Privacy Policy

1. Introduction

This privacy policy describes how HireCurve ("we", "us", or "our") collects, uses, stores, and shares your information when you use our website at hirecurve.net and our AI-powered resume building service (collectively, "the Service"). By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account information: When you create an account, we collect your name and email address through our authentication provider (Clerk). If you sign in with a social account (such as Google), we receive your profile information from that provider.

Payment data: If you subscribe to a paid plan, payment information is processed directly by Stripe. We do not store your full credit card number, CVV, or bank account details on our servers. We receive confirmation of payment status, subscription details, and a truncated card identifier from Stripe.

Content you provide: This includes your work profile (job history, skills, education), job descriptions you paste into the Service, custom instructions, and any other text you input. This content is used solely to generate tailored resumes, cover letters, and related outputs for you.

Usage data: We collect basic analytics about how you interact with the Service, including pages visited, features used, application counts, and session duration. This helps us improve the product and understand usage patterns.

Technical data: Standard server logs may include your IP address, browser type, operating system, device information, referring URLs, and access timestamps.

3. How We Use Your Information

We use your information to: provide, operate, and maintain the Service; generate tailored resumes, cover letters, and interview preparation materials; process payments and manage your subscription; send transactional emails (account confirmations, billing receipts, password resets); respond to support requests; improve the Service, fix bugs, and develop new features; detect and prevent fraud, abuse, or security incidents; and comply with legal obligations. We do not use your personal content to train AI models. We do not sell your information to third parties. We do not send marketing emails unless you have opted in.

4. How We Share Your Information

We share your information only with third-party service providers that are necessary to operate the Service:

Clerk for authentication and user management. Stripe for payment processing. Anthropic for AI-powered content generation (your content is sent to Anthropic's API to generate outputs; refer to Anthropic's Privacy Policy for details on their data handling). Neon for database hosting. Vercel for application hosting and content delivery.

Each of these providers has its own privacy policy. We select providers that meet reasonable security and privacy standards.

We may also share information if required by law, to enforce our terms, to protect the rights, property, or safety of our users or the public, or in connection with a merger, acquisition, or sale of assets (in which case you would be notified before your data is transferred).

5. Cookies and Tracking

The Service uses essential cookies for authentication and session management. These cookies are strictly necessary for the Service to function and cannot be disabled.

We do not use advertising or third-party tracking cookies. Our analytics, if any, rely on privacy-respecting, cookie-free methods where possible. We do not participate in cross-site tracking or retargeting.

6. Data Retention

We retain your account information and generated content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it or where data is necessary to resolve disputes or enforce our agreements. Anonymized, aggregated data (such as total application counts) may be retained indefinitely for product analytics. Backup copies may persist for up to 90 days after deletion before being permanently removed.

7. Data Security

We use industry-standard measures to protect your data, including TLS encryption in transit, encrypted database connections at rest, secure authentication through Clerk, and access controls on our infrastructure. No system is 100% secure, and we cannot guarantee absolute security, but we take reasonable technical and organizational steps to protect your information from unauthorized access, alteration, disclosure, or destruction.

8. International Data Transfers

Our servers and third-party providers are located in the United States. If you are accessing the Service from outside the United States, your data may be transferred to, stored in, and processed in the United States. By using the Service, you consent to this transfer. We take reasonable steps to ensure your data is treated securely and in accordance with this privacy policy, regardless of where it is processed.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you. Correction: Request that we correct inaccurate or incomplete data. Deletion: Request that we delete your personal data (subject to legal retention requirements). Portability: Request a copy of your data in a structured, machine-readable format. Restriction: Request that we limit how we use your data. Objection: Object to our processing of your data for certain purposes. Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at support@hirecurve.net. We will respond within 30 days. We may need to verify your identity before processing your request.

10. United States State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Virginia, or other states with consumer privacy laws, you may have additional rights, including: the right to know what personal information we collect and how we use it; the right to request deletion of your personal information; the right to opt out of the sale of personal information (we do not sell personal information); and the right to non-discrimination for exercising your privacy rights.

California residents may also request disclosure of the categories of personal information collected, the purposes for collection, and the categories of third parties with whom information is shared. To submit a request, email support@hirecurve.net.

11. European Economic Area (EEA) and UK Rights

If you are located in the EEA or the United Kingdom, we process your data on the following legal bases under the GDPR: performance of a contract (to provide the Service), consent (where you have given it), and legitimate interests (to improve the Service and prevent fraud).

You have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully. You may also contact us directly, and we will work to resolve your concern.

12. Do Not Track

There is currently no uniform standard for interpreting Do Not Track (DNT) browser signals. The Service does not currently respond to DNT signals. However, since we do not use advertising or third-party tracking cookies, your browsing on our site is not tracked across other websites.

13. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, contact us at support@hirecurve.net and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the Service at least 15 days before the changes take effect. The "Last updated" date at the top indicates when this version was last revised. We encourage you to review this policy periodically.

15. Contact

If you have questions about this Privacy Policy, how we handle your data, or wish to exercise your privacy rights, contact us at support@hirecurve.net.