Terms of Service

1.1 "Account" means the Customer's tenant in the Service, including all associated User logins.

1.2 "Affiliate" means an entity that directly or indirectly controls, is controlled by or is under common control with a party, where control means ownership of more than 50% of the voting rights or the power to direct its management.

1.3 "Billing Month" means each monthly allocation period beginning on the paid Subscription start date or its monthly anniversary. If a month lacks the corresponding day, the anniversary falls on its last day. An annual Subscription has twelve Billing Months. The Account displays allocation and renewal dates.

1.4 "Candidate" means an individual whose data the Customer processes in connection with recruitment through the Service, including an applicant or an individual referred, imported or sourced by the Customer.

1.5 "Credits" means metered allowances included in a Subscription or purchased separately, including AI credits and video interview invites. Credits are service entitlements, have no cash value except for an express repayment right under section 7.6, and are not transferable between Customers. "Service Credits" means the fee adjustments for qualifying unavailability under Annex B; these are separate from metered Credits.

1.6 "Customer Data" means data, content and material submitted by the Customer or its Users, or collected or generated by the Service on the Customer's behalf, including Candidate data, job posts, scorecards, notes, recordings, offers, documents and Customer-specific AI inputs and outputs. It excludes Hireall's underlying software, models and Documentation and anonymous statistics meeting section 13.4.

1.7 "DPA" means the Data Processing Agreement incorporated into these Terms and made available through the Legal Hub, together with its applicable annexes and legally required transfer instruments.

1.8 "Documentation" means the applicable technical and user documentation describing the operation, supported uses and limitations of the purchased Service, including the AI Transparency Notice. It excludes general advertising, roadmap statements and representations about unreleased features. Subscription entitlements and prices are established by the accepted purchase details or Order Form, not by later changes to website descriptions.

1.9 "Fees" means the charges accepted at purchase or stated in an Order Form, including Subscription, add-on and usage charges.

1.10 "Headcount" means the number of employees of the Customer and those Affiliates whose recruitment is managed under its Account, counted once per person regardless of working hours. Contractors and employees of an agency's recruitment clients are excluded unless the accepted purchase details or Order Form expressly provide otherwise.

1.11 "Legal Hub" means hireall.com/legal, through which the applicable DPA, Privacy Policy, Candidate Privacy Notice, Cookie Policy, Sub-processor List, AI Transparency Notice, Acceptable Use Policy, Data Export Register and versions of these Terms are made available. The SLA is included in Annex B. Incorporated contractual documents are accessible to the Customer before acceptance in a form it can retain.

1.12 "Order Form" means a written order, quote or agreement accepted by both parties that references these Terms.

1.13 "Subscription" means the plan, term, limits, Credits and support entitlements purchased by the Customer. "Subscription Term" means the initial monthly or annual committed period, or another expressly agreed period, and each renewal of that period. Payment in instalments does not shorten an expressly agreed Subscription Term.

1.14 "Third-Party Service" means a service independently supplied by a third party that the Customer chooses to connect or use with the Service, including job boards, meeting providers and assessment providers. It does not include a supplier engaged by Hireall to perform its own obligations merely because that supplier is a third party, and it does not include Youthall.

1.15 "User" means an individual authorised by the Customer to access the Account, including employees and authorised external recruiters, interviewers and advisers.

1.16 "Acceptable Use Policy" means the policy at hireall.com/legal/acceptable-use-policy, which supplements section 8 and forms part of the agreement.

1.17 "SLA" means the service level commitments in section 17 and Annex B, which apply to every paid Subscription. An Order Form may expressly replace identified SLA provisions. General support descriptions or website updates do not change a binding commitment except under section 2.

1.18 "Youthall" means the complementary talent-network platform operated by STJ İnsan Kaynakları Bilişim ve Danışmanlık A.Ş. in Istanbul, Türkiye, an Affiliate of Hireall. Hireall and Youthall form an integrated recruitment offering, including the option for Candidates to apply with a Youthall profile and connected recruitment workflows. Their respective processing roles and the scope of the integration are described in sections 9, 12, 13.7 and the DPA.

2.1 The agreement consists of these Terms, Annex A where applicable, Annex B for paid Subscriptions, the DPA, the Acceptable Use Policy, any Order Form and the purchase details accepted by the Customer. The AI Transparency Notice and Sub-processor List apply for the purposes specified in these Terms and the DPA. Privacy and cookie notices explain processing and transparency practices; they do not independently amend commercial entitlements or liability limits.

2.2 Mandatory data transfer instruments prevail to the extent required by law. The DPA prevails on personal data processing matters. Annex A prevails where mandatory switching law requires. An Order Form prevails over these Terms or Annex B only for matters it expressly addresses. Accepted purchase details prevail for plan entitlements, prices and dates. Subject to those priorities, these Terms and their applicable Annexes prevail over the Acceptable Use Policy, Documentation and other website content. Liability under the DPA is subject to section 22 unless a signed amendment expressly identifies and varies that section; this does not override a mandatory transfer instrument or rights that cannot lawfully be limited.

2.3 We may update these Terms and incorporated contractual policies, including the Acceptable Use Policy and SLA. Material changes will be notified by e-mail to the Account administrators or designated legal contact at least 30 days before taking effect. Changes materially adverse to a Customer apply from its next renewal, for both self-service and Order Form Subscriptions. The Customer may prevent that renewal under section 7. If notice arrives after an applicable contractual non-renewal deadline, that deadline is extended until the renewal time for the affected renewal. Sub-processor changes follow the DPA's separate notice and objection process.

2.4 A change strictly necessary to comply with law or address an urgent security threat may take effect sooner, but only to the extent necessary. We will explain the reason and give as much notice as reasonably practicable. Changes specific to a new optional feature apply only when the Customer enables or purchases that feature after receiving its terms. Neither exception permits an unrelated increase in current-term Fees or reduction in purchased entitlements.

2.5 Continued use after a valid effective date constitutes acceptance of a notified change. We make applicable versions available through the Legal Hub or on request. Rights and obligations accrued before a change are not retroactively altered. Documentation updates cannot reduce the protection in this section or section 17.3.

3.1 You must provide accurate and current registration and billing information, including legal name, a business e-mail address (registrations with disposable e-mail addresses may be declined) and Headcount band. We may request reasonable evidence to verify the relevant band. We will explain a proposed correction and give you at least 14 days to respond. A band correction or Headcount change affects pricing only from the next renewal unless both parties agree otherwise in writing. Deliberate misrepresentation may constitute a material breach, but does not authorise an unannounced retroactive card charge.

3.2 Each User must be at least 18 years old and must have individual credentials associated with a business e-mail address or another administrator-approved professional identity. Credentials must not be shared. You are responsible for authorising Users, assigning roles, removing unnecessary access and using available authentication controls appropriately.

3.3 You are responsible for your Users' use of the Account and for protecting credentials and systems within your control. You are not responsible under this section for unauthorised activity to the extent caused by Hireall's breach, negligence or failure to apply its agreed security measures. Notify security@hireall.com without undue delay after discovering suspected unauthorised access, and cooperate reasonably in containment and investigation.

3.4 Our support personnel access Customer Accounts only with administrator permission, where reasonably necessary to investigate or contain a security incident, or as required by law. Access is restricted to what is necessary, subject to confidentiality obligations and recorded in the Account's audit log.

3.5 Access for the purpose of copying the Service or developing a competing service is prohibited. This does not prevent a Customer or its professional advisers from conducting lawful internal procurement evaluations, compliance reviews or permitted security assessments. Active penetration testing or vulnerability probing requires prior written coordination and permission. Nothing restricts a disclosure or assessment required by law.

4.1 Eligible new Customers may start a 14-day trial of a self-service Subscription. No payment card is required to start the trial. One trial is available per organisation and per e-mail domain; an organisation whose domain has already used a trial may subscribe directly. Before the trial begins, the Account shows the selected plan, the price and currency that will apply if you activate it, billing frequency and the trial expiry date. The trial expires 14 days after it started, at the time of day (UTC) at which it started. The Account and our trial e-mails show the exact expiry date and time in UTC. Where a time is shown without a time zone, UTC applies.

4.2 No Subscription Fee is charged during the trial. The trial does not convert automatically: the paid Subscription starts only when you add a valid payment card and confirm activation in the Account, for example to publish a job. If you do not activate a paid plan, the trial simply expires and no Fee is payable. We send a reminder before the trial expires. The activation screen states the plan, the billing period, the amount charged immediately and the next renewal date before confirmation; confirmation takes you to Stripe's checkout page, and successful payment starts the paid Subscription, ends the trial and authorises the renewal charges described in section 6. If the trial ends without activation, publishing, AI actions and video invites pause and section 4.5 applies.

4.3 Trial features and allowances are limited: the trial includes 75 AI Credits and 5 video invites in total for the trial period, in addition to any further limits disclosed at sign-up; top-up Credits cannot be purchased during a trial. Publishing jobs to a careers page or job board becomes available once the paid Subscription has started. Trial Customers can configure workflows and explore with sample data. Any permitted processing of real personal data remains subject to the DPA and applicable security and confidentiality obligations.

