Privacy Policy

Last updated: April 2025

1. Who we are

HireStack AI (“we”, “our”, or “us”) operates the HireStack AI platform at hirestack.tech. We help job seekers build tailored, evidence-backed applications using AI-powered analysis.

2. Information we collect

Account information: Email address and display name when you register.
Resume & career data: Resume files, job descriptions, and profile information you upload or enter — used solely to power your application generation.
Usage data: Pages visited, features used, and interactions within the platform, collected to improve the service.
Technical data: Browser type, IP address, and device information collected automatically via server logs.

3. How we use your information

To provide, maintain, and improve the HireStack AI service.
To generate AI-powered application documents tailored to your profile.
To send transactional emails (account verification, password reset).
To detect and prevent fraud, abuse, or security incidents.
We do not sell your personal data to third parties.

4. AI processing

Resume and job description content you submit is processed by AI models (Google Gemini via secure API calls) to produce application documents. This data is not used to train third-party AI models. Processing occurs transiently and results are stored in your account only.

5. Data storage and security

Your data is stored in Supabase (PostgreSQL), hosted on infrastructure with encryption at rest and in transit. We implement rate limiting, authentication guards, and regular security reviews. No system is 100% secure; if you discover a vulnerability, please contact us immediately.

6. Your rights

Access: Request a copy of the personal data we hold about you.
Correction: Update inaccurate data via your account settings.
Deletion: Request deletion of your account and all associated data.
Portability: Export your generated documents at any time.

To exercise these rights, email us at privacy@hirestack.tech.

7. Cookies

We use only essential cookies required for authentication (session tokens). We do not use tracking or advertising cookies.

8. Third-party services

We use the following third-party services:

Supabase — Authentication and database
Google Gemini API — AI document generation
Stripe — Payment processing (for paid plans)
Sentry — Error monitoring

Each provider has its own privacy policy governing their data handling.

9. Data retention

We retain your data for as long as your account is active. Deleted accounts have their data purged within 30 days. Anonymised aggregate usage statistics may be retained indefinitely.

10. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated via email or an in-app notice. Continued use of the service after changes constitutes acceptance.

11. Contact

For any privacy-related questions, contact us at privacy@hirestack.tech.