Hynx Privacy Policy (Website / Platform)
Last updated: 1 July 2026 Effective date: 1 July 2026
This Privacy Policy explains how HYNX TRADING ("Hynx", "we", "us", or "our") collects, uses, shares, and protects personal data when you use the Hynx platform, including:
- the Hynx website at https://www.hynx.ai;
- the Hynx Reach mobile app (careers); and
- the Hynx Freelancer mobile app (freelance / "Craft").
Collectively, these are the "Services". By creating an account or using the Services, you acknowledge that you have read and understood this Policy.
This is the combined, platform-wide policy used on the website. Each mobile app also has its own app-specific policy (hynx.ai/reach/privacy,hynx.ai/freelancer/privacy) scoped to just that app's data.
1. Who we are (Data Controller)
- Entity: HYNX TRADING
- Country: State of Qatar
- Contact for privacy matters: info@hynx.ai
You can reach us about any privacy matter, including requests to exercise your rights, at info@hynx.ai.
2. Scope and who can use the Services
The Services are intended solely for individuals who are at least sixteen (16) years old. We do not knowingly collect personal data from anyone under 16. See also our Terms of Service (Article 1).
The Services are offered globally; additional regional rights are described in Sections 11–13.
3. The personal data we collect
3.1 Account and identity data
- Email address — unique account identifier. Each email can be used for one account only and cannot be reused.
- Password — stored hashed; never in plain text.
- Name, username/handle, and profile photo/avatar.
- Sign-in with Google / Sign in with Apple — we receive the account identifier, name, and email from the provider.
3.2 Profile and career data
- CV / résumé content — work history, education, contact details, and sometimes date of birth, nationality, a photo, and other details you add.
- Skills, languages, location/region, professional summary.
- Hynx Freelancer ("Craft") data — freelance profile ("passport"), portfolio, service listings, work history, trust score, endorsements.
- Company data — company profile, job postings, candidate screening notes.
3.3 Communications and content
- Direct messages, group chats, community messages.
- Media/file attachments (stored securely, served via time-limited links).
- Reactions, mentions, read receipts, and reports/flags.
3.4 Voice and interview data
- Microphone audio during AI voice interviews is processed in real time (speech-to-text) to produce a transcript; the audio is not recorded or stored.
- Transcripts and AI-generated interview reports and scores.
- We ask for consent before a voice interview; see retention in Section 8.
3.5 Payment and billing data (website only)
- Subscription tier, billing status, transaction records, renewal dates.
- We do not store card numbers — collected/processed by our payment provider (MyFatoorah); we receive transaction references and status only.
- Hynx does not hold, escrow, process, or settle payments between freelancers and clients; any such payment arrangements are made directly between the parties.
Payments are made only through the Hynx website. The mobile apps have no in-app purchases.
3.6 Usage, analytics, and technical data
- Credits used, feature-usage events, application lifecycle events.
- Presence/online status (with a privacy toggle).
- Server logs — IP address, device/browser info, timestamps, error logs.
- Location — only when you choose to share it inside a message; we do not track your location in the background.
- Crash and diagnostic data — used to keep the Services stable (the Hynx Freelancer app collects this; Hynx Reach does not).
- Aggregated analytics, presented only in aggregate (suppressed so individuals can't be identified).
3.7 AI-derived data
- Mathematical representations ("embeddings") of profile/job text, used for matching.
- AI outputs — CV analysis, match scores, coaching plans, fraud/risk signals.
4. How and why we use your data (purposes and legal bases)
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create and operate your account; authenticate you | Account/identity | Contract (Art. 6(1)(b)) |
| Match candidates↔jobs, freelancers↔projects | Profile, career, AI-derived | Contract; legitimate interests (b,f) |
| Provide AI features (analysis, coaching, voice, matching, translation) | Profile, content, voice, AI-derived | Contract; consent for voice (b; 9) |
| Messaging, community, content sharing | Communications/content | Contract (b) |
| Subscriptions | Payment/billing | Contract; legal obligation (b,c) |
| Trust, safety, fraud prevention | Usage, content, reports, risk signals | Legitimate interests; legal obligation (f,c) |
| Analytics and improvement | Usage/technical, aggregated | Legitimate interests (f) |
| Legal, tax, regulatory compliance | Account, payment, transaction | Legal obligation (c) |
Where we rely on consent (e.g., voice interviews), you may withdraw it at any time.