4.4 Trials are provided as is, without an uptime commitment or contractual intellectual property indemnity. We may end or suspend a trial for reasonable operational, security or abuse-prevention reasons, giving notice where practicable. This does not exclude obligations or liabilities that cannot lawfully be excluded.

4.5 If the trial does not convert, we retain the trial Account for 30 days after expiry to allow resumption or an export request. Deletion then follows section 19.6. Earlier valid deletion instructions and shorter content-specific retention periods take precedence. We do not charge merely because trial data remains available for this limited purpose.

5.1 Plan entitlements, including permitted Users, concurrent active jobs (where the plan states a limit), job duration, AI Credits, video invites, video retention and support, are disclosed before purchase and recorded in the Account or Order Form. Limits may be enforced in the product. Where an allowance is described as unlimited, it is subject to the fair-use ceiling disclosed for that plan (for video invites, 1,000 invites per month). Some plans are offered only to organisations within the Headcount bands shown at purchase. A published list-price or feature change does not itself amend an existing Subscription Term.

5.2 Included monthly Credits reset at the start of each Billing Month and do not roll over, except where the plan details state a roll-over allowance (currently Enterprise, where unused included AI Credits accumulate up to three times the monthly allocation). Annual billing does not provide all twelve monthly allowances at once. Top-up Credits are used after included Credits, remain valid while a paid Subscription remains continuously active and expire when that paid Subscription ends. They have no cash redemption value and are non-refundable subject to section 7.6. If Credits run out, AI actions that need Credits pause; where automatic scoring is configured, waiting Candidates are queued and scored in arrival order once Credits are available again through a top-up, the next monthly allocation or a policy you have enabled in the Account. You can clear the queue at any time, and it lapses when the Subscription ends. Where you enable it in the Account, part of the next Billing Month's included Credits (up to the percentage you choose) may be drawn early when Credits run out; Credits drawn early are deducted from the next monthly allocation and any unused part does not carry over.

5.3 The Credit cost of an AI action is displayed before it runs; for a batch operation the per-item cost and the number of items are shown so that the total can be determined. We give at least 30 days' notice of a material increase in action costs. An increase will not apply during an existing prepaid annual Subscription Term. Model changes remain subject to sections 10, 14 and 17.

5.4 If an AI action fails to produce any output because of an error in the Service or at an upstream provider, we will restore the Credits consumed once the error is confirmed. An output is not a failed action merely because the Customer dislikes it or it requires correction within the disclosed limitations of AI. Disputed metering can be reported to support@hireall.com for reasonable investigation. Restoration of metered Credits corrects consumption and is separate from any Service Credit under Annex B.

5.5 One video interview invite covers one dispatch to one Candidate with up to three questions. When you send invites from the video interview send screen, the screen lists the Candidates and the number of invites the dispatch will use before you confirm, and invites are sent to, and consumed for, only the Candidates on the list you confirm. A Customer-initiated repeat dispatch uses another invite. Where a duplicate dispatch, or a dispatch to a Candidate who was not on the list you confirmed, is confirmed to have been caused by a Service error, we will restore the invite. A Candidate's failure to respond does not restore an invite.

5.6 Pricing is per organisation and applicable Headcount band, subject to accepted Account limits. A Headcount change applies at the next renewal following section 3.1 and the price-notice requirements in section 6.7.

5.7 You may upgrade during a Subscription Term; the upgrade takes effect immediately and the additional recurring Fee is charged pro rata for the remaining term through your payment method, as shown before you confirm. Downgrades take effect at renewal and do not produce a current-term refund. The plan comparison identifies the features and limits of the lower plan so that you can export data or adjust usage before the downgrade.

5.8 Additional Credits (AI credit and video invite packs) and any other add-ons offered in the Account may be purchased by Users with billing authority. The purchase screen or Order Form states whether an item is one-off or recurring and its price. We do not charge automatic top-ups unless you enable them: a User with billing authority may switch on automatic Credit top-ups in the Account by choosing the pack to buy, accepting the authorisation shown there and setting a maximum number of top-ups per Billing Month; each automatic charge uses the card on file, is notified to you with a receipt, and the setting can be switched off at any time. Every other purchase is initiated by a User. Recurring add-ons follow the associated Subscription's renewal and cancellation unless expressly agreed otherwise.

6.1 Fees are payable in advance for each monthly or annual Subscription Term, unless an Order Form expressly states otherwise. Any annual discount applies in return for the annual commitment. An annual Subscription is not a monthly cancellable plan, even where instalment payments are agreed. Purchase screens and Order Forms identify the currency, Fees, billing period and renewal arrangements before acceptance; taxes are shown where we are required to charge them. Prices in currencies other than US dollars are derived from the US-dollar list price using a published reference exchange rate that we update periodically; the amount shown at purchase is the amount charged, and it does not change during the Subscription Term or at renewal merely because the exchange rate has moved.

6.2 Self-service payments are processed through Stripe. You authorise charges for the selected Subscription and renewals, for upgrades or usage purchases authorised by an appropriately permitted User, and for automatic Credit top-ups while you keep that setting enabled under section 5.8. We do not store full payment card numbers. Removing a payment method, stopping use or a failed payment does not constitute cancellation.

6.3 Order Form invoices are due within 30 days of invoice date unless the Order Form states otherwise. Fees exclude VAT and similar transaction taxes, which are added where required. You are not responsible for taxes on Hireall's net income. If withholding is legally required, you will provide evidence and cooperate in obtaining available treaty relief; except to the extent prohibited by law or otherwise agreed, payments will be increased so that Hireall receives the agreed net Fee.

6.4 If a payment fails or an invoice is overdue, we notify you and may retry an authorised payment. If an undisputed amount remains unpaid 14 days after notice, we may suspend access under section 18. Overdue undisputed invoiced amounts may bear simple interest at 4% per year above the Bank of England base rate, to the extent permitted by law.

6.5 Please raise billing disputes promptly with billing@hireall.com, preferably within 30 days of the charge or invoice, identifying the amount and reason. Missing that period does not automatically waive rights concerning a billing error or an otherwise valid claim. You must pay undisputed amounts. We will not suspend solely for an amount disputed reasonably and in good faith while both parties cooperate to resolve it.

6.6 Subscriptions renew automatically for successive periods of the same length unless cancelled under section 7. Renewal remains subject to the notified price and applicable Terms. We will not charge a renewal before its renewal date.

6.7 We may change prices at renewal after at least 45 days' written notice. If notice arrives after a contractual non-renewal deadline, you may still prevent the affected renewal by notifying us before its renewal time. No price increase applies retrospectively or during a committed term except an authorised upgrade or purchase, a legally required tax change or an express written agreement.

7.1 Cancellation means disabling automatic renewal. A cancellation request does not end a paid Subscription before the expiry of its current Subscription Term. Subject to lawful suspension or termination under sections 18 and 19, access remains available until that expiry and the Subscription then ends without renewing.

7.2 You may cancel a self-service Subscription at any time before its renewal time through billing settings or by written notice to billing@hireall.com or legal@hireall.com. No additional notice period applies. Renewal occurs at the time of day (UTC) at which the current period started; the Account shows the renewal date and time in UTC, and the billing portal shows the renewal date. A cancellation submitted through billing settings, or received at either designated e-mail address, before that time prevents the upcoming renewal even if processed later. The Account confirms the cancellation and shows the end of the current term. A timely cancellation is not ineffective merely because confirmation is delayed.

7.3 Either party may prevent renewal of an Order Form Subscription by giving at least 30 days' written notice before the current Subscription Term ends, unless the Order Form states another period. Sections 2.3 and 6.7 protect the Customer's ability to reject a late-notified adverse change or price increase. An Order Form may expressly vary these commercial arrangements.

7.4 Except as expressly provided in sections 7.5 to 7.8, Annex A, an applicable Order Form or mandatory law, paid Fees are non-refundable and committed Fees remain payable for the full Subscription Term. No refund, partial refund or Service Credit is due for voluntary cancellation, non-use, reduced hiring activity, dissatisfaction within disclosed Service limitations, unused days or months, unused Credits, unused add-on capacity or a downgrade. This applies to monthly and annual Subscriptions. Cancelling an annual Subscription stops renewal and does not refund remaining months; agreed instalments for the current committed term remain payable on their original due dates. A mandatory early switching right is governed by Annex A.8, not an automatic charge for all remaining Fees.

7.5 One-off purchases and top-up packs are non-refundable and do not renew unless expressly stated at purchase. A trial ends without any charge as described in section 4.2. A duplicate, mistaken or otherwise unauthorised charge will be corrected where established; correcting a billing error is not a cancellation refund.

