Privacy Policy

• Account data — email address and hashed password when you register.
• Resume & job content — resume text, job descriptions, and cover letters you submit for analysis or storage.
• Usage data — pages visited, features used, and timestamps (via Vercel Analytics — anonymised, no cookies).
• Payment data — subscription status and plan. Card details are handled entirely by Paddle and never reach our servers.

• To provide the AI analysis, CV builder, cover letter, and LinkedIn optimization features.
• To manage your account and subscription.
• To improve product quality (aggregate, anonymised usage patterns only).
• To send transactional emails (account confirmation, billing receipts). We do not send marketing emails without your explicit opt-in.

Resume and job description text you submit is sent to Anthropic's Claude API for analysis. Anthropic processes this data on our behalf under their privacy policy. Your data is not used to train Anthropic's models under our API agreement.

• Supabase — database hosting (EU/US). Your data is encrypted at rest and in transit.
• Vercel — application hosting and anonymised analytics.
• Paddle — payment processing and subscription management.
• Anthropic — AI analysis via Claude API.

We do not sell your data to any third party, ever.

We retain your account data for as long as your account is active. If you delete your account, all associated resumes, cover letters, and analysis results are permanently deleted within 30 days. Anonymised, aggregated usage statistics are retained indefinitely.

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your account and all associated data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing for direct marketing at any time.

To exercise any of these rights, email us at hello@hirebee.app. We will respond within 30 days.

HireBee uses only a single session cookie for authentication (NextAuth). We do not use advertising cookies or third-party tracking cookies. Vercel Analytics is cookieless and privacy-friendly.

All data is transmitted over HTTPS. Passwords are hashed with bcrypt and never stored in plain text. Database access is restricted to our application servers. We follow industry-standard security practices and review them regularly.

We may update this policy from time to time. We will notify you by email or an in-app notice at least 14 days before any material changes take effect. Continued use after that date constitutes acceptance.

Questions or concerns? Email us at hello@hirebee.app.