HireHat Privacy Policy
Effective date: 1 January 2027
This policy explains what personal data HireHat collects, why we collect it, and what you can do about it. It applies to hirehat.in and the HireHat service.
HireHat is operated by Geeta Sawant, an individual based in Ulhasnagar, Maharashtra, India ("we"). HireHat is not yet a registered company. In this policy, "you" means a person who joins our waitlist or uses HireHat.
1. The data we collect
| Data | When we collect it | Why we need it |
|---|---|---|
| Email address | When you join the waitlist or sign in | To confirm that the address is yours, to run your account, and to contact you about it |
| Full name | When you join the waitlist | To address you |
| Your resume: the PDF file, its file name, and the text we extract from it. A resume can include your contact details, education and work history | When you upload a resume | To run the features that you ask for and to keep your resume in your account |
| Job descriptions, job titles and company names | When you add a job | To compare the job with your resume |
| Your practice answers to interview questions | When you ask for feedback | To give you feedback |
| AI results, such as fit analyses, cover letters, resume rewrites, and your edits to them | When you use a feature or save an edit | To show them to you again |
| Credit balance and credit history | When you use HireHat | To charge the correct number of credits and to refund a failed request |
| Usage records: which feature ran, when, whether it succeeded, and what it cost us | When you use a feature | To operate the service, to fix faults and to prevent abuse |
| Technical data: IP address, browser details and request logs | When you visit the site or call the service | To secure the service and to limit abuse |
To join the waitlist, you confirm your email address with a one-time code that we email to you. This creates a sign-in record for your address with Supabase. To use HireHat, you create an account with your email address and a password, and you confirm the address with a one-time code. Supabase stores the password for us. Please do not put data in your resume that a job application does not need, such as government ID numbers or health details.
2. How we use your data
We use your data only to:
- verify your email address and sign you in;
- if you join the waitlist, send you a welcome email and tell you when HireHat opens, until you unsubscribe;
- provide the features that you ask for;
- manage your credits;
- keep the service secure, fix faults and prevent abuse; and
- obey the law.
We do not sell your personal data. We do not show advertising. We do not give your resume to employers or recruiters. If we add a feature that shares your data with them, we will ask for your consent first.
HireHat's scores and suggestions are for your own use. We do not use them to make decisions about you.
3. Who receives your data
We use these service providers. They process data for us so that HireHat can work.
| Provider | What it does | Data it handles | Location |
|---|---|---|---|
| Supabase | Sign-in, one-time codes and our database | Your account data and the data you store in HireHat | India (Mumbai) |
| Fly.io | Runs the HireHat service and stores uploaded resume files | All data that passes through the service, and resume files | Singapore |
| Vercel | Hosts the website and builds its pages | Technical data, and the account data, resumes and results on the pages that it builds for you | United States (Washington, D.C.) |
| OpenAI | Generates AI results | The content of your resume, the job description and your practice answers, when you run a feature | United States |
| Titan Email, through GoDaddy | Delivers one-time codes and waitlist email | Your email address and the message | United States (Titan's hosting provider, Amazon Web Services) |
OpenAI states that it does not use data sent through its API to train its models unless the customer opts in, and we have not opted in. OpenAI can keep this data for up to 30 days to monitor abuse, or longer if the law requires it.
HireHat does not take payments yet. When it does, a payment provider will process your payment and we will update this policy before payments start. We will not store your full card details.
We can also disclose data if the law requires it, or to protect the rights and safety of our users and the service.
4. Transfers outside India
Some providers process data outside India, as section 3 shows. By using HireHat, you understand that your data goes to those countries so that we can provide the service.
5. How we protect your data
We use HTTPS for all traffic to the service. Our database provider encrypts stored data. Database access rules block direct public access to our tables. Only you can see your resume and results through your account. Our admin screens show usage records, not the content of your resume, your job descriptions or your AI results.
No system is completely secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.
6. How long we keep your data
- Waitlist data: until HireHat opens and we have told you, or until you ask us to remove it. To delete it, email us.
- Account data, resumes, jobs and AI results: until you ask us to delete them or close your account.
- Technical logs: for the period that our hosting providers keep them.
When you ask us to delete your data, we delete it within 30 days. We can keep a record for longer only if the law requires it. A deleted resume can stay in a provider's backup until that backup expires.
7. Your rights
Under India's Digital Personal Data Protection Act, 2023, you can:
- ask for a summary of your personal data and how we process it;
- ask us to correct, complete, update or delete your personal data;
- withdraw your consent at any time;
- name another person to exercise your rights if you die or cannot act; and
- complain to us and receive an answer.
To stop waitlist email, use the unsubscribe link in any waitlist email. To use any of these rights, email support@hirehat.in from the address on your account. We reply within 30 days. It is as easy to withdraw consent as it was to give it, but we cannot provide the service without the data that it needs. If you withdraw consent, we will stop processing your data and delete it, as section 6 explains.
8. Complaints
Our Grievance Officer is Geeta Sawant, at support@hirehat.in and Bk no. 1608, Room no. 1, Section 26, Ulhasnagar 421004, Maharashtra, India. We answer complaints within 30 days. If our answer does not resolve your complaint, you can complain to the Data Protection Board of India.
9. Cookies
We use only the cookies and browser storage that keep you signed in and make the site work. We do not use advertising or analytics cookies.
10. Age limit
HireHat is for people aged 18 or over. Do not use it if you are under 18. If we learn that a person under 18 gave us data, we will delete it.
11. Changes to this policy
We will change the effective date at the top of this page when we update this policy. If a change affects how we use your data, we will tell you by email or in the product before it applies. If a company takes over HireHat, we will update this policy to name it and tell you before your data moves.
12. Contact
Geeta Sawant, Bk no. 1608, Room no. 1, Section 26, Ulhasnagar 421004, Maharashtra, India
Email: support@hirehat.in