7.6 Refunds on qualifying termination. We will refund prepaid Fees attributable to the affected Service for the period after effective termination if: (a) the Customer validly terminates for Hireall's material breach under section 19.2, including a material failure to provide contracted core functionality; (b) Hireall terminates or permanently discontinues a paid Service other than because of the Customer's breach, including under section 21.3; (c) either party terminates under section 23.3 because a qualifying force-majeure event prevents Hireall from providing the affected Service; or (d) the Customer terminates an affected Service under an express, valid DPA right following an unresolved, substantiated sub-processor objection. For these terminations, recurring Fees for periods after effective termination cease and are not accelerated. Separately purchased, unused and unexpired top-up Credits rendered unusable by that termination are refunded at their actual purchase price per unused unit. Included allowances are part of the Subscription Fee and are not refunded separately. Refund eligibility depends on the ground for termination, not which party sends the notice. A request made for convenience remains governed by sections 7.1 to 7.4.

7.7 Refund calculation and payment. Refunds use the actual Fees paid for the affected Service after discounts, allocated by the days in the relevant paid term to the refundable period specified in section 7.6 or 23.3; a partial day is apportioned by elapsed time. For a terminated add-on, its separately stated Fee applies. If no separate price exists, we use a reasonable allocation based on the contracted functions and explain it. We pay refunds within 30 calendar days after effective termination, normally to the original payment method, with any tax adjustment required by law. A refund is not replaced by an account credit without your agreement. Only amounts already recovered for the same Service and same period are deducted to prevent double recovery; compensation for a different period or loss is not deducted. Unpaid Fees for a period that would otherwise be refunded are cancelled instead of being collected and repaid.

7.8 Temporary interruption and mandatory rights. Temporary technical interruption or an isolated SLA failure is addressed by Service Credits under section 17 and Annex B, rather than a cash refund. Credit restoration for failed metered actions is governed by section 5. A persistent or otherwise material failure may give rise to termination and a refund under sections 7.6 and 19.2; force majeure is governed by section 23.3. Nothing in these Terms excludes any termination, repayment, damages, switching or other remedy to the extent it cannot lawfully be excluded or restricted.

8.1 You are responsible for your recruitment practices and use of the Service, including compliance with applicable employment, equality, anti-discrimination, pay-transparency, privacy, communications and AI laws. You must provide appropriate Candidate privacy information, identify a lawful basis and obtain consent where required. Where Candidates are sourced indirectly, your information must address the source of the data and the applicable notice timing.

8.2 Job posts must be genuine, accurate, lawful and non-discriminatory and concern real vacancies with your organisation or an organisation for which you are authorised to recruit. Where the law requires it, job posts must state pay or a genuine pay range and you must not ask Candidates about their salary history. You must not require Candidates to pay to apply. You must honour applicable privacy requests, objections and communication opt-outs and configure access, integrations and retention appropriately.

8.3 You must not use the Service for unlawful or unsolicited communications, unrelated harvesting of Candidate data, deceptive recruitment or activities infringing another person's rights. You must not upload malware, gain unauthorised access, interfere with other Accounts or circumvent limits, metering or security controls.

8.4 Special-category personal data and criminal conviction or offence data may be processed only where the relevant feature expressly supports that category and you have the required legal basis, additional processing condition and safeguards. The document verification feature can receive and store documents a Candidate uploads. A health or criminal-record document is stored, and submitted to the automatic consistency check, only where the Candidate has given the separate explicit consent the Service asks for; you must not make that consent a condition of applying or of completing the check, and the Service will not let you require a file for those types. A document list that includes such an item is never sent automatically. A recorded outcome may itself reveal sensitive information and is subject to the same applicable restrictions. You must not upload protected health information regulated by HIPAA; the Service is not offered for processing requiring a HIPAA business associate agreement.

8.5 You must not copy, modify, reverse engineer, decompile or create derivative works of the Service, except to the extent a restriction is prohibited by law. You must not scrape the Service, resell Account access, remove proprietary notices or offer it as a standalone service bureau. Permitted recruitment-agency use under section 16 does not authorise reselling the platform or allowing unapproved access by agency clients.

8.6 We may remove or restrict content reasonably believed to breach this section. We will identify the reason and allow a reasonable opportunity to remedy where practicable, subject to urgent protection, legal restrictions and section 18.

8.7 The Acceptable Use Policy supplements this section with detailed rules on job posting standards, candidate e-mail messaging (including lawful basis, identification and opt-out handling), AI features, API use and security, and how to report abuse. A material breach of the Acceptable Use Policy is a breach of this section.

9.1 For Candidate data processed on the Customer's behalf in the Service, the Customer acts as controller or, where recruiting on behalf of another controller, as its authorised processor. Hireall acts as processor or sub-processor accordingly under the DPA. Where you act for another controller, you must obtain the authorisation necessary to appoint Hireall and give instructions. Any activity in which Hireall or Youthall independently determines processing purposes is separately identified in the applicable privacy notice and data-sharing arrangements; this section does not change the parties' actual legal roles.

9.2 You determine hiring decisions and are responsible for your Candidate communications, the content and validity of offers and pre-employment documents, and disputes arising from your recruitment practices. This allocation does not make you responsible for the part of a claim caused by Hireall's own breach or unlawful conduct.

9.3 Hireall supplies software and does not select Candidates for employment, guarantee their suitability or act as your employment agent. You must determine whether electronic acceptance of an offer meets applicable formalities. A platform acceptance record is evidence of the recorded action, not a guarantee of enforceability in every jurisdiction.

9.4 Candidates may use available controls to withdraw applications, object to processing or request deletion. We route and assist with those requests under the DPA. The applicable workflow, including the automatic anonymisation of sourced Candidate records on objection, constitutes a standing documented instruction to the extent disclosed to and authorised by the Customer. Requests must be handled according to their scope and applicable law, including justified restrictions or retention for legal claims; a withdrawal does not automatically require erasure of every related record.

9.5 You must not re-import a Candidate to circumvent a valid objection or deletion request. This does not prevent processing a later Candidate-initiated application or other fresh processing where independently lawful and consistent with the earlier request. A minimal suppression record may be retained where lawful and necessary to respect the request, with access, use and retention restricted to that purpose.

9.6 You may record your own employees in the Account as internal talent and consider them for your own roles. You are the controller of that data. Using recruitment data to assess an internal move is a change of purpose: you must have a lawful basis for it, you must inform the employee before you record them, and the Service asks you to confirm that you have done so. The Service is not a performance-management, appraisal, succession-planning or workforce-monitoring system, and you must not use it as one. Where the Service computes a readiness figure for such an employee, it is advisory input for a person to read, not an assessment of the employee and not a decision about a role; section 10 and the Acceptable Use Policy apply to it as they do to any other output.

10.1 Optional AI features may include CV parsing, job-description matching, match scores, bulk matching, talent-pool search and drafting. The AI Transparency Notice describes each feature's intended purpose, material limitations, relevant inputs, available oversight, fairness safeguards and model-provider arrangements.

10.2 AI outputs may be inaccurate, incomplete, biased or unsuitable for a particular role. They support recruitment judgment and do not guarantee Candidate suitability, compliance or an employment outcome. You must not use the Service to make a decision materially affecting a Candidate solely through automated processing. A suitably trained person must meaningfully assess relevant information, have authority to change the result and review outputs before relying on them for such a decision. Merely approving a score without assessment is not meaningful review. Automation rules that use an AI score run on their own unless you choose in the Account to have each of their steps confirmed by a User or to approve each rule before it runs. Whatever you choose, such a rule does not move a Candidate to a rejected stage or an offer stage, or create an offer, without a User's confirmation for that Candidate. You are responsible for the rules you configure and must not configure automation that, without the review required by this section, rejects Candidates or has an equivalent effect, for example by moving them to a stage or sending them a message that stands in for a rejection. Using automation does not relieve you of your obligations under this section.

10.3 Each party is responsible for the legal obligations applicable to its actual role. You are responsible for lawful deployment, Candidate notices, required assessments or audits and your decision-making practices, including under applicable GDPR, UK GDPR, EU AI Act and local hiring-tool rules such as those in New York City, Illinois, Colorado and California. Hireall remains responsible for obligations applicable to it as a provider or processor and will provide reasonably necessary documentation and cooperation concerning the Service. Describing an output as advisory does not itself determine its regulatory classification.

10.4 We provide controls to enable human review and to disregard or override AI recommendations, and permit AI features to be disabled, and automation rules that use an AI score to be set to ask a User before each step, at any time as described in the Documentation. We provide available contextual explanations of scores and relevant activity records. The Documentation identifies the scope, retention and export availability of those records and any limitations on explanations; no statement guarantees that every underlying model operation is interpretable.

10.5 AI features use third-party model providers, currently including Google and OpenAI, as identified in the AI Transparency Notice and Sub-processor List. We use arrangements that prohibit those providers from using Customer Data to train their models. We do not use Customer Data to train or fine-tune foundation models or other machine-learning models. Processing needed to generate requested outputs, retrieve information or maintain Customer-specific indexes is not permission to train a model. Any separate training arrangement would require an express written agreement and an appropriate lawful basis.

10.6 The fact that data is not used for training does not mean providers have no retention for authorised processing or security purposes. Applicable providers, retention, locations and transfer safeguards are described in the DPA and related notices. A change involving a new sub-processor follows the DPA notice and objection process. Material model changes that alter intended purpose, data use or principal limitations will be notified before deployment where practicable and remain subject to sections 2 and 17.

