Privacy Policy

1. Who We Are

CloudSourceHRM is a recruiter member portal operated by SHIRO Technologies LLC(“we”, “us”, or “our”). We are part of the CHRM NEXUS ecosystem and provide tools for recruiters to manage contacts, send requirements, and build candidate hotlists.

Our registered address is on file with the state of our incorporation. For privacy-related inquiries, contact us at privacy@shirotechnologies.com.

2. Information We Collect

We collect information in the following ways:

• Account information: Your name, email address, and password when you register.
• Profile and billing: Subscription tier, payment method details (processed by Stripe — we never store raw card numbers), and billing address.
• Contact data you upload: CSV or Excel files of employer/candidate contacts you import into the platform. This data is stored on your behalf.
• Requirement data: Email subjects, body content, recipient lists, and engagement metrics (opens, delivery status).
• Usage data: Pages visited, features used, timestamps, and browser/device information collected via standard server logs and analytics.
• Communications: Messages you send us via the contact form or email.

3. How We Use Your Information

• To provide, maintain, and improve the CloudSourceHRM platform.
• To process payments and manage your subscription.
• To send transactional emails (account confirmations, password resets, billing receipts).
• To deliver the requirements you create within the platform.
• To respond to your support requests.
• To detect fraud, abuse, or security incidents.
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your contact database for our own marketing.

4. How We Share Your Information

We share data only with service providers necessary to operate the platform:

• Neon (database hosting): Your data is stored in a PostgreSQL database hosted on Neon's infrastructure.
• Stripe: Payment processing. Stripe stores payment method details under their own privacy policy.
• Resend / AhaSend: Email delivery providers used to send campaigns and transactional emails on your behalf.
• Railway: Cloud hosting for our application servers.

All providers are contractually bound to use your data only as directed by us.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your account, we will delete your data within 30 days, except where we are required to retain it for legal or tax purposes (typically up to 7 years for financial records).

Contact records and campaign data you upload are retained until you delete them or close your account.

6. Security

We use industry-standard security practices including TLS encryption in transit, encrypted database connections, HMAC-signed tracking tokens, and role-based access controls. No system is 100% secure; if you become aware of any security issue, please contact us immediately at security@shirotechnologies.com.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Object to or restrict certain processing activities.
• Data portability (receive your data in a machine-readable format).

To exercise any of these rights, email us at privacy@shirotechnologies.com. We will respond within 30 days.

8. Cookies

We use session cookies strictly necessary for authentication. We do not use advertising cookies or third-party tracking pixels beyond the email open-tracking pixel embedded in campaigns (which you control as the sender).

9. Children's Privacy

CloudSourceHRM is a professional B2B tool intended for users 18 years and older. We do not knowingly collect data from minors. If you believe we have inadvertently collected such data, contact us immediately.

10. Changes to This Policy

We may update this policy periodically. When we do, we will update the “Last updated” date at the top of this page and, for material changes, notify you via email or an in-app notice. Continued use of the platform after changes constitutes your acceptance of the updated policy.

11. Contact Us

For any privacy-related questions or requests, reach us at: