Privacy Policy

We collect only what's needed to run the product:

• Account data: name, email, hashed password.
• Resume content: profiles, generations, job descriptions you paste in.
• Billing data: order history (plan, amount, status). Card details and crypto wallets are handled by our payment processors (Stripe and NowPayments) — we never see them.
• Usage: anonymous logs (IP, user-agent) for security and rate limiting.

• To generate the resumes and cover letters you ask for.
• To track your daily token usage against your plan.
• To email you order confirmations, password resets, and (if you opted in) reminders.
• To detect abuse and prevent fraudulent signups.

We do not sell your data. We do not run third-party advertising trackers on this site.

• Account + resume data: MongoDB Atlas (US region).
• Generated PDFs: Cloudflare R2.
• Email delivery: Resend.
• Payments: Stripe and NowPayments (we store an order ID; they store the payment instrument).
• AI generation: OpenAI API. Your job descriptions are sent to OpenAI to generate the tailored resume; OpenAI's enterprise data terms apply.

You can:

• Export all your data (email privacy@hirefitly.com).
• Delete your account at any time from Settings — we wipe profiles, generations, interviews, and PDFs within 7 days.
• Object to specific processing (email us).

If you're in the EU/UK, you also have rights under GDPR. We'll honor any reasonable request within 30 days.

• HTTPS everywhere with HSTS preload.
• Passwords hashed with bcrypt.
• Card details never touch our servers (Stripe-hosted checkout).
• 2FA on every admin account.

We use a single first-party JWT cookie for authentication. We don't run analytics, ad, or tracking cookies.

We'll email all active users at least 30 days before any material change. The current version always lives at this URL.

Questions? Email privacy@hirefitly.com or visit /contact.