Privacy Policy

Last Updated: December 22, 2024

1. Introduction

Welcome to Hireling ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at hireling.io (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when using our Service:

  • Account Information: When you create an account, we collect your name, email address, and company information through Google OAuth authentication.
  • Job Postings: Information you provide when creating job listings, including job titles, descriptions, and form fields.
  • Application Data: Information submitted by job applicants through your application forms, including resumes and responses to questions.
  • Payment Information: When you make purchases, our payment processor (Stripe) collects payment card information. We do not store complete payment card numbers.
  • Communications: Information you provide when you contact us for support or feedback.

2.2 Automatically Collected Information

When you access our Service, we automatically collect certain information:

  • Usage Data: Information about how you use our Service, including pages visited, features used, and actions taken.
  • Device Information: Information about your device, including IP address, browser type, operating system, and device identifiers.
  • Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information and improve our Service.
  • Analytics: We use Google Analytics to understand how users interact with our Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide and Maintain the Service: To operate, maintain, and improve our job application platform.
  • Process Transactions: To process payments and send you related information including confirmations and receipts.
  • Communications: To send you technical notices, updates, security alerts, and administrative messages.
  • Customer Support: To respond to your comments, questions, and provide customer service.
  • Analytics and Improvements: To understand how users interact with our Service and improve functionality.
  • Security: To detect, prevent, and address technical issues, fraud, and security threats.
  • Legal Compliance: To comply with legal obligations and enforce our Terms of Service.
  • Marketing: With your consent, to send you promotional communications about new features, products, or services.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: We share information with third-party service providers who perform services on our behalf, including:
    • Google (authentication and analytics)
    • Stripe (payment processing)
    • Cloudflare (hosting and CDN)
    • Anthropic (AI-powered features)
    • Amazon Web Services (file storage)
    • Resend (email delivery)
  • Between Users: Job application data submitted by applicants is shared with the business owners who posted the job.
  • Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities.
  • Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
  • With Your Consent: We may share information for any other purpose with your consent.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or security purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using HTTPS/TLS
  • Secure authentication via Google OAuth
  • Content Security Policy (CSP) headers to prevent XSS attacks
  • Input sanitization to prevent injection attacks
  • Regular security updates and monitoring
  • Access controls and authentication requirements

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Your Privacy Rights

7.1 General Rights

Depending on your location, you may have the following rights:

  • Access: Request access to your personal information.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information.
  • Data Portability: Request a copy of your information in a structured, machine-readable format.
  • Objection: Object to our processing of your personal information.
  • Restriction: Request restriction of processing of your personal information.
  • Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your information.

7.2 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.

7.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your privacy rights

7.4 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@hireling.io. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Types of cookies we use:

  • Essential Cookies: Required for authentication and security.
  • Analytics Cookies: Help us understand how visitors use our Service (Google Analytics).
  • Preference Cookies: Remember your settings and preferences.

9. Third-Party Services

Our Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Key third-party services we use:

10. Children's Privacy

Our Service is not intended for children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary action.

11. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us: