Privacy Policy
This policy describes the information Hireed AI ("we", "our", or "us") processes to provide account access, job discovery, profile matching, and application tracking, along with the available data-request controls.
1. Information We Collect
To provide personalized job matching, fit assessments, and search automation, we collect:
- Account Information: Your email address, account identifiers, and sign-in details. Native email/password sign-in stores a password hash; configured provider sign-in uses authentication identifiers.
- Candidate Profile & CV Data: Resumes or CVs you voluntarily upload, including extracted skills, job history, education, and target roles.
- Job Search & Workspace Data: Search sessions, filtered job postings, bookmarks, and pipeline application notes.
- AI Interaction Data: Prompts submitted to the career agent for interview preparation and resume tailoring.
- Analytics: When Microsoft Clarity is configured, its script is loaded to support usage analytics.
2. Disclosed Sub-Processors
The application supports the service integrations below. Which services process a request depends on deployment configuration and the feature used. Provider processing and retention terms apply to those integrations.
| Provider | Purpose | Configuration |
|---|---|---|
| Clerk, Inc. | Provider-based authentication and session management when enabled. | Used for configured Clerk sign-in paths. |
| Configured PostgreSQL service | Database storage for account profiles, saved roles, and search sessions. | Hosting region and storage configuration depend on the deployed service. |
| Configured Redis service | Caching and rate-limiting when Redis is enabled. | Service and region depend on deployment configuration. |
| Configured AI providers | Server-side AI processing for supported career-assistance features, including NVIDIA Corporation when configured. Relevant prompts and context may be sent to the selected provider. | Provider selection, processing location, and retention depend on the configured provider. |
| Stripe, Inc. | Payment processing and billing when checkout is enabled. | Billing requests are handled by the configured Stripe integration. |
| Microsoft Clarity (when enabled) | Usage analytics through the configured page script. | Enabled when the deployment supplies a Clarity configuration. |
3. Data Retention Lifecycle
- Active Accounts: We retain your saved jobs, candidate profile, and search sessions as long as your account remains active.
- Search Sessions and Listings: Session deletion and shared-listing maintenance use separate application controls. Retention depends on the record type and deployment configuration.
- AI Records: AI response caches and usage records support replies and allowance tracking. External AI processing is also subject to the selected provider's terms.
4. Your Rights: Export and Erasure (GDPR / CCPA)
The application provides the following authenticated endpoints for export and erasure requests. You may also contact us about applicable privacy rights:
- Right to Portability (Export): You can request a JSON export of your active profile, CV library, owned jobs and tracking, search sessions, alert settings, and plan/usage information via
GET /api/me/export. Conversations stored only in your browser are outside this server export. - Right to Erasure (Be Forgotten): You can request deletion of account-owned profile, workspace, authentication, alert, and usage records via
DELETE /api/me/erase. We cancel linked subscriptions before erasure and retain a minimal account identifier and revocation date to prevent old sessions or background requests from restoring the account. Payment providers retain their own legally required records.
Self-Service Data Controls
You can manage your data directly from your Workspace or contact us at privacy@hireed.app.
5. Security Standards
The application uses authentication and ownership checks, parameterized account-data queries, cookie controls, and a Content Security Policy (CSP). The Flask session is configured with HttpOnly and SameSite=Lax, with Secure enabled by default. Hosting, transport, and storage settings depend on the deployed services.
6. Contact Us
For questions or formal inquiries regarding this policy, reach us at:
Email: privacy@hireed.app
Support: support@hireed.app