Privacy Notice
DRAFT PENDING LEGAL REVIEW — version v1. This wording has not been reviewed by a lawyer. It is published so the product can record what you were actually shown. When it is reviewed, the revised wording becomes version v2 and is stored as a new version; this one is never edited.
You are asked to acknowledge this notice, not to agree to it. It describes what we do. The specific permissions we need — reading forwarded mail, storing a CV, contributing to applicant panels — are asked for separately, one at a time, at the point where each becomes relevant. You can use the product without granting any of them.
What we collect when you create an account
Your email address, and either a password or a Google sign-in.
Passwords are handled by our authentication provider and are stored only as a cryptographic hash. We never receive or store your password. If you sign in with Google we receive your email address and a Google account identifier; we do not receive your contacts, your calendar, or your Google password.
What we collect as you use the product
Postings you check. Which job postings you looked up, so results can be saved across your devices.
Applications you track. The employer, the role title, the date you applied, where you applied, and any outcome you record.
Career Watch. Which employers and roles you have chosen to watch, and the alerts we have sent you. Your watch list is yours; we do not tell an employer that anyone is watching them.
Forwarded mail, if you turn it on
You can forward application-related email to a private address we generate for you. This is off unless you switch it on, and it is asked for as its own separate permission.
What we deliberately never store: the subject, the body, any snippet, the sender's full address, the recipient, or the raw message identifier. There are no columns for them. Reduction happens at the edge, during delivery, before our own systems see the message: the sender's name is discarded and the message identifier is hashed there.
What we keep: the sender's domain (for example `greenhouse.io`), a salted hash used only to notice the same message arriving twice, what kind of message it was (a rejection, an interview request, an acknowledgement), and whether we could read it. These records are deleted after 90 days.
Addresses and abuse controls
We record a salted hash of your IP address when you submit a report or fail to sign in, so we can rate-limit abuse. We do not store raw IP addresses for these purposes.
What we collect about employers
Nothing about you. Our employer records come from public sources — job postings published by employers on their own hiring systems, state layoff notices, SEC filings, Form 5500 filings, federal court dockets, and OSHA data. Nothing you do creates or changes an employer record, except that aggregated applicant outcomes may contribute to published statistics once enough people have reported, and never in a form that identifies you.
Selling your data
We do not sell your personal data, and we do not share it with advertisers. We do not run advertising on this service.
We do sell employer-facing products built from public records and aggregate statistics. Those contain no personal information about any applicant, and no individual is ever named.
Who processes data on our behalf
Our database, authentication and file storage provider; our hosting provider; our email routing and bot-protection provider; our outbound email provider; and an AI provider used to screen submitted reports before a person reviews them. [FULL SUB-PROCESSOR LIST AND LOCATIONS TO BE COMPLETED AT LEGAL REVIEW.]
How long we keep things
Raw copies of what we fetch from hiring systems expire after 30 days; our crawl telemetry is kept 30 days; forwarded-mail records are kept 90 days. Your account data is kept until you delete your account.
Deleting your account
Deletion removes your identity, your tracked applications, and your account data. It does not remove statistics already computed, and does not withdraw reports you submitted anonymously, because those are no longer separable records.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to [CONTACT ADDRESS]. [JURISDICTION-SPECIFIC RIGHTS TO BE COMPLETED AT LEGAL REVIEW.]
Children
This service is not intended for anyone under 16.
Contact
[LEGAL ENTITY], [ADDRESS]. Privacy questions: [CONTACT ADDRESS].
This is the version currently in effect. Each version is stored separately and is never edited, so the exact wording anybody agreed to can be produced. Corrections to the record itself are published at hiringrecord.com/corrections.