10.7 As between the parties and to the extent rights exist and can be transferred, Customer-specific inputs and outputs are Customer Data. Hireall assigns to you any rights it acquires in those outputs, excluding underlying Service technology. Outputs may not be unique or capable of intellectual property protection, and we do not guarantee otherwise.

10.8 You must not use AI features to infer protected or sensitive characteristics for discriminatory hiring, undertake prohibited biometric categorisation or emotion recognition, circumvent the fairness safeguards described in the AI Transparency Notice, or train or develop a competing product using the Service. Lawful internal evaluation, required bias audits, accessibility assessments and regulatory reviews are permitted, subject to confidentiality and agreed security arrangements. AI actions consume Credits under section 5.

11.1 Before requesting a recorded interview, you must inform the Candidate about recording, intended use, access, applicable retention and any AI processing, and obtain consent where required. You are responsible for appropriate accessibility accommodations and a lawful alternative assessment method where required.

11.2 Video retention is 60, 90 or 365 days as stated in the accepted Subscription details, measured from recording unless a different start point is expressly disclosed. This is a maximum product retention period, not a requirement to retain a video for that long. Earlier Customer deletion instructions, valid privacy requests and Account deletion under section 19 may shorten it. A downgrade that shortens retention will be notified before taking effect to permit timely export. Deleted or expired recordings cannot subsequently be exported.

11.3 A Candidate may request to re-record an answer. Hireall may facilitate this only within an administrator-authorised support policy or on specific Customer instructions, with notice to the Customer and an appropriate record of the intervention. We do not substantively change a Candidate's response on our own initiative.

11.4 Partner assessments are subject to the applicable partner terms. You must assess their suitability, accessibility and lawful use for the role. If Hireall engages a partner as its own processor, the DPA applies to that processing.

11.5 Candidate e-mails and other messages are sent on your behalf. You must identify the appropriate sender, establish a lawful basis and honour applicable opt-outs, as detailed in the Acceptable Use Policy. We may apply reasonable sending limits and proportionate restrictions for abuse, complaints, invalid addresses or deliverability concerns. We do not guarantee delivery by third-party networks and remain responsible for our own contractual obligations.

12.1 At your direction, the Service may publish jobs to your careers page or website, prepare them for Google for Jobs indexing, or distribute them to selected boards, aggregators and the Youthall talent network. Each channel determines its own acceptance, display and ranking. We do not guarantee placement, responses or continuing availability of a particular channel.

12.2 When you enable an integration, you instruct us to exchange the data reasonably necessary for its disclosed function. The integration information describes the relevant recipient and purpose. Connecting a service does not authorise unrelated disclosure of Candidate data or publication of private Candidate profiles.

12.3 A Third-Party Service independently chosen by you operates under its own applicable terms and privacy notice. Its status as controller, processor or sub-processor depends on its actual processing role and engagement, not solely on inclusion in a list. Suppliers appointed by Hireall to process Customer Data on its behalf are governed by the DPA and identified through its sub-processor arrangements.

12.4 We are not responsible for the independent acts, services or terms of a Third-Party Service, except to the extent a loss results from Hireall's breach, integration implementation or instructions. We remain responsible for our own subcontractors as required by the agreement and applicable law. A third party withdrawing or changing an interface does not, by itself, create a contractual cancellation refund. We will use reasonable efforts to adapt or provide notice, and sections 17, 19 and 7.6 remain applicable.

12.5 Our use of data received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements, where applicable.

13.1 As between the parties, you retain all rights you hold in Customer Data. This does not assert ownership over a person's statutory privacy rights or over rights belonging to Candidates or other third parties.

13.2 You grant Hireall a non-exclusive, royalty-free licence for the duration needed to perform the agreement to host, copy, transmit, display and otherwise process Customer Data solely to provide, secure, maintain and support the Service, publish jobs to selected channels and implement lawful documented instructions. Any international processing remains subject to the DPA. The licence continues after termination only as necessary for permitted export, deletion, legal retention and backup handling.

13.3 You must have the necessary rights, authority and lawful bases to submit Customer Data and instruct its processing. We will not sell Customer Data or use it to advertise to Candidates or train models, subject to section 10.5.

13.4 We may use genuinely anonymous, aggregated usage and performance information to operate and improve the Service and produce industry statistics. We apply measures reasonably designed to prevent identification of a Customer, User or Candidate, including from small groups or combination with other reasonably available information. We will not attempt re-identification or publish identifiable Customer Confidential Information. Removal of direct identifiers alone does not make information anonymous.

13.5 Processing personal data to create anonymous information must itself be lawful and, where performed as processor, within documented instructions under the DPA. Pseudonymous operational data remains subject to applicable privacy obligations. Controller processing of User account, billing and security information is explained separately in our Privacy Policy.

13.6 You may voluntarily provide feedback. We may use that feedback to improve the Service without payment or attribution, but this permission does not transfer ownership of Customer Data or permit use of your Confidential Information beyond the agreement.

13.7 Hireall and Youthall operate complementary platforms with connected recruitment functions. You authorise Hireall to involve Youthall and exchange Customer Data reasonably necessary to: receive applications that Candidates choose to make with a Youthall profile; publish jobs to Youthall when selected; receive applications and Candidate-authorised profile information; support connected application, communication and recruitment workflows enabled by you; and provide joint support, security and fraud prevention. This includes relevant identity and contact details, selected profile and application information, job content and workflow records needed for those functions. Processing of private employer notes, scorecards, internal communications or offers is permitted only where reasonably necessary for an enabled function or authorised support or security activity, under confidentiality and access controls; those records are not made available to other employers or added to a public Youthall profile by reason of this integration. Where Youthall processes Customer Data on Hireall's behalf, it acts as an authorised sub-processor under the DPA, with equivalent written obligations and applicable transfer safeguards, and Hireall remains responsible under the DPA. Where Youthall independently provides its own candidate account or talent-network services, its controller activities are governed by its own terms and privacy notice, as explained in the Candidate Privacy Notice. Accepting these Terms does not authorise unrelated marketing, model training or indiscriminate copying of private employer records into Youthall's independent database.

14.1 Each party must comply with data protection laws applicable to its activities. The DPA governs processor activities, including documented instructions, confidentiality, technical and organisational measures, sub-processors, assistance with privacy requests and assessments, security incidents, audit information and return or deletion of data.

14.2 Primary Customer Data hosting is in the European Union using Amazon Web Services in Frankfurt. This describes primary hosting and is not a representation that every support, communications or AI processing activity occurs exclusively in that location. The DPA and Sub-processor List identify authorised processing locations and applicable safeguards. A material change to primary hosting requires advance notice and compliance with the DPA.

14.3 We maintain risk-appropriate measures including encryption in transit and at rest, logical tenant separation, role-based access, access logging and backup and recovery arrangements, as detailed in the DPA's security annex. We will not materially reduce the overall level of agreed security during a Subscription Term. Our security page is explanatory and does not independently amend the agreed baseline.

14.4 We notify you without undue delay after becoming aware of a personal data breach affecting Customer Data and provide available information in stages as appropriate, in accordance with the DPA, which identifies incident contacts and the agreed maximum initial-notice period. You remain responsible for your own notifications to authorities or individuals, with our required assistance.

14.5 International transfers must use a valid mechanism under the law applicable to the transfer, including relevant EU or UK safeguards and, where applicable, Turkish data transfer requirements. Where a KVKK standard contract is required, the transferring party in Türkiye starts it and notifies the Board; Hireall executes the instrument if asked and does not initiate or file that notification. Where the Customer obtains the Service through STJ under a contract that appoints STJ as processor and authorises a sub-processor outside Türkiye, STJ is that transferring party as between STJ and Hireall for Customer Personal Data STJ transfers in that processor capacity. A disclosure from STJ's or Youthall's own user database in STJ's capacity as independent controller is a separate transfer; STJ is the transferring party for that disclosure. Instruments that govern Hireall's transfers to Youthall do not themselves authorise a transfer from Türkiye to Hireall. Choosing English law or EU hosting does not replace those requirements.

14.6 You must maintain appropriate notices, lawful retention decisions and authorised access settings. You are responsible for deciding which data to retain and exporting it before its applicable deletion deadline. The Service lets you search, export and correct Candidate records yourself; deletion or anonymisation of an individual Candidate record or a whole job is carried out by Hireall on your documented instruction under the DPA, normally within five business days and at the latest within 30 days, and always within any shorter period that applicable law or a Candidate's request requires. This does not relieve Hireall of its agreed security, backup, assistance or export obligations.

15.1 "Confidential Information" means non-public information disclosed by one party to the other that is marked confidential or would reasonably be understood to be confidential. Customer Data is your Confidential Information. Hireall's non-public technology, security documentation and individually negotiated pricing are its Confidential Information.

