Privacy Policy.

This Privacy Policy explains how Trial. collects, uses, stores, and discloses personal information about venues, candidates, and website visitors, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Operated by Anders Berggren, ABN 71 441 417 792, trading as Hire Trial (the “Brand“: Trial.)

Effective date: 1 June 2026. We will tell you about material changes.

1.Who we are and how to reach us

This Privacy Policy explains how Anders Berggren, ABN 71 441 417 792, trading as Hire Trial (“we”, “us”, “Trial.”, the “Operator”) collects, uses, discloses, stores, and protects personal information. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”).

Privacy contact: privacy@hiretrial.com.au.

2.Who this Policy applies to

• Candidates — people who complete assessments;
• Venues — businesses and their authorised users who use Trial. to screen candidates;
• Website visitors and prospects;
• Anyone who contacts us.

2A. “Last Activity” defined

Where this Policy refers to “Last Activity” in respect of Candidate data, Last Activity means the later of:

• completion or submission of an Assessment by the Candidate;
• Venue review activity in the dashboard relating to that Assessment (for example, the Venue opening the Candidate’s result, marking the Candidate as interviewed, or recording a hire decision); or
• any support, correspondence, or dispute interaction relating to the Assessment between the Candidate, the Venue, and the Operator.

Retention periods, deletion timing, and dashboard expiry referred to elsewhere in this Policy run from Last Activity as defined here.

3.What we collect — and the minimum we need

Our design principle is data minimisation: we only collect what we need to provide the Services.

3.1 From Candidates

• Identification: name, email, phone, postcode.
• Role context: the role applied for and the venue applied to.
• Assessment responses: your text answers to the structured scenario questions.
• AI outputs: the numerical score and summary the AI generates about your responses.
• Consent records: a record of the age confirmation and overseas-disclosure consent you gave at the start of the assessment, and (where given) a timestamped record of your Talent Network opt-in and score reuse consent given at the end of the assessment.
• Optional resume/cover letter you submit: we forward this to the venue and delete it from our systems within 48 hours.

We do not collect: video, audio, biometric data, facial recognition data, government identifiers (other than ABN where the Candidate is a contractor), health information, or sensitive information within the meaning of the Privacy Act, unless we expressly ask and you expressly consent.

3.2 From Venues

• Business name, ABN, trading address, contact email and phone.
• Authorised user accounts: name, role, email.
• Billing information: processed by Stripe; we receive limited card-last-4-and-brand data only.
• Usage data: dashboard activity, assessments sent, scores reviewed, hire confirmations.

4.How we collect personal information

• Directly from you (account signup, assessment submissions, email enquiries).
• From third-party sources only with your knowledge and consent (for example, where a Candidate’s resume is forwarded by a Venue with the Candidate’s awareness).
• Automatically through cookies and analytics on our website and dashboard, in a limited and disclosed way (see section 10).

5.Why we collect and use personal information

• To provide the Services — running assessments, generating scores, delivering results to Venues.
• To bill Venues and account for payments.
• To respond to enquiries and support requests.
• To comply with our legal obligations (tax records, Notifiable Data Breaches Scheme, lawful requests).
• To improve the Platform on a de-identified and aggregated basis.
• To send service-related communications (assessment links, confirmation emails, billing notices) — these are necessary communications, not marketing.

5A.Talent Network and score reuse

At the end of each assessment, candidates are shown two optional, unticked consent checkboxes:

• Talent Network opt-in: the candidate agrees their assessment results and profile may be used to match them with future opportunities through the Trial. platform. This consent is stored with a timestamp and may be withdrawn at any time via the candidate profile page or by emailing privacy@hiretrial.com.au.
• Score reuse consent: the candidate agrees their existing assessment results may be shared with another venue using Trial. that they subsequently apply to, within 90 days of the original assessment being scored. This avoids the candidate needing to reassess. This consent is stored with a timestamp and may be withdrawn at any time.

Neither checkbox is required to submit the assessment. If a candidate does not tick either box, their data is not shared with any other venue and is not retained for Talent Network matching. The legal basis for these uses is express informed consent under APP 3 and APP 6.

