Privacy Policy

Last updated: June 30, 2026

HiredSmartly ("we", "us", or "our") is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights.

Short version: Users in the US and India may have their resume and analysis data stored to enable the 48-hour save feature. Users in the EU, UK, and all other regions are processed entirely in memory — nothing is stored after your session ends.

1. What we collect

When you create an account, we collect:

Your name and email address
Your country/job market selection
Your password (stored as a secure hash — we never see it)

When you use our resume review tools, we may collect:

Your resume text (see regional rules below)
Job description text (Step 2 only, see regional rules below)
AI-generated analysis results (scores, feedback, corrections)

2. Regional data storage rules

We apply different data retention rules based on your location:

United States & India: Resume text, job descriptions, and analysis results are stored in our database for up to 48 hours (Steps 1–2) or 14 days (Step 3 job search). This enables you to return and access your results without re-submitting.
European Union, United Kingdom, and all other countries: Your resume and job description are processed entirely in memory. No resume text or personal document content is written to our database. Only your account profile (name, email, country) is stored.

3. How we use your data

To generate your AI resume review and analysis
To save your results so you can access them later (US/India only)
To authenticate you and maintain your account
To send password reset emails (when requested)

We do not sell your data. We do not use your resume content for AI training. We do not show you ads.

4. Data processors

We use the following trusted third-party services:

Anthropic (Claude API) — processes your resume text to generate AI analysis. Subject to Anthropic's API data policy.
Supabase — database and authentication provider (US-based, SOC 2 compliant).
Vercel — serverless hosting (US-based).

5. Data retention

Step 1 & 2 results: deleted after 48 hours
Step 3 job lists: deleted after 14 days
Account profiles: retained until you delete your account

6. Your rights

You have the right to:

Access your stored data — contact us and we will send you a copy
Delete your data — email us at privacy@hiredsmartly.com and we will delete your account and all associated data within 48 hours
Correct your profile information at any time from your dashboard
Object to any processing — contact us and we will address your concern

EU/UK users also have rights under GDPR/UK GDPR including data portability and the right to lodge a complaint with your supervisory authority. Because we do not store EU/UK resume content, most GDPR data minimisation requirements are already met by design.

7. Security

All data is encrypted in transit (HTTPS) and at rest. We use row-level security on our database so users can only access their own data. Passwords are hashed and never stored in plain text.

8. Cookies

We use a single authentication session cookie to keep you logged in. We do not use advertising cookies or third-party trackers.

9. Contact

Questions or deletion requests: privacy@hiredsmartly.com