15.2 The receiving party must use Confidential Information only to perform the agreement or exercise rights under it, protect it with at least reasonable care and disclose it only to its Affiliates, personnel, professional advisers and contractors who need to know for those purposes and are subject to comparable confidentiality obligations. The receiving party is responsible for their compliance when acting on its behalf. Personal data disclosures remain subject to the DPA and applicable law, including the specific Youthall arrangements in section 13.7.

15.3 These obligations do not apply to information that becomes public without breach, was lawfully known without restriction, is independently developed without use of the disclosed information or is lawfully obtained from a third party without a duty of confidence.

15.4 Legally required disclosure is permitted to the extent required. Where lawful, the receiving party must give prompt notice and reasonable assistance with protective measures. Disclosure to a competent regulator, court or professional adviser for a lawful complaint, audit or claim is not prohibited, provided appropriate confidentiality safeguards are used where available.

15.5 These duties continue for five years after the agreement ends, and for Customer Data and trade secrets for as long as the information remains confidential. Retention is separately limited by the DPA and section 19. Liability is governed by section 22.

16.1 Hireall and its licensors retain all rights in the Service, Documentation, trademarks and underlying technology, including improvements. Customer Data rights remain governed by section 13 and AI output rights by section 10.7.

16.2 During a valid Subscription we grant you a limited, non-exclusive, non-transferable right to use the Service for your organisation's and participating Affiliates' recruitment within the accepted limits. If you are a recruitment agency, this includes authorised recruitment for clients within those limits, subject to section 9.1. Client access requires appropriately authorised User accounts and does not create a separate tenancy or right to resell the platform.

16.3 You are responsible for participating Affiliates' and authorised Users' compliance. Affiliates do not acquire separate claims or multiply a liability cap by using the Account. The Hireall name and logo may not be used without permission except as displayed by the Service or as reasonably necessary to identify it accurately without suggesting endorsement.

17.1 We will use commercially reasonable efforts to maintain the paid Service's availability and will meet the measurement and Service Credit commitments in Annex B, including the 99.8% monthly availability commitment. Planned maintenance is announced and managed under that Annex. No term guarantees uninterrupted or error-free operation. Annex B applies to paid self-service and Order Form Subscriptions unless expressly varied in an Order Form.

17.2 Support is available at support@hireall.com and through the support portal in the Account. Purchased support hours, channels, time zone and response targets are stated in the accepted plan, Annex B or the Order Form. A response target is not a guaranteed resolution time unless expressly stated.

17.3 We may improve and change the Service, but will not materially reduce the core functionality of a paid Subscription during its current term without providing materially equivalent functionality. We give at least 30 days' notice before removing a material feature, except where shorter notice is strictly necessary for law or urgent security. Such exceptions do not remove a Customer's rights for a material failure to provide the contracted Service.

17.4 Service Credits under Annex B are the sole contractual monetary remedy for failure to meet the availability commitment as such. They do not restrict termination and refunds under sections 7.6, 19.2 and 23.3, claims for a separate breach of confidentiality, data protection, security or another express obligation, or rights that cannot lawfully be restricted. A persistent or otherwise material failure to provide the Service is not reduced to an isolated SLA claim merely because it also affects availability. The same loss cannot be recovered twice.

17.5 Beta, preview and early-access features are optional, provided as is, may change or be withdrawn and are excluded from uptime commitments and the section 21.1 indemnity. Applicable data protection, confidentiality and agreed security obligations continue to apply to any Customer Data processed through them. Experimental limitations are disclosed before activation.

18.1 We may suspend the affected part of an Account where reasonably necessary to address an actual or reasonably suspected security threat, material acceptable-use breach, unlawful use, legal requirement or non-payment meeting section 6.4. Restrictions will be proportionate to the issue and not used to avoid our own obligations.

18.2 We provide prior notice and a reasonable opportunity to remedy where practicable. For urgent action, we give notice as soon as lawful and practicable afterwards, explaining the reason and steps for restoration. We restore access promptly once the grounds are resolved.

18.3 Fees remain payable during a lawful suspension caused by your breach or non-payment. A restriction caused by Hireall's breach does not fall within that rule; Annex B and sections 7.6, 19, 20 and 22 apply as relevant. A suspension caused by an external legal requirement or qualifying force majeure is governed by sections 7.6 and 23.3 as applicable. We are not liable for loss resulting solely from a proportionate suspension properly made under this section, but this does not exclude liability for Hireall's independently actionable breach.

18.4 During a suspension we may, where safe and lawful, allow restricted access to existing Customer Data or provide an export on request. We may refuse a particular export where it would create the security risk or breach the legal restriction that justified suspension. The DPA and mandatory data access rights remain applicable.

19.1 The agreement starts on valid acceptance and continues while any trial or Subscription remains active and for any applicable wind-down obligations. Ordinary cancellation takes effect only at the end of the relevant Subscription Term under section 7.

19.2 Either party may terminate the affected Subscription or, where the breach affects the agreement as a whole, this agreement by written notice if the other materially breaches it and fails to remedy within 30 days after receiving a notice describing the breach. A breach incapable of remedy may justify immediate termination where permitted by applicable law. Statutory and common-law termination rights are preserved to the extent not lawfully excluded.

19.3 Either party may terminate for the other's insolvency, administration, liquidation or cessation of business only to the extent permitted by applicable insolvency law. No provision permits a termination, payment demand or supply condition prohibited by a mandatory insolvency restriction.

19.4 When a paid Subscription ends, ordinary use stops and no renewal Fee is charged following valid non-renewal. For 30 calendar days afterwards, you may sign in solely to retrieve existing Customer Data through available export and download functions, or request an assisted export under Annex A.4. That catalogue also applies to ordinary exports for Customers outside Annex A's statutory scope. Data is supplied only to the extent held and not already lawfully deleted or expired. Retrieval access does not extend the paid Subscription or incur a Subscription Fee. If Annex A applies, its retrieval period governs and is not shortened by this section. Data rights do not include Hireall's source code, proprietary model weights or other Customers' data.

19.5 Standard exports and reasonable assistance needed to retrieve the stated Customer Data are included. Substantial optional migration or transformation work requires a separately accepted scope and price and will not be made a condition of exercising mandatory rights. We do not promise to replicate another supplier's proprietary functionality.

19.6 Unless the Customer lawfully instructs earlier deletion, we delete Customer Data from active systems after the applicable retrieval period ends, normally within 30 calendar days and in any event no later than 60 calendar days after that period ends. If the Customer instructs earlier deletion, we act without undue delay and within the shorter period required by the DPA or law. Residual copies in protected backups are isolated from ordinary use and are overwritten or deleted in the ordinary course of our backup rotation, no later than 90 calendar days after deletion from active systems; until then they are not returned to ordinary processing. If a backup is restored for disaster recovery, the deletion is reapplied before the affected data is returned to ordinary processing. The same sequence applies after an unconverted trial's 30-day recovery period. Shorter DPA or content-specific periods take precedence. Any information retained as anonymous statistics must first meet section 13.4 and must not be retained as recoverable Customer records. Legal retention is limited under section 19.7. We confirm completion on request.

19.7 Retention required by law is limited to the necessary records and period, with restricted access and no unrelated use. We explain the basis on request where lawful. Ordinary non-renewal does not release the current-term commitment. Fees earned before effective early termination remain payable, subject to billing corrections and express refunds. On a qualifying termination under section 7.6, Fees for future periods are cancelled. If Hireall validly terminates for the Customer's material breach, unpaid Fees already earned remain due; any claim for loss of the remaining commitment must account for avoided costs and mitigation, must not duplicate prepaid amounts retained, and remains subject to applicable law. Ending access does not itself authorise acceleration of future instalments. Confidentiality, accrued payment and refund obligations, wind-down data handling, intellectual property, liability and dispute provisions survive as necessary.

19.8 If mandatory law gives the Customer switching, portability, deletion or earlier termination rights, those rights prevail over inconsistent notice, term, access or fee provisions. For Customers within Chapter VI of Regulation (EU) 2023/2854, Annex A sets out the switching procedure, exportable data, timelines and conditions for any separately agreed early termination amount, and forms part of the agreement. Hireall will provide the required cooperation, information and export interfaces. No charge prohibited by that law is payable. This section does not create a general discretionary early-cancellation right outside mandatory law.

20.1 Each party warrants that it has authority to enter into the agreement. Hireall warrants that the paid Service will perform materially in accordance with the applicable Documentation and will be provided with reasonable skill and care.

20.2 If you notify us of a material non-conformity with reasonable supporting details, we will investigate and use reasonable efforts to correct it without additional charge within a reasonable period. If it constitutes a material breach and remains uncured within section 19.2's cure period, you may terminate the affected Subscription and receive the refund under section 7.6. Availability claims also follow Annex B. These remedies do not permit double recovery or exclude rights that cannot lawfully be excluded.

20.3 Except as expressly provided and to the extent legally permissible, other implied warranties or terms are excluded. We do not guarantee uninterrupted or error-free operation, particular recruitment results, Candidate suitability, third-party job placement, accuracy or uniqueness of AI outputs, or third-party assessment validity. These exclusions do not negate the express performance, security, confidentiality or data protection obligations in this agreement.