6.Overseas disclosure — AI processing in the United States

To perform AI-assisted scoring, we use a third-party AI provider (currently Anthropic, PBC, “Anthropic”) in the United States via Anthropic’s API.

Information submitted during the assessment process — including a Candidate’s name, role application details, venue application details, and written assessment responses — may be processed by our third-party AI provider for the purpose of generating AI-assisted assessment outputs such as scores, summaries, and assessment insights.

We do not intentionally submit government identification documents, payment information, or sensitive information (within the meaning of the Privacy Act 1988 (Cth)) to the AI provider as part of the assessment process.

This is overseas disclosure within the meaning of APP 8. We address it as follows:

• We obtain the Candidate’s express informed consent at the start of the assessment under APP 8.2(b). The consent is taken via an unticked checkbox that the Candidate actively ticks, after the disclosure has been shown, before any assessment data is submitted. We retain a record of the consent.
• Anthropic processes the data on the Operator’s behalf under Anthropic’s API terms. According to Anthropic’s API terms as at the date of this Policy, Anthropic does not use API inputs to train its models; that is Anthropic’s representation under its API terms, not a Trial. warranty.
• We limit the data sent to the AI provider to information operationally necessary for scoring and summary generation, and we exclude the categories of information identified above.

You should be aware that once your data is in the United States, US law (including potential lawful access requests by US authorities) may apply to that copy of the data.

No other personal information is disclosed overseas at the time of this Policy. Our other infrastructure providers (Supabase, Vercel, Stripe Australia, Resend) host or process Australian-region data on our behalf. If we expand our overseas processing, we will update this Policy and obtain any further consents required.

7.Who we disclose your information to

• The venue you applied to — receives your assessment responses, score, and summary.
• Our service providers: Anthropic (AI processing, US), Supabase (database, AU), Vercel (hosting, AU/global edge), Stripe Australia (payments), Resend (email).
• Our professional advisors (legal, accounting, audit) under confidentiality.
• Government bodies or regulators where required by law, such as the OAIC or in response to a lawful access order.
• A successor entity in connection with a business restructure, sale, or transfer to a related corporate entity (see Terms clause 26 and Candidate Terms section 13).

By default, we do not disclose Candidate information to other Venues on the Platform and do not maintain a cross-venue Candidate profile. Exception: where a Candidate has explicitly opted in to the Trial. Talent Network score reuse consent, their existing Assessment results may be forwarded to a subsequent Venue they apply to — but only with that Candidate's explicit, timestamped consent (see section 5A below). We do not sell personal information. We do not allow third-party advertising tracking on the candidate assessment pages.

8.How long we keep personal information (“Retention Schedule”)

• Assessment responses: 6 months from Last Activity (as defined in section 2A), unless you ask us to delete them earlier. Exception: where a Candidate has opted in to the Trial. Talent Network, their profile and assessment results are retained for up to 24 months from Last Activity to support future opportunity matching. The Candidate may opt out and request deletion at any time.
• Candidate personal information (name, contact details, role context, AI outputs): 6 months from Last Activity (as defined in section 2A), unless you ask us to delete it earlier.
• Original inbound resumes and cover letters: deleted from our systems within 48 hours of being forwarded to the venue.
• Venue dashboard access to Candidate records: 6 months from Last Activity (as defined in section 2A), in parallel with the underlying data; after that point, Venues see only de-identified billing line items, not Candidate names or content.
• Venue account data: deleted 30 days after cancellation or termination.
• Financial records (invoices, tax records, de-identified billing line items): 7 years (to comply with tax law). These records do not contain Candidate personal information.
• Logs and audit data: up to 12 months for security and fraud prevention.
• Marketing contacts: until you unsubscribe.

Where we are required by law to retain information beyond these periods (for example, financial records), we will. Where retention is no longer required, we will delete or de-identify the information.

Venues are responsible for exporting any Candidate records, Assessment outputs, or dashboard data they may require for their own HR, compliance, or audit purposes before the relevant retention period expires. Trial. provides workflow software for pre-hire assessment; it is not a long-term HR record system.

