Privacy Policy

Last updated: June 2025

HirePath ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. What data we collect

  • Account data: Email address and name provided at sign-up via Supabase Auth or Google OAuth.
  • Resume data: The resume file you upload and the structured profile fields extracted from it (name, skills, experience, education, etc.).
  • Application data: Job listings discovered, matching scores, tailored documents generated, and application statuses.
  • Usage data: API request logs, pipeline run timestamps, and error events used for debugging and improving the service.

2. How we use your data

  • To discover, rank, and match job listings to your profile.
  • To generate tailored resumes and cover letters for each application.
  • To auto-fill job application forms on your behalf.
  • To send you Telegram notifications and daily summaries.
  • To maintain your application history and pipeline state.

Your data is never sold, licensed, or shared with third parties for advertising purposes.

3. Data storage

Your data is stored in Supabase (PostgreSQL database and file storage), hosted on AWS infrastructure in your region. Resume files are stored in Supabase Storage and accessible only to your account. Application data is stored in a private PostgreSQL database.

4. Third-party services

  • Supabase — authentication and database hosting.
  • Anthropic (Claude) — AI model used for resume extraction, job scoring, and document generation. Data sent to Claude is governed by Anthropic's data processing terms.
  • Telegram — notification delivery. Your Telegram chat ID is stored to route messages to you.

5. Important disclosure — platform terms of service

HirePath automates interactions with job boards and ATS platforms. Some platforms (including LinkedIn and Indeed) prohibit automated scraping in their Terms of Service. By using HirePath, you acknowledge this risk and accept responsibility for any consequences of using automated job search tools on those platforms. We recommend reviewing the ToS of each platform before enabling sources that interact with them.

6. Your rights (GDPR / CCPA)

You have the right to:

  • Access your data — request a copy of all data we hold about you.
  • Correct your data — update your profile at any time from the dashboard.
  • Delete your data — request full account deletion from Settings → "Delete my account". This permanently removes all your jobs, applications, profile data, and uploaded files.
  • Export your data — download your application history as CSV from the dashboard.

To exercise any of these rights, email us at privacy@hirepathapp.com or use the in-app delete flow.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, all data is permanently removed within 30 days.

8. Cookies

HirePath does not use tracking cookies. Authentication tokens are stored in your browser's localStorage and used only to maintain your session.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you via email or an in-app notice for material changes.

10. Contact

Questions about your data? Email privacy@hirepathapp.com.