Privacy Policy

1. Eligibility

Our Service is intended for users who are at least 18 years old. By using the Service, you confirm that you meet this age requirement.

2. Information We Collect

2.1 Account Information

When you create an account via Google or LinkedIn, we receive:

• Name and email address
• Profile picture (if available)
• Authentication provider identifier

2.2 Profile Information

You may provide:

• Target role and company
• Years of experience

2.3 Interview Data

When you use our interview practice features:

• Your responses to interview questions
• AI-generated feedback and scores
• Session metadata (timestamps, completion status)

2.4 Usage Information

We automatically collect:

• Last login timestamps
• Session activity (for rate limiting and abuse prevention)

3. How We Use Your Information

We use your information to:

• Provide and improve the Service
• Generate personalized interview questions and feedback
• Track your progress and performance over time
• Communicate with you about the Service
• Send you product updates, new features, and promotional communications (see Section 16)
• Enforce our Terms of Service and prevent abuse
• Comply with legal obligations

4. AI Processing & Third Parties

We use Google Gemini AI to power our interview and resume analysis features. When you use these features:

• Your responses and resume text are sent to Google's servers for processing
• Google processes this data in accordance with their privacy policy
• We do not share your personal information with Google beyond what's necessary for AI processing

We also use Supabase for authentication and data storage. Your data is encrypted in transit and at rest.

5. Data Retention

We retain your data as follows:

• Account data: Retained while your account is active
• Interview sessions: Retained for your progress tracking until you delete them or your account
• Resume analysis: Results retained until you delete them or your account

Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.

6. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correct: Update inaccurate information
• Delete: Delete your account and associated data
• Export: Download your interview history (coming soon)
• Opt-out: Unsubscribe from marketing communications

7. Data Security

We implement reasonable security measures to protect your information, including:

• Encrypted data transmission (HTTPS)
• Secure authentication via OAuth
• Access controls and authentication for database access
• Row-level security policies to isolate user data

However, no system is 100% secure. We cannot guarantee absolute security of your data.

8. Cookies and Tracking

We use essential cookies and local storage for:

• Maintaining your login session
• Storing authentication tokens

We do not currently use third-party analytics or advertising trackers.

9. International Transfers

Your data may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers.

10. Children's Privacy

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date and, where appropriate, providing additional notice within the Service.

12. California Privacy Rights (CCPA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect about you
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell your data)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at support@hirehelix.ai.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on consent, contract performance, and legitimate interests
• Data Portability: Request your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time for consent-based processing
• Lodge Complaint: File a complaint with your local data protection authority

For GDPR-related inquiries, contact us at support@hirehelix.ai.

15. Nevada Privacy Rights

Nevada residents may opt out of the sale of certain "covered information" as defined under Nevada law. We do not currently sell covered information, but you may submit an opt-out request to support@hirehelix.ai.