Privacy Policy

We collect information you provide when creating an account, including your email address and username. If you sign up with Google OAuth, we receive your email address and email verification status from Google.

You may optionally add a display name, bio, and avatar image to your profile. When you upload a resume, we extract its full text content, embedded links, and any GitHub or portfolio URLs found within it. Our AI processes this text to produce a structured summary that includes your name, role, years of experience, skills, work history, projects, education, and contact details as they appear on your resume.

If your resume links to a GitHub profile, we fetch your public GitHub bio, username, display name, location, and your top five most-starred public repositories (name, description, language, and star count). For linked repository URLs, we retrieve the repository README.

During interviews, we record the full transcript of every message exchanged with the AI interviewer. If you opt into audio recording, your voice recording is captured and stored. We also collect and store the AI-generated interview feedback and scores.

We use essential cookies to operate our service. Authentication tokens (access_token and ref_token) are required to keep you signed in. A guest_id cookie is used for anonymous session tracking. These cookies are HTTP-only and secure.

A non-essential cookie stores your theme preference (light or dark mode). We do not use any third-party analytics, tracking, advertising, or marketing cookies.

We use your information solely to provide and improve the Hireflow service. This includes conducting AI-powered practice interviews, generating interview feedback and scores, analyzing resumes for skill assessment, processing audio recordings (when enabled), and allowing you to share interview results publicly if you choose.

We do not sell your personal data to third parties. We do not use third-party analytics or tracking services. Interview transcripts and audio recordings are used only for generating feedback and are not shared except as you expressly authorize (e.g., making an interview public).

Your data is stored on secure servers. Structured data (accounts, interviews, feedback) resides in PostgreSQL. Files such as resumes, audio recordings, and avatars are stored in AWS S3. All data transmitted between your browser and our servers is encrypted using TLS.

We implement industry-standard security measures to protect your information. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

We retain your data for as long as your account is active or as needed to provide the service. If you delete your account, we delete or anonymize your personal data within a reasonable timeframe, except where we are required to retain it for legitimate legal or compliance purposes.

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, restrict or object to certain processing, and receive a copy of your data in a portable format. You can manage your profile information and interview visibility settings from your account dashboard.

To exercise these rights or request account deletion, contact us at the email address below. We will respond within the timeframe required by applicable law.

You control whether your interviews are publicly visible. When you make an interview public, your username, display name, avatar, job role, skill, experience level, recording, and AI-generated feedback become visible to anyone with the link. You can change this setting at any time.

We may update this Privacy Policy from time to time. Material changes will be notified through the service or via email. Your continued use of Hireflow after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at ay.work07@gmail.com.