20.4 You acknowledge the Service's disclosed limitations and must use reasonable human and operational checks appropriate to recruitment. Nothing in this section makes you responsible for a failure caused by Hireall's own breach.

21.1 Hireall will defend the Customer against a third-party claim that the paid Service, as supplied by Hireall and used as authorised, infringes that third party's intellectual property rights, and pay damages and reasonable costs finally awarded or included in a settlement approved under this section, subject to section 22.

21.2 This obligation does not apply to the extent a claim is caused by Customer Data, an independently chosen Third-Party Service, an unauthorised Customer modification, a combination not supplied or required by Hireall where the claim would not otherwise arise, or continued infringing use after Hireall provides notice and a reasonable means to avoid that use. Trial and beta exclusions are set out in sections 4 and 17. A third-party supplier of Hireall's own technology is not automatically treated as a Customer-selected Third-Party Service.

21.3 If an infringement claim is made or reasonably likely, Hireall may procure continued use rights or modify or replace the affected functionality with a materially equivalent non-infringing alternative. If those measures are not reasonably practicable, Hireall may terminate the affected Service on reasonable written notice and refund the applicable prepaid Fees under section 7.6. Future Fees for the terminated Service cease. Any interim restriction must be proportionate. This section sets out the contractual remedies for third-party intellectual property claims, subject to section 22 and rights that cannot lawfully be excluded.

21.4 You will defend Hireall against third-party claims to the extent caused by your unlawful collection or submission of Customer Data, infringement of third-party rights in that data, unlawful hiring or communications practices, material breach of section 8 or the Acceptable Use Policy, or unlawful use of a Third-Party Service, and pay damages and reasonable costs finally awarded or included in an approved settlement, subject to section 22. This excludes the portion caused by Hireall's breach, negligence or unlawful conduct. You do not indemnify Hireall merely because a claim involves a Candidate or a connected service.

21.5 The protected party must give prompt notice and reasonable assistance at the defending party's expense. Delay reduces the obligation only to the extent it materially prejudices the defence. The defending party controls the defence with suitably qualified advisers. A settlement requiring an admission, payment or non-monetary obligation by the protected party, or failing to release it from the relevant claim, requires its prior written consent, not to be unreasonably withheld. The protected party may participate with its own advisers at its own expense. Obligations under this section concern third-party claims, not an unrestricted indemnity for every direct contractual dispute.

22.1 Nothing limits or excludes liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, wilful misconduct, or liability that cannot lawfully be limited or excluded. Obligations to pay properly due Fees, correct billing errors, pay express refunds or apply earned Service Credits are not reduced by a damages cap; Service Credits remain subject to their own limits in Annex B. The trial limitation below remains subject to this section.

22.2 Subject to section 22.1, neither party is liable for indirect or consequential loss, or loss of profits, revenue, goodwill, business opportunity or anticipated savings. This exclusion does not prevent recovery of amounts payable to third parties under section 21 or reasonable direct costs of restoring Customer Data and responding to a security incident caused by the other party's breach, to the extent otherwise recoverable and within the applicable cap. Regulatory fines are recoverable between the parties only to the extent lawful and otherwise recoverable under applicable law.

22.3 The "Reference Fees" are Fees paid or payable for the Service attributable to the twelve months immediately preceding the first event giving rise to liability under this agreement, or the elapsed paid-service period if shorter. Advance payments are allocated to the periods they cover. If that event occurs within the first twelve months of paid service, Reference Fees are the greater of that amount and the Fees committed for the initial Subscription Term, counting no more than its first twelve months and excluding uncommitted future renewals. Related acts or omissions constitute one event, dated when the first occurred. The Reference Fees are determined once using that first event for the aggregate limits below.

22.4 Subject to sections 22.1 and 22.5, each party's total aggregate liability arising out of or in connection with this agreement is limited to the Reference Fees, whether the claim arises in contract, tort, negligence, breach of statutory duty or otherwise.

22.5 For claims arising from breach of confidentiality, breach of the DPA or the third-party indemnities in section 21, a higher aggregate limit of twice the Reference Fees applies. This is a combined ceiling for all capped liability under this agreement, including liabilities within section 22.4, not an additional amount on top of that limit. The general limit still applies to ordinary claims. Multiple legal characterisations of the same facts, multiple claimants acting through the Customer or claims under multiple agreement documents do not multiply these limits. The Customer and its participating Affiliates share the applicable limit.

22.6 The higher limit applies to personal data incidents between the parties even if the same incident also breaches confidentiality. The DPA is read consistently with this allocation unless a signed variation expressly changes it. Nothing limits a data subject's or regulator's rights, or overrides mandatory transfer terms or allocation of liability required by law.

22.7 For a Customer that has only used the free trial and has no paid Subscription, Hireall's total aggregate liability is limited to £100, subject always to section 22.1 and mandatory rights under section 22.6. This trial limit applies instead of the fee-based limits. It does not waive the obligation to comply with the DPA or security commitments.

22.8 No party may recover more than once for the same loss. Service Credits or compensation already received for that loss are taken into account. Each party must take reasonable steps to mitigate recoverable losses. These limitations are intended to allocate risk in a business contract and apply only to the extent enforceable under applicable law.

23.1 Publicity. Unless you opt out in writing, we may identify you as a Customer using your name and logo on our website and in sales materials, accurately and without implying endorsement. We will respect supplied brand guidelines. You may withdraw permission by e-mailing legal@hireall.com and we will remove the reference from materials under our control within 30 days. Case studies, testimonials, performance claims and press releases identifying you require separate prior approval.

23.2 Assignment. Neither party may assign the agreement without the other's prior written consent, not to be unreasonably withheld or delayed, except to an Affiliate or a successor in a merger or sale of substantially all relevant assets, on written notice. The successor must assume the obligations, and the assignment does not authorise reduced protection of Customer Data or an otherwise unlawful transfer.

23.3 Force majeure. Neither party is liable for delay or failure to the extent caused by an event beyond its reasonable control that could not reasonably have been prevented or overcome through appropriate precautions and continuity measures. A supplier failure qualifies only if it meets that test; ordinary capacity shortages, lack of funds and avoidable technical outages do not automatically qualify. The affected party must notify the other, describe the impact and take reasonable mitigation steps. If material non-performance continues for more than 60 consecutive days, either party may terminate the affected Subscription by written notice. Where the event prevents Hireall from providing the affected Service, the refund under section 7.6 applies whichever party terminates. In addition, where the affected paid Service was wholly unavailable to the Customer throughout a continuous period immediately preceding that termination, we refund the prepaid recurring Fees attributable to that period from the start of that continuous unavailability, subject to section 7.7 and no double recovery. Temporary force-majeure interruptions do not otherwise create a cash refund; Annex B governs any availability credits and exclusions. An event affecting only the Customer's ability or desire to use an otherwise available Service does not create a refund or release the agreed term Fees, except to the extent mandatory law requires. Unaffected obligations, including accrued payment, appropriate mitigation and continuing data protection duties, remain in force.

23.4 Notices. Legal notices to Hireall must be sent to legal@hireall.com or its registered office. Billing and self-service cancellation notices may also be sent to billing@hireall.com. Notices to the Customer go to the designated legal or billing contact, or otherwise Account administrators. Electronic notices are deemed received on the next business day in England, provided no delivery failure is received, except that timely cancellation is assessed on submission or receipt under section 7.2. This clause does not determine formal service of legal proceedings where different rules apply.

23.5 Compliance. Each party will comply with applicable anti-bribery, sanctions and export-control laws. You represent that providing the Service to you is not prohibited by applicable sanctions, including relevant ownership and control rules. Any restriction on supply will be applied in accordance with mandatory law and proportionately.

23.6 Relationship. The parties are independent contractors. The agreement does not create a partnership, joint venture, employment relationship or general agency. Processing and communications performed on the Customer's documented instructions do not authorise Hireall to make hiring commitments on its behalf.

23.7 Entire agreement. The agreement supersedes prior proposals and discussions on its subject matter. Customer purchase-order terms do not apply unless expressly accepted by Hireall in a signed agreement. Nothing excludes liability for fraud or any representation or remedy that cannot lawfully be excluded. No purchase is conditional on delivery of an unreleased feature unless expressly agreed.

23.8 Waiver and severability. Failure to exercise a right is not a waiver. If a provision is unenforceable, it will be severed or limited only to the extent legally permissible, and the remainder continues so far as it can operate lawfully. This does not authorise unilateral rewriting of the commercial agreement.

23.9 Third-party rights. Except where mandatory law or a binding data transfer instrument requires otherwise, a person who is not a party has no right to enforce the agreement under the Contracts (Rights of Third Parties) Act 1999. This does not remove a Candidate's statutory rights.

23.10 Electronic acceptance. The agreement and Order Forms may be accepted electronically and in counterparts. The Customer must ensure that persons authorising purchases and accepting terms have appropriate authority. We make the applicable accepted Terms and purchase record available on reasonable request.

23.11 Purchases through STJ. Where the Customer obtains the Service under a contract with STJ İnsan Kaynakları Bilişim ve Danışmanlık A.Ş. ("STJ", the Affiliate that operates Youthall) rather than directly from Hireall: (a) the Fees, invoicing, payment terms, cancellation and any refund are governed by the Customer's contract with STJ, and sections 4 to 7 apply between the Customer and Hireall only to the extent that contract does not provide otherwise; (b) the Customer's access to and use of the Service, Customer Data, data protection, confidentiality, intellectual property, availability, suspension, liability and disputes remain governed by these Terms, the DPA and the Acceptable Use Policy, which the Customer accepts on registration; (c) STJ is not authorised to vary these Terms or the DPA or to make commitments on Hireall's behalf, and a commitment given by STJ binds STJ only; (d) Hireall may share with STJ the Account, usage, support and billing information reasonably necessary to administer the Customer's contract with STJ; (e) where the Customer is established in Türkiye, STJ is the transferring party that concludes the KVKK Standard Contract with Hireall and notifies the Board for Customer Personal Data only if that contract appoints STJ as processor and authorises Hireall as a sub-processor outside Türkiye, as described in section 14.5 and the DPA — STJ issuing the invoice, or the Account sitting on Hireall's infrastructure, does not by itself establish that appointment; and (f) when the Customer's contract with STJ ends, the Subscription ends with it and sections 19.4 to 19.6 apply. Where that contract so appoints STJ, Hireall acts as STJ's sub-processor on the terms of the DPA.

24.1 This agreement and contractual and non-contractual disputes arising from it are governed by the laws of England and Wales, subject to mandatory laws that apply despite that choice.

24.2 Before proceedings, each party will refer the dispute to a senior representative and seek resolution in good faith for 30 days after written escalation. This does not prevent urgent relief, preservation of a limitation period, exercise of a mandatory statutory right or a report to a competent regulator.

24.3 The courts of England and Wales have exclusive jurisdiction, subject to any mandatory jurisdiction rules. Either party may seek urgent protective relief in another competent court for its intellectual property or Confidential Information. An Order Form may expressly provide another dispute-resolution mechanism.

Legal notices, DPA signatures and contract questions: legal@hireall.com

Billing and cancellations: billing@hireall.com · Support: support@hireall.com · Security: security@hireall.com

A.1 Scope. This Annex applies to the extent Chapter VI of Regulation (EU) 2023/2854 (the "Data Act") applies to the Service supplied to the Customer, including its applicable territorial scope. It prevails over inconsistent contractual provisions to the extent necessary to give effect to those rights. The export catalogue in A.4 also applies under section 19.4 outside that statutory scope. Other provisions of this Annex do not create a discretionary early-cancellation right where the Data Act does not apply.

A.2 Request and notice. You may request switching to another provider or your own infrastructure, or erasure without switching, by e-mail to legal@hireall.com or billing@hireall.com. Identify the Account, scope and intended outcome and, for a switch, any authorised destination provider. We acknowledge the request and agree the operational start promptly. We impose no minimum advance notice beyond the start date you specify, which may be immediate. The notice period we require will not exceed two months. You may expressly request a later start for your own purposes. Reasonable identity and authority checks protect Customer Data but must not be used to delay a valid request. We distinguish a switch ending the affected Subscription from a routine export or lawful parallel use that leaves it active.

A.3 Transition. From the operational start, we complete our switching obligations without undue delay and within 30 calendar days. During transition we provide reasonable assistance to you and authorised recipients, maintain the contracted functions and appropriate security, support your exit strategy and disclose known continuity risks. If a 30-day transition is technically unfeasible, we notify you within 14 working days of the request, give a substantiated explanation and specify an alternative transition no longer than seven months. Service continuity is maintained throughout that alternative period. You may extend the transition once for a period you consider appropriate. Parties cooperate in good faith, including by supplying destination details and completing actions within their control.

A.4 Export catalogue. The following categories comprise the exportable Customer Data and Customer-generated digital assets, including associated metadata, to the extent held for the Account. Existing download functions may supply individual files; an assisted export supplies the remaining categories and structured fields. Lack of a self-service button or a premium reporting entitlement does not exclude exportable data. The catalogue covers:

A.4.1 Organisation and workflow configuration: Customer-provided organisation details; Users, roles and permission assignments; jobs, descriptions, locations and publication settings; pipelines and stage definitions; custom fields, tags, templates, automation rules and integration configuration created by the Customer, excluding secret credentials. Structured data is supplied as CSV or JSON; existing tabular exports may additionally be XLSX.

A.4.2 Candidates and applications: identifiers and record relationships; contact and profile information; education, employment, languages and other stored profile fields; applications, sources, referrals, talent-pool membership, screening questions and answers, custom values, ratings, current stage and stage history; consent, notices, withdrawal, objection and suppression records to the extent lawfully disclosable. Structured fields and available timestamps are supplied as CSV or JSON, with XLSX where available. PDF profile reports may be supplied additionally and are not the sole format for structured fields.

A.4.3 Recruitment activity and outputs: notes, comments, scorecards, evaluations, interview schedules, stored communications and available delivery-status metadata; stored Customer-specific AI inputs, prompts, outputs, match scores and summaries; offers, versions, acceptance records and associated evidence held by the Service. Structured content and metadata are supplied as CSV or JSON; documents, message files and attachments are supplied in their held native format or a commonly used equivalent that preserves their content, with PDF offer copies where applicable.

A.4.4 Files and recordings: CVs, Candidate and Customer uploads, supporting documents and other attachments in their held original formats; retained video interview recordings in their recorded format (MP4 or WebM), individually or in bulk, with available identifiers linking them to the relevant records. Bulk delivery contains the original media files plus a CSV or JSON manifest, rather than representing video content as spreadsheet data.

A.4.5 Account records and reports: stored reporting data and Customer-specific activity or audit records, including records outside a plan's self-service audit export feature, as CSV or JSON, with CSV or XLSX existing report exports where available; invoices and billing documents as PDF, with relevant Account billing metadata as CSV or JSON where held. Security-sensitive material is handled under A.5.

A.4.6 Availability of records. Lawfully deleted data and expired recordings are not recreated. Unheld derived reports need not be generated merely for export, but their exportable underlying data is included. A new feature generating another exportable category must be reflected in the catalogue before purchase or activation; omission cannot remove a statutory export right. Necessary record relationships and available metadata are preserved to support reuse.

A.5 Excluded internal material. Export does not include Hireall's software, model weights, provider-created system prompts, proprietary algorithms, internal search indexes, infrastructure configuration or other protected internal assets, or other Customers' data. Internal data is withheld only on an applicable lawful ground, including intellectual property, trade secrets or security, and the exclusion must not impede or delay switching contrary to the Data Act. It does not exclude the Customer's own saved prompts, configuration, inputs, outputs or exportable metadata merely because the Service stores them internally. We supply the disclosable Customer-specific portion of mixed records and explain material exclusions. Security credentials and material whose disclosure would compromise another person's rights or system security are handled through appropriate redaction or secure alternatives.

A.6 Methods and information. Existing exports are available through the Service and billing portal; assisted exports are requested at support@hireall.com, without requiring a second request to start an already notified switch. We provide secure file delivery and the open interfaces and associated documentation required by applicable law, without a separate interface-access Fee. The Data Export Register on the Legal Hub describes data structures, formats, relevant standards, procedures and known restrictions, and provides the infrastructure-jurisdiction and international-access information, including measures addressing unlawful governmental access to non-personal data held in the Union. We provide these materials before acceptance and keep them current. This does not promise replication of a destination provider's proprietary functionality or development of new technology beyond applicable legal obligations.

A.7 Retrieval and erasure. Following the agreed transition, you have at least 30 calendar days to retrieve the exportable data and digital assets, with appropriate security and without a Subscription Fee for retrieval-only access. If a longer period is expressly agreed, it applies. Following successful switching and the retrieval period, deletion follows section 19.6 and the DPA, subject to lawful retention. For an erasure-only request, we follow the requested lawful erasure instructions without imposing unwanted retrieval or delaying deletion for a switching process you did not request. We confirm erasure on request.

