices required by applicable law.
ImmyHire provides Participants with an assessment-specific privacy notice at or before the point at which assessment information is collected. This notice supplements this Privacy Policy and any information provided by the organisation conducting the assessment.
We may use personal information to:
We do not sell Participants' personal information.
Service evaluation and improvement
ImmyHire may use aggregated or appropriately de-identified information derived from use of the service to evaluate and improve the quality, reliability and performance of ImmyHire.
This may include evaluating and improving assessment questions, prompts, rubrics, evidence-analysis methods, report generation, quality controls and other aspects of the service.
ImmyHire takes reasonable steps designed to remove or reduce information that could identify a Participant, customer or other individual before information is included in a dataset used for these general service-improvement purposes.
ImmyHire does not use identifiable Participant assessment responses or personal information to train general-purpose AI models.
ImmyHire uses artificial intelligence and other computational methods to analyse assessment responses and generate structured decision-support information.
Depending on the assessment, this may include:
ImmyHire does not use personality inference, emotion inference, facial or biometric analysis, mental-health inference, or protected-characteristic inference as part of its standard External Hiring or Internal Mobility assessment workflows.
These outputs may be used by organisations as one source of information in employment-related processes such as hiring, internal mobility, development or role-readiness discussions.
ImmyHire is not designed to make the final hiring, rejection, promotion or internal-mobility decision on behalf of an organisation. Customers and their authorised human reviewers remain responsible for employment and talent decisions and should consider ImmyHire evidence together with appropriate context and other relevant information.
Where evidence is insufficient or uncertain, ImmyHire may identify an unknown or recommend that further evidence be obtained rather than presenting certainty that the available information does not support.
ImmyHire does not use identifiable Participant assessment responses or personal information to train general-purpose AI models. ImmyHire may use aggregated or appropriately de-identified assessment information to evaluate and improve its prompts, rubrics, assessment methods, quality controls, reliability and overall service quality, subject to applicable law and contractual requirements.
From 10 December 2026, additional requirements under the Australian Privacy Act apply where personal information is used in certain computer-assisted decisions that could significantly affect an individual's rights or interests.
The customer that initiated the assessment
Authorised representatives of the relevant customer may access assessment information according to their roles and permissions. This may include authorised hiring managers, Talent or HR personnel, managers and assessment reviewers.
Service providers
We use third-party providers to operate parts of the ImmyHire service. These may include providers supporting AI processing, cloud hosting, database or infrastructure services, email delivery, recruitment or HR system integrations, security and monitoring, and other technical functions required to operate the service.
Current material providers include:
We require service providers to process information only for authorised purposes and subject to appropriate contractual, privacy and security obligations where applicable.
Some of ImmyHire's service providers operate internationally. As a result, personal information may be processed or disclosed outside Australia.
The countries or regions involved depend on the service provider and the configuration used by ImmyHire. Where practicable, ImmyHire will identify relevant overseas locations in this Privacy Policy, an assessment-specific privacy notice, customer documentation, or other appropriate notice.
ImmyHire takes reasonable steps required under applicable Australian privacy law in relation to overseas processing and disclosures and periodically reviews the locations and safeguards used by its material service providers.
ImmyHire takes reasonable technical and organisational measures designed to protect personal information from misuse, interference, loss, unauthorised access, unauthorised modification and unauthorised disclosure.
Measures may include, depending on the relevant system:
No online service can guarantee absolute security. ImmyHire periodically reviews its security controls and may provide customers with additional security and data-flow information during enterprise or pilot reviews.
ImmyHire retains personal information only for as long as reasonably necessary for providing the service, meeting legal and contractual obligations, security and audit purposes, and resolving disputes.
Unless a specific retention period is agreed with a customer, ImmyHire establishes retention periods having regard to the purpose of the assessment, customer requirements, applicable legal and contractual obligations, security and audit requirements, and the need to resolve disputes.
Assessment information will not be retained longer than reasonably necessary for those purposes. A customer may request earlier deletion where permitted.
Individuals may also request deletion of their information. ImmyHire will consider and action such requests where applicable, subject to legal, contractual, security and legitimate retention requirements.
Where ImmyHire no longer requires personal information and is not required to retain it, we will take reasonable steps to destroy or de-identify it.
Where information is retained in aggregated or appropriately de-identified form for analytics, evaluation or service-improvement purposes, ImmyHire will take reasonable steps designed to prevent the information from identifying a Participant, customer or other individual.
Individuals may request access to personal information ImmyHire holds about them, and correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading.
Requests may be sent to privacy@immyhire.com. We may need to verify identity before providing access or making a correction. We will respond within 30 days.
ImmyHire may refuse an access or correction request where permitted or required by law and will provide appropriate reasons where required.
Participants may contact privacy@immyhire.com if they:
Employment decisions themselves remain the responsibility of the organisation conducting the relevant hiring or internal-mobility process.
If you believe ImmyHire has mishandled your personal information or breached applicable privacy requirements, contact privacy@immyhire.com with sufficient information for us to understand and investigate the concern.
We will acknowledge and assess the complaint, investigate the relevant circumstances, and aim to provide a substantive response within 30 days.
If you are not satisfied with our response, or we do not respond within a reasonable period, you may be entitled to make a complaint to the Office of the Australian Information Commissioner (OAIC).
ImmyHire maintains processes for identifying and responding to suspected data breaches. Where the Australian Notifiable Data Breaches scheme or another applicable law requires notification, ImmyHire will notify affected individuals and/or the relevant regulator as required.
Where ImmyHire processes information on behalf of an enterprise customer, we will also work with that customer in accordance with applicable contractual and legal requirements.
ImmyHire is intended for workplace and employment-related use and is not directed to children. Customers must not knowingly use the service to assess individuals below the applicable lawful working or participation age without appropriate authority and safeguards.
We may update this Privacy Policy where our services, technology, suppliers or legal obligations change. The current version will be published on the ImmyHire website with its effective date.
Where a change materially affects how existing personal information is handled, we will take reasonable steps to provide appropriate notice where required.
For privacy enquiries, access or correction requests, or privacy complaints: