DATA ACCESS CONSENT FORM

Consent to Collection, Use, and Disclosure of Personal Information

Purpose of This Consent Form

This public form explains the data-access purposes the Platform supports. The assessment, legal-document and provider-permission screens record consent for their own activities; publication of this form is not a signature or an additional training opt-in. Read the Privacy Policy and the notice of the activity you are about to perform before acting. Questions: privacy@hyremynd.com.

1. Who We Are

HyreMynd AI Inc. is a Canadian corporation that provides a hiring platform to employers ("Employers") and independent accounts to applicants. The Platform supports an Employer's hiring process, including applications, résumé review, the Workplace Fit Assessment, interviews, references and correspondence, and lets an applicant complete a self-service working-style assessment that they can use when applying.

2. Information We Collect About You

We collect the following categories of personal information:

A. Information You Provide Directly

• Contact information (name, email address, phone number)
• Account credentials
• Resume/CV content, including employment history and education
• Answers to the Workplace Fit Assessment's forced-choice questions

B. Information Generated by the Platform

• Working-style positions on each assessed dimension, derived from your answers by fixed rules
• For an Employer's hiring process: comparisons of your positions with the role, the manager and the team, and their outcome categories, computed by fixed rules
• Explanations of those results written by an AI model, which cannot change them
• A reading of your résumé against a role's posted requirements and a qualification category, proposed by an AI model and reviewed by the Employer

C. Technical Information

• IP address and device information
• Browser type and operating system
• Session and interaction data

D. Connected Accounts

If you are an authorized user who connects a Google or Microsoft account:

• The email address of that account, and the permissions (scopes) you granted and the status of the connection
• The access credential the provider issues to us, stored encrypted and deleted when you disconnect or your account is erased
• If you separately enable sending from that account: the send-only permission (Google gmail.send or Microsoft Mail.Send), and the recipient address and content of each message you confirm

3. How We Use Your Information

We process personal information to deliver assessments, support Employers' hiring, review résumés, administer and secure accounts, and provide optional integrations. Independent self-service data and employer-directed records have the separate purposes and controllers described in Privacy Policy section 1.2. Publication of this form is not a signed consent or an additional training authorization.

4. Use of Artificial Intelligence

The Workplace Fit Assessment does not use AI to score answers: positions and comparisons are computed by fixed rules, and an AI model may only write an explanation of them. AI models also read résumés against a role's requirements, read pages found by open-web sourcing, and draft assistant replies, correspondence and interview notes. Privacy Policy section 1.1 describes each use and its limits. A person reviews the underlying evidence and makes every employment decision.

5. Third-Party Platform Integrations

Connecting a Google or Microsoft account is optional and is done by an individual authorized user. Reading availability returns busy intervals only. When an interview invitation is native, the candidate's and interviewers' email addresses and a short meeting description go to Google or Microsoft, which sends the invitations; otherwise HyreMynd emails a calendar attachment. Sending from a mailbox needs a separate send-only permission. Disconnecting deletes the stored credentials; HyreMynd asks Google to revoke its grant, and Microsoft access is removed in the Microsoft account settings. Privacy Policy sections 3.6 and 3.7 describe these flows in full.

Professional profiles are captured with a browser extension rather than a linked LinkedIn account. The Platform does not connect to applicant tracking, HR information or job-board accounts.

6. Disclosure to Prospective Employers

Where you take part in an Employer's hiring process, that Employer may access the hiring information for your application: your résumé and its AI-proposed reading, your working-style positions and their comparisons and explanations for that role, your interview records, and your references. Where you use a self-service sitting in an application, or agreed that an Employer may consider it when considering you for a role, that Employer receives it for that purpose. Employers use this information to evaluate your suitability for employment opportunities.

7. Data Retention

Each category of personal information follows the ordinary period and starting event in Privacy Policy section 9, including the separate periods for an Employer's hiring content and contact records, legal holds, and the rule that an Employer's retention period never destroys your independent account.

8. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Withdraw Consent: Withdraw your consent at any time (this will not affect prior processing)
• Human Review: Request human review of AI-generated decisions that significantly affect you

Additional Rights for Quebec Residents (Law 25)

If you are a Quebec resident, you have additional rights under Law 25:

• Data Portability: Receive your personal information in a structured, commonly used format
• De-Indexation: Request that we cease disseminating your information or de-index hyperlinks attached to your name
• Automated Decision-Making: Be informed when decisions are based exclusively on automated processing and object to such processing
• Complain to CAI: File a complaint with the Commission d'accès à l'information du Québec

To exercise these rights, contact us at privacy@hyremynd.com.

9. Cross-Border Data Transfers

Your personal information is transferred to, stored, and processed in the United States. In accordance with Law 25, we inform you that your personal information may be communicated outside Quebec. Privacy Policy section 8 explains where it is processed and who must assess that communication.

10. Withdrawal of Consent

You may withdraw an assessment consent, or ask to leave an Employer's hiring process, at any time; processing for that purpose stops, but results already delivered to an Employer are not recalled. To request erasure, write to privacy@hyremynd.com or support@hyremynd.com; the request follows the staged process in Privacy Policy section 10.3, in which identity verification and the controller's authorization come before destruction. Optional provider permissions are withdrawn separately, in the Platform and at the provider.

11. Contact Information

HYREMYND AI INC.

Attn: Privacy Officer

559 Sammon Ave, East York, Ontario, M4C 2E1, Canada

Email: privacy@hyremynd.com