A.8 Charges and settlement. We impose no switching or data-egress charge for actions required to carry out the switch under this Annex. Standard recurring Fees are payable only for the applicable notice and transition periods until the affected Subscription terminates, allocated pro rata at the contracted rate. An early termination amount is payable only if a separate amount or objectively calculable formula was expressly disclosed to and accepted by the Customer before the relevant committed period began, and only to the extent proportionate and enforceable under applicable Union and national law. These Terms alone impose no early termination amount. Where the following formula was so disclosed and accepted for an annual self-service Subscription, it is applied in this order: (i) the contracted Fee for the period used is the annual Fee paid, allocated pro rata by day from the start of the terminated annual period to the termination date; (ii) the annual discount attributable to that same period is the difference between that contracted Fee and the monthly list price of the plan in force at the start of that annual period, applied to the same period pro rata by day, so that a partly used final month counts only for the days used; (iii) the discount recovered is the lower of that difference and the Fees for the remainder of the committed period. The amount we retain is the contracted Fee for the period used plus the discount so recovered; it never exceeds the annual Fee already paid, and this formula never creates an additional payment obligation for the Customer. The remainder of the annual Fee paid is refunded under section 7.7. The formula applies only to a termination under this Annex and creates no refund right for an ordinary cancellation under section 7. Any agreed calculation must account for applicable avoided costs and mitigation, exclude prohibited switching costs, and not duplicate Fees already paid or charged for the notice or transition period. We explain the calculation and reconcile prepaid amounts: we refund any excess over earned Fees and a lawful agreed early termination amount within 30 calendar days after termination, and invoice a shortfall only where a separately agreed Order Form formula lawfully provides for one. Where section 7.6 applies, no early termination amount is payable. Additional optional work beyond our mandatory switching duties may be charged only under a separately accepted scope and price and is not a condition of switching.

A.9 End of contract. For a switch, the affected Subscription ends on successful completion of the switching process, and we notify you of that termination. For erasure without switching, it ends at expiry of the applicable notice period, which is immediate if you validly request immediate termination and no later date is specified under A.2; we notify you accordingly. The subsequent retrieval or deletion process does not extend the paid Subscription or create a renewal. Unaffected Subscriptions and obligations that survive under section 19.7 remain in force.

A.10 Statutory exceptions. An exception for custom-built services removes only the particular obligations excluded by Article 31(1), not all duties in Chapter VI. A limited non-production testing and evaluation service may fall within Article 31(2). We inform the Customer before contracting of any exception relied upon and its precise scope. Product customisation or use of a free plan does not by itself establish an exemption. Mandatory changes to the applicable regime take effect as required by law.

B.1 Scope and commitment. This Annex applies to paid Subscriptions from their paid start time, and to any Service Credit extension granted under B.6. We commit to monthly availability of at least 99.8%, measured as described below, during each period in which the Subscription is paid and active and during any such extension. Trials, optional beta features and independently chosen Third-Party Services are outside this commitment. Any expressly agreed replacement SLA must identify which provisions it replaces. During an agreed Service Credit extension the Customer receives the same Service, on the same plan entitlements, and this Annex continues to apply; no Subscription Fee is charged for that extension.

B.2 Unavailability and measurement. "Unavailability" is a period when the Customer cannot access the production platform or cannot carry out its core recruitment workflows because of a failure in the Service, including a material failure of the infrastructure or suppliers used by Hireall to deliver those workflows. Core workflows include accessing existing Candidate and application records, managing applications through the hiring pipeline, and the submission of an application through an application form provided by Hireall and the recording of that application in the Service. A material Account-specific outage qualifies even if other Customers are unaffected. A workable alternative that restores substantially equivalent core operation ends the relevant Unavailability. A cosmetic error, isolated feature defect, delayed external message or AI action failure does not constitute Unavailability unless it prevents those core workflows. Metered failures remain subject to section 5.

B.3 Calculation. We measure time in whole minutes for each calendar month in Coordinated Universal Time (UTC), or the portion of that month in which the Subscription is paid and active or is running as an agreed Service Credit extension under B.6. "Eligible Minutes" are the total minutes in that period less excluded minutes under B.4. A given UTC minute is classified once: an excluded minute is removed from Eligible Minutes and is not treated as Unavailability; an Eligible Minute counts as Unavailability only if a qualifying interruption occurred in that minute. Concurrent incidents or overlapping exclusions do not cause the same minute to be counted more than once. Monthly availability is 100 multiplied by (Eligible Minutes minus qualifying Unavailability minutes) divided by Eligible Minutes. If Eligible Minutes are zero, no percentage-based Service Credit arises for that month; termination rights remain unaffected. We use operational logs and monitoring and reasonably consider the Customer's supporting evidence. We provide a reasonable explanation of a disputed calculation.

B.4 Exclusions. Only the minutes actually affected by the following are excluded: (a) scheduled maintenance notified at least 24 hours in advance, limited to four hours per calendar month; (b) emergency maintenance strictly necessary to remedy an urgent security vulnerability that cannot reasonably wait, with prompt notice and mitigation; (c) the Customer's systems, internet connection, unsupported configuration or use contrary to Documentation; (d) an independently chosen Third-Party Service outside Hireall's control; (e) a proportionate suspension caused by the Customer's breach and properly imposed under section 18; and (f) a force-majeure event meeting section 23.3. Ordinary failures of Hireall-appointed hosting or other delivery suppliers are not automatically excluded. Maintenance exceeding the scheduled allowance counts unless another exclusion independently applies. An exclusion applies only to the extent it caused the interruption and does not excuse a separate breach of the agreement.

B.5 Credit levels. Where the monthly availability commitment is not met, the Customer is entitled to the following Service Credit, calculated on the affected monthly recurring Fee: below 99.8% but at least 99.0%, 10%; below 99.0% but at least 95.0%, 25%; below 95.0%, 50%. Only the highest applicable tier applies for a month. The "affected monthly recurring Fee" is the actual recurring Subscription Fee after discounts allocated to that calendar month; annual or other prepaid Fees are allocated across the days they cover. If the period being measured is an agreed unpaid Service Credit extension, the affected monthly recurring Fee is the Fee, after discounts, of the most recent paid period of the same Subscription, allocated as set out above; it is not treated as zero merely because no Fee is charged for the extension. A separately priced affected recurring add-on is included; unaffected separate services, one-off implementation Fees, taxes and top-up purchases are excluded. Aggregate Service Credits for a month do not exceed 50% of the affected monthly recurring Fee. Applicable invoice tax adjustments follow law.

B.6 Claim and application. Notify support@hireall.com of a claim within 30 calendar days after the affected month ends, identifying the Account, dates and material impact. We will not reject a claim solely for delay caused by our failure to disclose an incident whose nature prevented the Customer from reasonably identifying it. We investigate in good faith and explain acceptance or rejection, normally within 15 business days. Approved Service Credits are applied to the next recurring invoice. Where no invoice is due before the end of a prepaid term, the credit is held for renewal or, at the Customer's request, applied as an equivalent extension of the affected Service without automatic renewal. A requested extension does not withdraw an existing non-renewal instruction. A claim submitted within the claim period for a month in which the Subscription was paid and active remains valid even if the Subscription has since ended or our investigation is still pending; if no further recurring invoice will be issued, the approved credit is applied, at the Customer's request, as an equivalent extension of the affected Service without automatic renewal or against the Fees of a re-subscription started within 12 months, and is not converted into a cash refund. An equivalent extension is a number of days of the affected Service equal to the approved Service Credit divided by the daily Fee of the relevant paid period. That daily Fee is the affected monthly recurring Fee after discounts, as defined in B.5, divided by the number of days to which that Fee is allocated. If the Subscription was paid and active for only part of the calendar month, the divisor is those paid days, not the number of calendar days in the month. For example, if 50 is allocated to a 15-day paid portion of a 30-day month, the daily Fee is 50 divided by 15. Where the credit relates to a prepaid period covering more than one calendar month, the daily Fee is the Fee after discounts allocated to that period divided by the number of days that period covers. If a Service Credit arises during an agreed unpaid extension, the same paid-period Fee and day count are used, so that a zero Fee during the extension does not reduce the credit to nothing. A fraction of a day is rounded up to the next whole day. The Customer may request application as an extension when the credit is approved or at any time while the approved credit remains unapplied, and in any event no later than the last day of the 12-month window. That 12-month window starts on the later of (a) the end of the paid Subscription to which the claim related and (b) the date we notify the Customer that the credit is approved. An unused or pending Service Credit does not, by itself, extend any Candidate or Customer data retention, retrieval or deletion period under these Terms or the Data Processing Agreement, and does not restore data that has been deleted or whose retention period has expired. Those periods continue to run as stated in those documents unless an agreed extension of the Service is actually in force. Credits have no cash redemption value; unused credits expire when the paid Service and any agreed extension end, except a credit approved under a timely claim that is still to be applied as described above, which remains available until the last day of the 12-month window and then expires if unused. They do not reduce or replace a cash refund independently due under section 7.6. Credits cannot be transferred or used to purchase metered top-ups.

B.7 Support and incidents. Support requests are submitted to support@hireall.com or the support channel provided in the Account. Applicable support hours, time zone and any initial-response targets are those disclosed in the accepted plan or Order Form. We use reasonable efforts to acknowledge and prioritise material availability incidents promptly, communicate material developments through the Account, e-mail or a status channel, and restore service. A response target is not a guaranteed resolution deadline unless expressly agreed.

B.8 Other remedies. These Service Credits are the sole contractual monetary remedy for breach of the availability commitment as such, subject to section 17.4. They do not prevent termination and prepaid refunds for an uncured material breach, a qualifying prolonged force-majeure interruption, permanent discontinuance or another express ground in section 7.6. They do not exclude liability for separate security, confidentiality or data protection breaches, or mandatory remedies. No loss or fee period is compensated twice.