Privacy Policy

Last updated: April 2025

1. Who we are

HirePadi ("we", "us", "our") is a job-search platform operated at hirepadi.com. We help job seekers track applications, match CVs to job listings, and manage their pipeline.

2. Information we collect

  • Account data: name, email address, and password (hashed).
  • CV / resume data: text content you upload or paste to enable job matching.
  • Pipeline data: job listings you save and their application status.
  • Gmail data (optional): if you connect Gmail, we read email metadata (sender, subject, snippet) from companies you have applied to in order to detect recruiter replies. We never read, store or transmit the full body of any email, and we never send, delete or modify emails.
  • Usage data: standard server logs (IP address, browser, pages visited) for security and debugging.

3. How we use your data

  • To provide and improve the HirePadi service.
  • To match your CV against job listings and display a fit score.
  • To send email digests and pipeline reports you have opted into.
  • To automatically update your pipeline when recruiter replies are detected (Gmail feature, opt-in only).
  • We do not sell, rent or share your personal data with third parties for advertising.

4. Gmail API usage

HirePadi's use of Gmail data is limited to detecting recruiter replies and updating your job pipeline. We do not use Gmail data for advertising, do not transfer Gmail data to third parties except as necessary to operate the service, and comply with the Google API Services User Data Policy, including the Limited Use requirements.

Our use of information received from Gmail APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI/ML training: Data obtained through the Gmail API — including email metadata, sender information, and any content derived from Gmail — is never used to develop, improve, or train generalised artificial intelligence or machine learning models. This data is used solely to detect recruiter replies for the individual user who granted access and for no other purpose.

5. Data retention

Your data is retained for as long as your account is active. You may delete your account and all associated data at any time directly from Settings → Danger Zone — this is immediate and permanent. You may also request deletion by contacting us at hello@hirepadi.com. Gmail access tokens are revoked and deleted immediately when you disconnect Gmail or delete your account.

6. Third-party services

We use the following sub-processors: Supabase (database hosting), Vercel (hosting), Resend (transactional email), Anthropic (AI job matching). Each operates under their own privacy policy and data processing agreements.

7. Your rights

You have the right to access, correct, export or delete your personal data at any time. To exercise these rights, contact us at hello@hirepadi.com.

8. Security

We use industry-standard measures including TLS encryption in transit, encrypted storage for OAuth tokens, and row-level security policies on all user data.

9. Changes to this policy

We may update this policy from time to time. The latest version is always available at hirepadi.com/privacy. Continued use of the service after changes constitutes acceptance.

10. Contact

Questions? Email us at hello@hirepadi.com.