Terms of Service

Last updated: September 15, 2026

These Terms govern access to and use of the Hi Maya recruiting platform ("the Service"), operated by Hi Maya ("we", "us"). By creating a workspace or using the Service you agree to these Terms on behalf of yourself and, where applicable, the organization you represent ("Customer"). We record the date and Terms version accepted at signup.

1. Accounts & workspaces

Each user belongs to a single workspace (tenant). You are responsible for activity under your account and for keeping credentials secure. Workspace administrators control member roles, per-job permissions, invitations, and may disable member accounts. Workspaces are not self-serve: we open each one, either for an agreed evaluation (proof of concept) or under a paid engagement. Existing members invite their own teammates. Customers may configure single sign-on (SAML/OIDC) and SCIM provisioning; where SSO is enforced, the Customer's identity provider governs member access.

2. Access and fees

There is no free tier and no self-serve payment in the product. Access is arranged directly with us: an evaluation runs for the scope and period we agree in writing (including by email), and continued use beyond it is under a paid engagement on terms agreed the same way. Pricing and invoicing are agreed in writing and paid access is activated by us. We do not collect payment card details through the Service. We may end or suspend an evaluation workspace on reasonable notice. Fees are non-refundable except as agreed in writing or required by law.

3. Acceptable use

You agree not to misuse the Service, including without limitation:

attempting to access data belonging to other workspaces, or probing, scanning, or testing the Service's security without written permission;
reverse-engineering, scraping, or bulk-harvesting the Service or its public pages;
sending spam or unlawful communications to candidates through the Service;
uploading malicious code or content you have no right to process;
reselling or providing the Service to third parties as a service bureau without our written consent.

4. Candidate data and Customer responsibilities

The Customer is the data controller of candidate and contact data processed in its workspace; we process it on the Customer's behalf as described in our Privacy Policy. The Customer is responsible for:

having a lawful basis for all candidate data it collects, uploads, imports (including from other applicant-tracking systems), or captures via the browser extension or other sourcing tools, and for providing any required notices to those individuals;
honoring data-subject requests (access, correction, deletion) for data it controls; the platform provides deletion and export tooling to help;
complying with the terms of third-party services it connects or sources from (including LinkedIn's User Agreement when using the browser extension);
not entering special categories of personal data (such as health data, religion, or government identification numbers) into free-text fields, notes, or custom fields unless it has a lawful basis to process them;
where careers pages are embedded into the Customer's own website, presenting any legally required cookie consent and privacy notices on that website;
using AI-assisted features lawfully and without unlawful discrimination (see Section 5).

5. AI features

The Service includes AI features (the Maya assistant, CV parsing and summaries, match scores, semantic search, drafting). AI outputs are assistive suggestions: they may be inaccurate or incomplete, and they are not legal or employment advice. The Customer and its users retain full responsibility for all hiring decisions and candidate communications. Decisions with terminal effect on a candidate (such as rejection) always require human confirmation in the assistant. The Customer controls the assistant's autonomy settings and is responsible for how its users configure and apply them.

6. Customer data, IP, and feedback

As between the parties, the Customer owns the data it and its candidates submit to the Service ("Customer Data"). The Customer grants us a license to host and process Customer Data solely to provide, secure, and improve the Service and as instructed by the Customer. We own the Service, its software, and all related intellectual property. If you give us feedback, we may use it without restriction or obligation.

7. Data processing, sub-processors, and security

We process personal data as described in the Privacy Policy and use the vendors listed on our sub-processor list, which we may update; the list page reflects the current set. Customers requiring a signed Data Processing Addendum can request one at the contact address below. We maintain technical and organizational security measures including per-tenant data isolation enforced at the application and database layers, encrypted storage of integration credentials, signed file access, an append-only audit log, and rate limiting.

8. Termination and data deletion

You may stop using the Service at any time. A workspace administrator can delete the entire workspace from the product; deletion is immediate, permanent, and irreversible, and removes the workspace's database records, uploaded files, and search index entries. Individual members can delete their own accounts. Before deleting, Customers can export people, applications, and audit data from the product and may contact us for assistance with larger exports. We may suspend or terminate workspaces that violate these Terms, create risk for the Service or others, or where required by law; where practical we will notify you and give you an opportunity to export data.

9. Availability and changes

The Service is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We aim for high availability but do not guarantee uninterrupted or error-free operation, and we may modify features over time.

10. Limitation of liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data. Our total aggregate liability arising out of or related to the Service is limited to the fees the Customer paid us in the 12 months preceding the event giving rise to liability, or, where no fees were paid, USD 100. These limits do not apply to a party's willful misconduct or to the Customer's payment obligations.

11. Indemnification

The Customer will defend and indemnify us against third-party claims arising from Customer Data, the Customer's use of the Service in violation of these Terms or applicable law (including employment and data-protection law), or candidate communications sent by or on behalf of the Customer.

12. Governing law

These Terms are governed by the laws of the State of Israel, and the competent courts of Tel Aviv-Jaffa have exclusive jurisdiction, without regard to conflict-of-law rules.

13. Changes to these Terms

We may update these Terms from time to time. For material changes we will give reasonable advance notice (for example by email or in the product). Continued use of the Service after the effective date constitutes acceptance.

Contact: [email protected]