Hamrr is a recruiting assistant that connects to the systems a recruiter already uses — their applicant tracking system, mailbox and calendar — reads what is there, and acts on it. This policy explains what we collect, why, where it lives, and what you and the candidates on your desk can ask us to do about it.
Hamrr is a product of M3 Labs Ltd, a company registered in England and Wales. In this policy, "Hamrr", "we" and "us" mean M3 Labs Ltd.
You can reach us about anything in this policy at support@hamrr.ai.
This distinction matters, because it decides who you go to with a request.
So a candidate asking what is held about them, or asking for it to be deleted, is asking the recruiter who holds their file — not us. We will help you answer, and we will pass on any request that reaches us directly.
Your name, email address, and the sign-in identity from the provider you chose (Microsoft, Google, or email and password). Your settings, including which categories of work you have allowed Hamrr to carry out unattended.
Only from systems you explicitly connect, and only while they stay connected:
Names, contact details, CVs, work history, notes, interview records and the outcome of each conversation. Where you upload a CV, we also generate and store a redacted copy with identifying details removed, so a client-facing version exists.
Records of what ran, when, and what it cost to run — including the actions Hamrr took on your behalf. Payment card details are handled by Stripe and never reach our servers.
| What | Basis |
|---|---|
| Providing the service to you | Performance of our contract with you |
| Billing and account administration | Contract, and our legal obligations |
| Security, fault diagnosis, product improvement | Our legitimate interests in running a reliable, secure service |
| Processing candidate and client data | On your documented instructions, under your own lawful basis as controller |
Hamrr uses large language models to read context and draft text. These run on Amazon Bedrock within our own cloud account. Content sent to Bedrock is not used by the model provider to train their models.
Model output is a draft. Where a category of work is set to require your approval, nothing is sent until you approve it. Where you have switched a category to run unattended, Hamrr acts without asking and records exactly what it did.
We use a small number of providers to run the service. Each processes data only to provide their part of it:
| Provider | What for |
|---|---|
| Amazon Web Services | Hosting, storage, database, and AI models via Amazon Bedrock |
| Stripe | Subscription payments |
| Microsoft | Sign-in, and mail, calendar and Teams access where you connect them |
| Sign-in, and mail and calendar access where you connect them | |
| Linkup | Public web search used when researching a candidate profile |
| Your ATS provider | The system you chose to connect; data flows both ways at your instruction |
We may also disclose information where the law requires it, or to establish or defend legal claims. If our business is sold or reorganised, data may transfer as part of that — we will tell you before it does.
Your workspace, including candidate records and CVs, is stored in the United Kingdom (Amazon Web Services, London region). Each customer's workspace is held separately.
Some of our providers operate internationally and may process limited data outside the UK. Where that happens, it is covered by the safeguards those providers offer under UK data protection law, including the International Data Transfer Agreement or Addendum.
Under UK data protection law you can ask us to:
Write to support@hamrr.ai and we will respond within one month. If you are unhappy with how we have handled it, you can complain to the UK Information Commissioner's Office at ico.org.uk.
If a recruiter is using Hamrr to work on your application, your information is held on their instructions, not ours. They decide what is held and for how long, so requests about your data should go to the recruitment agency you are dealing with.
If you contact us instead, we will pass your request on to them promptly and tell you we have done so.
No system is perfectly secure. If a breach affects your data, we will tell you and the Information Commissioner's Office where the law requires it.
We use only the cookies and local storage needed to keep you signed in and remember your settings. We do not use advertising cookies or third-party tracking on this website.
If we change this policy materially, we will update the date at the top and tell account holders by email before the change takes effect.
Questions, requests or complaints: support@hamrr.ai.
hamrr