Privacy Policy
Last Updated: November 18, 2025
Table of Contents
1. Introduction
Welcome to HireLab's Privacy Policy. This Privacy Policy describes how HireLab Technologies, Inc. ("HireLab," "we," "our," or "us") collects, uses, shares, and protects your personal information when you use our website, applications, and services (collectively, the "Services").
We are committed to protecting your privacy and being transparent about our data practices. This Privacy Policy should be read in conjunction with our Terms of Service.
By using the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use the Services.
2. Information We Collect
We collect several types of information from and about users of our Services:
2.1 Information You Provide Directly
- Account Information: When you create an account, we collect your name, email address, and password.
- Profile Information: You may provide additional profile details such as a profile photo and display name.
- Resume Content: The resume files you upload (in PDF or DOCX format), which may contain personal information such as your work history, education, skills, contact information, and other professional details.
- Job and Company Information: Target roles, company names, and job descriptions you provide for resume tailoring.
- Payment Information: Payment card details and billing information are collected and processed by our third-party payment processor (Stripe). We do not store complete payment card information on our servers.
- Communications: Messages, feedback, and correspondence you send to us through support channels or contact forms.
2.2 Information Collected Automatically
- Usage Data: Information about how you interact with the Services, including features used, pages viewed, analyses performed, and time spent.
- Device Information: Device type, operating system, browser type and version, unique device identifiers, and mobile network information.
- Log Data: IP address, access times, pages requested, referring/exit pages, and clickstream data.
- Location Data: General location information (city/country level) derived from your IP address.
- Authentication Data: Information related to your login sessions and security events.
2.3 Information from Third Parties
- Social Login: If you sign up using Google or other third-party authentication, we receive your name, email address, and profile picture from that provider.
- Payment Processing: Payment confirmation and transaction details from Stripe.
3. How We Collect Information
We collect information through various methods:
- Direct Input: Information you voluntarily provide when creating an account, uploading resumes, or using the Services.
- Automatic Collection: Technologies such as cookies, web beacons, and analytics tools that automatically collect usage and device information.
- Third-Party Integrations: Information received from authentication providers, payment processors, and other integrated services.
- Customer Support: Information you provide when contacting our support team.
4. How We Use Your Information
We use the information we collect for the following purposes:
4.1 Service Delivery
- Provide, operate, and maintain the Services
- Process and analyze your resume using AI technology
- Generate personalized feedback and suggestions
- Save your analysis history and preferences
- Authenticate your account and manage your sessions
4.2 Service Improvement
- Improve and optimize our AI algorithms and analysis quality
- Develop new features and functionality
- Understand user behavior and usage patterns
- Conduct research and analytics
- Debug and fix technical issues
4.3 Communication
- Send account-related notifications and updates
- Respond to your inquiries and support requests
- Send important service announcements
- Notify you of changes to our Terms or Privacy Policy
- Send marketing communications (with your consent, where required)
4.4 Business Operations
- Process payments and manage subscriptions
- Prevent fraud and ensure security
- Enforce our Terms of Service
- Comply with legal obligations
- Protect our rights and interests
4.5 Aggregated Analytics
- Create anonymized, aggregated statistics about service usage
- Display metrics such as "Resumes Analyzed Today"
- Conduct industry research and benchmarking
5. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide the Services you've requested and fulfill our contract with you.
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving services, preventing fraud, and ensuring security.
- Consent: Processing based on your explicit consent, which you may withdraw at any time.
- Legal Obligations: Processing necessary to comply with legal requirements and obligations.
7. Third-Party Services
The Services integrate with the following third-party providers. Each has its own privacy policy governing how they handle your data:
7.1 Firebase (Google Cloud)
We use Firebase for authentication, database, and file storage. Your resume files and account data are stored on Google Cloud servers.
Privacy Policy: https://firebase.google.com/support/privacy
7.2 OpenAI
We use OpenAI's API to power our AI-driven resume analysis. Your resume content is sent to OpenAI for processing. According to OpenAI's API data usage policies, data submitted via API is not used to train their models.
