Privacy Policy

JMV Labs LLC("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use HiredFast ("the Service").

We collect the information needed to create your account, operate the product, generate application materials, provide support, prevent abuse, and process billing. This may include:

• Account and authentication information: Name, email address, account identifiers, authentication status, session metadata, confirmation and password-reset events, and basic account settings.
• Profile and career data: Professional headline, location, phone number, portfolio and LinkedIn URLs, professional summary, skills, work experience, bullets, education, certifications, imported resume text, and LinkedIn import text.
• Job and application content: Job descriptions, target roles and companies, generated resumes, cover letters, interview prep, application answers, outreach drafts, match scores, ATS scores, keyword analysis, gap-fix plans, tracker entries, notes, contacts, salary ranges, statuses, and follow-up dates.
• Billing and usage records: Stripe customer, subscription, checkout, portal, invoice, plan, cancellation, refund, consent, webhook, monthly usage, and top-up balance metadata. Full card numbers and payment credentials are handled by Stripe and are not stored on our servers.
• Support and communications: Support form messages, topics, email metadata, transactional email delivery events, and related communications with us.
• Technical, security, and reliability data: IP address, user agent, device/browser information, request metadata, rate-limit keys, error logs, abuse-prevention logs, admin security logs, and operational logs needed to secure, debug, monitor, and improve the Service.
• Analytics and preference data: Cookie consent choice, anonymous or account-linked product events, page paths, feature usage, plan context, and sanitized event metadata, depending on your consent and authentication state.
• Sample Preview: Our public sample Apply Pack uses static sample data and does not process your resume, job description, or personal information.

Do not submit Social Security numbers, government identification numbers, financial account numbers, health information, immigration documents, or other highly sensitive personal data unless we specifically request it for a supported feature. HiredFast is not designed to store those categories of information.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate tailored resumes and application materials based on your profile and job descriptions
• Process and complete transactions
• Send you technical notices and support messages
• Respond to your comments and questions
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues
• Send you transactional and lifecycle emails, such as application follow-up reminders, if you have opted in or such communications are necessary to provide the Service

Our Service uses artificial intelligence providers, including OpenAI API services, to process your data and generate editable drafts. When you use AI features:

• We send the resume, profile, imported text, job description, generated context, and instructions needed for the feature you run.
• AI-generated resumes, letters, answers, scores, summaries, and recommendations are created from your inputs and should be reviewed before use.
• We do not use your personal data to train HiredFast models.
• OpenAI states that API inputs and outputs are not used to train or improve OpenAI models by default unless the API customer opts in.
• OpenAI may generate and retain abuse-monitoring logs for API usage, which may include prompts, responses, and metadata, for up to 30 days by default unless legal requirements or configured retention controls require otherwise.
• HiredFast may retain operational metadata such as model name, token usage, pipeline step status, request timing, errors, and audit signals so we can debug, secure, support, and improve the Service.

Review OpenAI's data controls documentation and business data privacy page for details about OpenAI's processing, retention, and training commitments.

We may share your information in the following situations:

• Service Providers: With third-party vendors who perform services on our behalf (e.g., hosting, AI processing)
• Legal Requirements: If required by law or in response to valid legal requests
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us permission to share your information

We do not sell your personal information to third parties. We do not share personal information for cross-context behavioral advertising.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal data for as long as your account is active or as needed to provide you with the Service, comply with legal obligations, resolve disputes, prevent abuse, process payments, and enforce our agreements. You may delete your account and associated data at any time through your account settings. Upon deletion, we remove your profile, resumes, applications, and related records from active systems, though backups, payment records, security logs, abuse-prevention records, and provider logs may be retained for a limited period where required for security, compliance, tax, billing, fraud prevention, dispute handling, or legal reasons.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to certain processing of your data
• Consent Withdrawal: Withdraw consent for data processing at any time

You can exercise most of these rights directly from your account:

• Export your data from your dashboard (JSON format)
• Edit your profile to correct any information
• Delete your account from your dashboard settings, which permanently removes all your data

For any rights not covered by self-serve options, contact us at privacy@hiredfast.io and we will respond within 30 days.

HiredFast does not sell your personal information. We do not share personal information for cross-context behavioral advertising. We do not use advertising cookies, tracking pixels, or third-party ad networks.

If you are a California resident and wish to exercise rights under the California Consumer Privacy Act (CCPA) or California Privacy Rights Act (CPRA), including the right to know, delete, correct, or opt out of sale or sharing, you may do so through the Data Rights page or by emailing privacy@hiredfast.io. We will not discriminate against you for exercising your privacy rights.

We use the following types of browser storage:

• Essential Cookies: Required for authentication and maintaining your session. These cannot be disabled without breaking the Service.
• Local Storage: Used to store your anonymous analytics ID, theme preference, and cookie consent choice. No personal information is stored.
• Session Storage: Used for temporary session tracking. Cleared when you close your browser.
• Analytics (Optional): We collect anonymous usage events (page views, feature usage) to improve the product. You can opt out by selecting "Essential Only" in the cookie consent banner.

We do not use advertising cookies, tracking pixels, or third-party ad networks.

See the Cookie Policy for more detail about browser storage and consent controls.

Our Service integrates with third-party services, including:

• Supabase: For database and authentication services
• OpenAI: For AI-powered resume generation, profile import, resume checking, cover letters, interview prep, application answers, outreach, scoring support, and quality review. Your relevant resume, profile, imported text, job descriptions, generated context, prompts, outputs, and request metadata may be transmitted to OpenAI for processing. OpenAI states that API inputs and outputs are not used to train or improve OpenAI models by default unless the API customer opts in.
• Stripe: For payment processing and subscription management. Your payment details are handled directly by Stripe and never stored on our servers.
• Amazon Web Services (SES): For transactional email delivery.
• Upstash (Redis): For temporary rate-limiting data. IP addresses used for rate-limiting are stored briefly and not linked to personal accounts.
• Sentry: For error monitoring and crash reporting. Error logs may incidentally capture request metadata. We configure Sentry to minimize personal data in error payloads.

These services have their own privacy policies, and we encourage you to review them.

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will take steps to delete it.

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence. By using the Service, you acknowledge these transfers. Where required by applicable law, we rely on appropriate transfer mechanisms.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

JMV Labs LLC
Email: privacy@hiredfast.io