Privacy
Last updated 30 October 2026. Draft wording, to be reviewed by a solicitor before the private beta.
Three groups of people meet Hordu: the recruiters who use it, the clients who open their links, and the candidates who are recorded and presented. This page explains what is collected from each, why, and what you can do about it.
Candidates
If you were interviewed or presented through Hordu, the recruitment agency you dealt with is the data controller. Hordu processes your data on their instructions. The agency may hold a recording of your interview or a video about you, a transcript and a written summary of what was said, your CV in its original and formatted forms, and the details you gave them such as salary expectation, notice period and location. These are shown to the agency's client for the role you discussed, through a link the agency controls.
Summaries describe what was said. Hordu does not score, grade or rank candidates and makes no automated decision about you.
You can ask the agency to remove your data at any time using the link in any email you receive from them through Hordu, or the removal page for that agency. They have 30 days to act or to tell you why they cannot.
Clients and viewers
When you open a link, Hordu records that the link was opened, which candidates you watched and for how long, and any reaction, comment or interview request you make, together with the name and email you give. This is shown to the agency that sent you the link and to no one else. A cookie on your device remembers you on that link for 30 days; it carries no cross-site identifier. There are no advertising or analytics scripts on these pages.
Workspace users
If you work at an agency using Hordu, we hold your name, email address, password hash, your profile card, your activity in the workspace and the content you create. We use product analytics to understand how the product is used, under the terms you accept at sign-up.
Where data is kept
In the United Kingdom where our providers offer it, otherwise in the European Union. Some providers are United States companies; transfers rely on the UK extension to the EU-US Data Privacy Framework or standard contractual clauses. The full list is on the sub-processors page.
How long
Each agency sets retention for recordings and CVs within the limits of its plan. Deleted items can be restored for 30 days, then they are removed from every store, and backups roll off within 35 days.
Contact
privacy@hordu.io for anything on this page.