Privacy Policy: https://openai.com/policies/privacy-policy
7.3 Stripe
We use Stripe for payment processing. Your payment information is transmitted directly to Stripe and is not stored on our servers. Stripe is PCI-DSS compliant.
Privacy Policy: https://stripe.com/privacy
7.4 Google Authentication
If you sign in with Google, Google's privacy policy applies to the information they collect during the authentication process.
Privacy Policy: https://policies.google.com/privacy
9. Data Security
We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:
- Encryption: Data transmitted between your browser and our servers is encrypted using TLS/SSL. Resume files are encrypted at rest.
- Access Controls: Strict access controls limit who can view or process personal data.
- Authentication: Secure authentication mechanisms, including password hashing and multi-factor authentication options.
- Monitoring: Continuous monitoring for security threats and vulnerabilities.
- Secure Infrastructure: Use of enterprise-grade cloud infrastructure (Firebase/Google Cloud) with built-in security features.
- Regular Audits: Periodic security assessments and updates.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
10. Data Retention
We retain your personal information for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy. Specific retention periods include:
- Account Information: Retained while your account is active and for a reasonable period after account deletion to comply with legal obligations.
- Resume Files: Retained while your account is active. You can delete individual resume files at any time from your history.
- Analysis Results: Retained while your account is active and accessible through your analysis history.
- Payment Records: Retained for 7 years for tax and accounting purposes.
- Usage Logs: Retained for up to 90 days for security and debugging purposes.
- Aggregated Analytics: Anonymized data may be retained indefinitely.
After you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or security purposes.
11. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
11.1 Access
You have the right to access and review the personal information we hold about you. You can access most of your information through your account dashboard.
11.2 Correction
You have the right to correct inaccurate or incomplete personal information. You can update your account information through your settings.
11.3 Deletion
You have the right to request deletion of your personal information. You can delete your account and associated data through your account settings or by contacting us.
11.4 Data Portability
You have the right to receive a copy of your personal information in a structured, commonly used, machine-readable format.
11.5 Objection & Restriction
You have the right to object to or request restriction of certain processing of your personal information.
11.6 Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time.
11.7 Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe your privacy rights have been violated.
11.8 Exercising Your Rights
To exercise any of these rights, please contact us at privacy@hirelab.ai. We will respond to your request within 30 days. We may need to verify your identity before processing your request.
12. International Data Transfers
HireLab is based in the United States. If you access the Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.
These countries may have data protection laws that differ from those of your country. By using the Services, you consent to the transfer of your information to countries outside your country of residence, including the United States.
For users in the EEA, UK, and Switzerland, we implement appropriate safeguards to ensure your personal data receives adequate protection, including:
- Standard Contractual Clauses approved by the European Commission
- Reliance on service providers with appropriate privacy certifications
- Implementation of appropriate technical and organizational measures
13. Children's Privacy
The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are under 18, please do not use the Services or provide any personal information.
If we learn that we have collected personal information from a child under 18, we will delete that information as quickly as possible. If you believe we have collected information from a child under 18, please contact us at privacy@hirelab.ai.
14. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
14.1 Right to Know
You have the right to request information about the categories and specific pieces of personal information we have collected, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
14.2 Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions.
14.3 Right to Opt-Out of Sale
We do not sell your personal information. We have not sold personal information in the past 12 months.
14.4 Right to Non-Discrimination
You have the right not to receive discriminatory treatment for exercising your CCPA rights.
14.5 Authorized Agent
You may designate an authorized agent to make requests on your behalf. We may require verification of the agent's authority.
14.6 California "Shine the Light" Law
California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.
14.7 Exercising CCPA Rights
To exercise your CCPA rights, contact us at privacy@hirelab.ai or through your account settings. We will verify your identity and respond within 45 days.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated Privacy Policy on our website
- Updating the "Last Updated" date at the top of this policy
- Sending you an email notification (for material changes)
- Displaying a prominent notice on the Services
Your continued use of the Services after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
For data protection inquiries from the EEA, UK, or Switzerland, please include "GDPR Request" in your subject line.
For California privacy rights inquiries, please include "CCPA Request" in your subject line.
This Privacy Policy was last updated on November 18, 2025. We are committed to protecting your privacy and handling your personal information responsibly.