1. Introduction
HireReady Pvt Ltd is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding it.
By using HireReady, you agree to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, password
- Profile information: Current job title, location, LinkedIn URL, portfolio URL
- Resume content: Work history, education, skills, languages, certifications
- Job application data: Company names, job descriptions, application status
- Payment information: We do NOT store payment card details. Payments are processed by Paddle or PayPal who have their own privacy policies.
- Voice recordings: If you use voice mock interviews, audio is recorded, transcribed, and then deleted within 24 hours. Only the text transcript is retained.
- Communications: Emails or messages you send to our support team
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, time spent, clicks
- Device information: Browser type, operating system, IP address
- Cookies: Session cookies (required for login) and analytics cookies (optional)
- Log data: Server logs including access times and errors
2.3 Information from Third Parties
- If you connect LinkedIn (Premium plan), we receive your public profile data with your permission
- If you sign in with Google, we receive your name and email
3. How We Use Your Information
We use your information to:
| Purpose | Legal Basis |
|---|---|
| Provide and improve the Service | Contract performance |
| Generate AI-powered resume, cover letter, and interview content | Contract performance |
| Process payments and manage subscriptions | Contract performance |
| Send transactional emails (receipts, account alerts) | Contract performance |
| Send product update emails | Legitimate interest (opt-out available) |
| Analyze usage to improve features | Legitimate interest |
| Prevent fraud and abuse | Legitimate interest |
| Comply with legal obligations | Legal obligation |
We do NOT:
- Sell your personal data to third parties
- Use your resume content to train AI models without explicit consent
- Share your data with employers or recruiters without your permission
- Use your data for advertising purposes
4. AI and Your Data
HireReady uses the Anthropic Claude API to generate resume content, ATS scores, cover letters, and interview feedback.
- Your resume and job description content is sent to Anthropic's API to generate outputs
- Anthropic's API does not use your data to train their models (as per their API data privacy terms)
- We do not permanently store the raw prompts sent to the AI — only the generated outputs you save
- Voice recordings for mock interviews are sent to OpenAI's Whisper API for transcription only, then deleted within 24 hours
5. Data Sharing
We share your data only in these limited circumstances:
| Recipient | What We Share | Why |
|---|---|---|
| Anthropic (Claude API) | Resume content, job descriptions | To generate AI outputs |
| OpenAI (Whisper API) | Voice recordings | To transcribe mock interview answers |
| Paddle / PayPal | Name, email, purchase amount | To process payments |
| Supabase | All account and app data | Our database provider |
| Vercel | Request metadata | Our hosting provider |
| Law enforcement | Data as required | Legal compliance only |
We do not share your data with any other third parties. We do not sell data. Ever.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until you delete your account + 30 days |
| Resume and application data | Until you delete it or your account |
| Voice recordings | 24 hours maximum |
| Payment records | 7 years (legal requirement) |
| Usage/analytics logs | 12 months |
| Support emails | 2 years |
When you delete your account, we delete all your personal data within 30 days, except payment records which we must retain for legal compliance.
7. Cookies
We use the following cookies:
| Cookie | Type | Purpose |
|---|---|---|
| session | Required | Keeps you logged in |
| supabase-auth | Required | Authentication token |
| analytics | Optional | Usage analytics (you can opt out) |
You can disable optional cookies in Settings → Privacy. Disabling required cookies will prevent you from logging in.
8. Data Security
We protect your data using:
- HTTPS encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Supabase Row Level Security (RLS) ensuring you can only access your own data
- Regular security audits
- Strict access controls — only essential team members can access production data
Despite our best efforts, no system is 100% secure. If we experience a data breach affecting your data, we will notify you within 72 hours.
9. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of all data we hold about you
- Correction: Request we correct inaccurate data
- Deletion: Request we delete your data ("right to be forgotten")
- Portability: Request your data in a machine-readable format
- Objection: Object to certain processing of your data
- Withdraw consent: Where processing is based on consent
To exercise any of these rights, email us at hireready011@gmail.com with the subject "Data Rights Request". We will respond within 30 days.
You can also delete your account and all associated data directly from Settings → Account → Delete Account.
10. Children's Privacy
HireReady is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will delete it immediately.
11. International Data Transfers
HireReady is operated from Nepal. Your data may be stored and processed in the United States (Supabase, Vercel, Anthropic servers) and other countries. By using the Service, you consent to this transfer.
We ensure all third-party providers maintain appropriate data protection standards.
12. GDPR (EU Users)
If you are in the European Union or UK, you have additional rights under GDPR:
- Right to lodge a complaint with your local data protection authority
- Right to restrict processing
- Legal basis for all processing is described in Section 3
Our Data Protection contact: hireready011@gmail.com
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you by email and in-app notice at least 14 days before material changes take effect. The "Last updated" date at the top reflects the most recent revision.
14. Contact
For privacy questions or data requests:
- Email: hireready011@gmail.com
- Address: Sitapaila, Kathmandu, Nepal
- Response time: Within 30 days