5. Automated processing and AI
We use AI to score and rank candidates, freelancers, and CVs. Selected content (CVs, profiles, job/project text, messages you translate) is processed by a third-party AI provider on our behalf. These outputs assist humans; they are not final decisions — Hynx does not auto-reject or auto-hire, and fraud detection produces flags only. EEA/UK users may request human review (GDPR Arts. 13, 14, 22) at info@hynx.ai.
6. Who we share data with
We do not sell your personal data. We share personal data with service providers who process it on our behalf, under contract and only as needed to run the Services. They fall into these categories:
- Cloud hosting and infrastructure — data storage, databases, content delivery, and web fonts (hosted primarily in the EU).
- AI processing — analysis, matching, and voice transcription (EU region).
- Payment processing — our payment gateway, MyFatoorah; we do not store card data.
- Sign-in providers — Google and Apple, when you choose to sign in with them.
- Communications — email delivery for transactional and notification messages.
- Diagnostics — crash and error reporting to keep the Services stable (Hynx Freelancer app).
Some of these providers are located outside your country (see Section 10). A full, named list of our sub-processors is available on request at info@hynx.ai.
We may also disclose data where required by law, to prevent fraud or harm, or in connection with a merger or acquisition (with notice where required).
7. Sharing with other users and the public
Public profiles, job applications, and messages are shared with the relevant counterparties by design. You control this via profile settings, the presence toggle, and the Freelancer visibility switch.
8. Data retention
- Account/profile data — kept while active; on deletion, removed without undue delay and, where GDPR applies, within one (1) month (subject to a 30-day in-app grace/restore window on the apps).
- Ephemeral "stories" — ~24h.
- Voice audio — processed in real time to generate a text transcript and not recorded or stored. Transcripts and interview reports are kept while your account is active and are deleted when you delete your account.
- Financial/tax/transaction records — up to six (6) years where legally required.
9. How we protect your data
We use appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), hashed passwords, access controls that limit who can view your data, and secure, time-limited links for files. Authorized staff may access data only as needed for moderation, fraud prevention, dispute resolution, and support. If a personal-data breach occurs that is likely to risk your rights, we will notify the relevant authority and affected users as required by law. No method of transmission or storage is completely secure.
10. International data transfers
Our core infrastructure and AI processing are hosted in the EU (Azure West Europe). Some data is transferred to providers in other countries, including the United States (e.g., sign-in and email providers) and Qatar (our payment provider). Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or an adequacy decision where one applies.
11. Your rights (EEA / UK — GDPR)
Access, rectification, erasure, restriction, objection, portability, withdraw consent, and not to be subject to solely automated decisions with significant effects; and to complain to your supervisory authority. Contact info@hynx.ai. In-product controls already exist for account deletion, profile editing, presence, and Freelancer visibility.
12. Your rights (California / US — CCPA/CPRA)
Know, access, delete, correct, and opt out of "sale"/"sharing." We do not sell your personal information. No discrimination for exercising rights. Contact info@hynx.ai.
13. Qatar & GCC
We handle personal data in line with Qatar's Law No. 13 of 2016 (PDPPL) in addition to the frameworks above.
14. Third-party links
Users may add external links; when clicked you leave Hynx for sites we don't control. Outbound links limit referrer information.
15. Cookies
The website uses cookies that are necessary to run the Services and to understand and improve usage.
16. Children
Not directed to under-16s; we do not knowingly collect their data.
17. Changes
We may update this Policy and will change the "Last updated" date, with additional notice for material changes.
18. Contact
HYNX TRADING — info@hynx.ai — State of Qatar