Following expiry of the applicable retention period, Trial. may retain limited de-identified or aggregated operational analytics derived from Assessments for internal product improvement, system monitoring, benchmarking, security, research, and service-development purposes. These retained analytics are not intended to identify individual Candidates and are held separately from any record capable of identifying a Candidate.

9.Security

We protect personal information using:

• Encryption in transit (TLS) and at rest (AES-256 on Supabase).
• Strict access controls — at present, only the Operator (Anders Berggren) has system access. Any future personnel will be granted access on a least-privilege basis under written confidentiality.
• Service-role permissions and row-level security on the database.
• Secure-coding practices for the Platform and rate-limiting of public endpoints.
• Vendor due diligence on infrastructure providers.
• Periodic review of access logs and authentication events.

No system is perfectly secure. We will take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, consistent with APP 11.

9A.Data breach response

We maintain a data breach response process. If we become aware of an actual or suspected data breach involving personal information, we will:

• contain the breach as quickly as reasonably practicable;
• assess whether it is an “eligible data breach” under Part IIIC of the Privacy Act 1988 (Cth);
• where the assessment indicates an eligible data breach, notify affected individuals and the Office of the Australian Information Commissioner (“OAIC”) as soon as practicable; and
• take reasonable steps to prevent recurrence.

Venues must notify us promptly at privacy@hiretrial.com.au of any actual or suspected breach affecting Candidate data received through the Platform, and cooperate with our assessment under the Notifiable Data Breaches Scheme.

9B.Data quality and government identifiers

• Data quality (APP 10): we take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, up to date, complete, and relevant to the purpose for which it is held. You can help us comply with this obligation by keeping your account information current and by using the correction process in section 11.
• Government identifiers (APP 9): we do not adopt, use, or disclose government-issued identifiers (such as Medicare numbers, driver licence numbers, or tax file numbers) as our own identifier for any individual. Where a Candidate is engaged by a Venue as a contractor and supplies an Australian Business Number, we treat that ABN as business identification only.
• Sensitive information: we do not collect “sensitive information” within the meaning of the Privacy Act (including health information, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, or criminal record) unless we expressly ask for it for a specific lawful purpose and you expressly consent.

10.Cookies and analytics

We use first-party cookies for essential platform functions (such as keeping you signed in) and limited analytics to understand site performance. We do not run third-party advertising trackers on the assessment pages. You can control cookies through your browser settings.

11.Your privacy rights (APPs)

• Access: you can ask what we hold about you. We will respond within 30 days.
• Correction: you can ask us to correct inaccurate or outdated information.
• Deletion: you can ask us to delete your personal information. We will, unless we are required to retain it (see Retention Schedule).
• Complaint: you can complain to us; if not resolved to your satisfaction, you can complain to the OAIC (oaic.gov.au, 1300 363 992).

To exercise any right, email privacy@hiretrial.com.au. We may need to verify your identity. There is no charge. Candidates can also view their assessment results and manage Talent Network consent preferences directly through their candidate profile page, accessible via the link in their results email.

12.Direct marketing

We will only send marketing communications where permitted under the Spam Act 2003 (Cth) and the Privacy Act. Every marketing email contains an unsubscribe link. We do not market the personal information of Candidates to third parties.

13.Adults only

Trial. is for users 18 years or older. Candidates are required to confirm they are 18+ at the start of every assessment, with an unticked checkbox that the Candidate actively ticks. We do not knowingly collect personal information from anyone under 18. If you believe we hold such information, please contact us at privacy@hiretrial.com.au.

14.Anonymity and pseudonymity

You may interact with us anonymously or under a pseudonym in general inquiries. However, the assessment itself necessarily involves your real name and contact details so the venue can identify you. We have determined that an anonymous assessment is impracticable for this purpose under APP 2.2.

15.Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by email (where we have your address) and through the Platform. The current version is always available on our website.

16.Contact

• Privacy enquiries and requests: privacy@hiretrial.com.au
• OAIC: oaic.gov.au | 1300 363 992 | GPO Box 5288, Sydney NSW 2001