Privacy Policy

Last updated: April 8, 2026

This Privacy Policy explains what personal data HiredRes collects, how we use it, and the choices you have. We try to keep this short and human-readable.

1. Data we collect

You give us

  • Account info — your name, email, and profile photo when you sign in with Google.
  • Résumé content — the text and (optionally) photo you paste or upload, plus the job role and description you provide.
  • Generated content — analyses, rewrites, cover letters, and other AI output we save in your history.
  • Payment info — handled entirely by Paddle. We never see or store your card number.

Collected automatically

  • Usage data — pages visited, features used, error logs, approximate location derived from IP.
  • Device data — browser type, OS, screen size.

2. How we use your data

  • To run the service: analyze your résumé, generate suggestions, save your history.
  • To process payments and manage subscriptions (via Paddle).
  • To send transactional emails (receipts, security alerts, important account changes).
  • To monitor for abuse, fix bugs, and improve the service.

We do not sell your personal data, and we do not use your résumé content to train any AI model.

3. Third-party processors

We share the minimum data needed with these subprocessors:

  • Google Firebase (Auth, Firestore) — account, history, premium status. Hosted in Google Cloud.
  • Google Gemini API — receives your résumé text and prompts to generate AI output. Subject to Google's API data terms.
  • Paddle — receives the data needed to bill you (name, email, billing address, IP). Acts as merchant of record.
  • Vercel (or our chosen host) — serves the website and processes requests.

4. Cookies and local storage

We use a minimal set of essential cookies and local-storage entries:

  • Authentication session tokens (Firebase Auth).
  • UI preferences and a free-tier usage counter.

We do not use third-party advertising cookies or cross-site tracking. If we add analytics in the future, we will update this policy first.

5. Data retention

  • Account data is kept while your account exists.
  • Saved analyses are kept until you delete them or close your account.
  • Payment records are retained by Paddle as required by tax and accounting law.
  • Logs are retained for up to 90 days for debugging and abuse monitoring.

6. Your rights

Depending on where you live (EU/UK/California and similar), you have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to processing or withdraw consent. You can:

  • View and delete saved analyses from the History page.
  • Sign out at any time from the navbar menu.
  • Email privacy@hiredres.com to request a data export or full account deletion.

We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. International transfers

Your data may be processed in countries other than the one you live in (including the United States). Where required, we rely on Standard Contractual Clauses or equivalent legal mechanisms to protect data transferred outside your region.

8. Children

HiredRes is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

9. Security

We use HTTPS in transit, Firebase's managed encryption at rest, and least-privilege access to production systems. No system is 100% secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy occasionally. Material changes will be announced in the app or by email. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact

Privacy questions? Email privacy@hiredres.com.