Get started FR · EN

Privacy Policy

Last updated: 24 July 2026

1. Who is responsible for your data

SyncHire is a service operated by GetPro, a French société par actions simplifiée (SAS) registered with the Paris Trade and Companies Register under number 812 105 138, with its registered office at 41 rue Faidherbe, 75011 Paris, France. GetPro is the data controller for the personal data described below. For any question about this policy or your data, contact us at privacy@synchire.app.

2. What SyncHire does, in one sentence

SyncHire helps recruiters schedule interviews by showing candidates only the times when the hiring manager is genuinely free, read live from their calendar. Understanding what we do is understanding what data we handle — and, above all, what we don't.

3. The data we process

  • Recruiters (users). First and last name, email, password (stored encrypted, never in clear text), scheduling preferences, and the organisation you belong to.
  • Organisations. Your company name.
  • Hiring managers. First and last name, email, company, and their calendar connection status.
  • Candidates. First and last name entered by the recruiter; email and phone number that the candidate provides themselves when booking.
  • Calendar data. Free/busy periods read live from connected calendars to compute availability. We do not store these periods; they are used only to render a page, then discarded.
  • Created events. When a candidate books, we create an event in the recruiter's calendar (title, time, participants, Google Meet link).

4. Calendar access — our commitment

SyncHire only reads free/busy: never event details, and never writes to a hiring manager's calendar. Access is revocable at any time.

In practice, for a hiring manager, we know when they are busy — never with whom, on what, or why. The connection is made through Google or Microsoft OAuth with read-only access, which we use solely to compute availability (free/busy) — we never read event details. A hiring manager can remove this access at any time from their own Google or Microsoft account, without telling us.

For the recruiter, access is broader: it lets us create the interview event in their own calendar (they are the organiser) and generate the video link (Google Meet or Microsoft Teams).

5. Purposes and legal bases (GDPR)

We process this data to: create and manage your account, compute availability, create interview events, and send service emails (confirmations, password resets, invitations, notifications). The legal bases are performance of the contract with your organisation and our legitimate interest in providing a reliable scheduling service. Connecting a calendar relies on consent, which can be withdrawn at any time.

6. Google user data (Limited Use)

SyncHire's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically: we use Google calendar data only to provide the user-facing scheduling feature; we do not sell it; we do not use it for any advertising purpose; and no human reads it, except with your consent, for security purposes, to comply with the law, or where strictly necessary for support.

We share Google user data only with the processors listed in section 7 — specifically Nylas (EU region), which operates the technical connection to the Google Calendar API on our behalf — and with no other third party. We never sell Google user data, never share it with advertisers or data brokers, and never transfer or disclose it except to these processors or where required by law.

7. Processors and hosting

We rely on a small number of contractually-bound providers: Google and Microsoft (sign-in and calendar data), Nylas (calendar connectivity, EU region), Resend (sending service emails) and Hetzner (server hosting, Germany). Some providers may process data outside the European Union; where that happens, such transfers are covered by appropriate safeguards (the European Commission's Standard Contractual Clauses).

8. How we protect your data

All communication with SyncHire, and between SyncHire and our providers, is encrypted in transit (HTTPS/TLS). The OAuth tokens that grant calendar access are stored by Nylas in the European Union and never touch our servers — our application holds only opaque identifiers. Account passwords are stored as salted hashes (bcrypt), never in clear text, and application secrets are kept encrypted. Free/busy calendar data is processed in memory to render a page and never written to our database. Access to production systems is restricted to authorised personnel, data is hosted in the European Union (Germany), and each organisation's data is isolated from every other's.

9. Retention

We keep your account data for as long as your account is active. Free/busy periods are not retained. Hiring manager and candidate data are kept for as long as useful to your recruiting activity, then deleted on request. When an account is closed, associated data is deleted or anonymised.

10. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, port and object to the processing of your data, as well as the right to withdraw consent (for example by disconnecting a calendar). To exercise them, write to privacy@synchire.app. You may also lodge a complaint with the French data-protection authority, the CNIL (www.cnil.fr).

11. Cookies

SyncHire uses only strictly necessary cookies, chiefly to keep you signed in. We use no advertising cookies and no third-party tracking.

12. Changes

We may update this policy. For any significant change, we will inform users. The date at the top shows the last update.