Introduction
hrvstr, Inc. ("hrvstr," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").
Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Information You Provide
We collect information you voluntarily provide, including:
- Account Information: Email address, name, and authentication credentials when you create an account
- Resume Data: Work history, education, skills, and contact information from uploaded resumes
- Job Data: Job descriptions, company names, and URLs you save to track
- Generated Content: Tailored resumes and cover letters created using our Service
- Notes and Preferences: Notes you add to jobs, interview details, and contacts
- Payment Information: Billing details processed securely through Stripe
- Communications: Messages you send through support channels
Information Collected Automatically
When you use our Service, we automatically collect:
- Usage Data: Pages visited, features used, and actions taken
- Device Information: Browser type, operating system, and device identifiers
- Log Data: IP address, access times, and referring URLs
- Cookies: Session and preference cookies (see Cookie section below)
Information from Third Parties
We may receive information from:
- Authentication Providers: Profile information from Google or other OAuth providers you use to sign in
- Payment Processors: Transaction confirmations from Stripe (we do not store full payment card numbers)
How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Service
- Generate tailored resumes and cover letters using AI
- Analyze job fit and provide match scores
- Process payments and manage subscriptions
- Send service-related communications (account updates, security alerts)
- Respond to your support requests
- Improve and personalize the Service
- Detect and prevent fraud or abuse
- Comply with legal obligations
AI Processing
Our Service uses artificial intelligence to generate content. When you use AI features:
- Your resume and job data are processed by our AI systems
- Data is transmitted securely to AI service providers (e.g., Anthropic)
- AI providers process data according to their privacy policies and our data processing agreements
- Generated content is stored in your account for your use
We do not use your personal data to train AI models without your explicit consent.
Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
Service Providers
Third parties that help us operate our Service, including:
- Cloud Hosting: Vercel, for hosting our application
- Database: Neon, for data storage
- Authentication: Clerk, for user authentication
- Payments: Stripe, for payment processing
- AI Services: Anthropic, for content generation
- Analytics: Privacy-focused analytics tools
These providers are contractually obligated to protect your data and use it only for the services they provide to us.
Legal Requirements
We may disclose information if required to:
- Comply with applicable laws or legal processes
- Respond to lawful requests from public authorities
- Protect our rights, privacy, safety, or property
- Enforce our Terms of Service
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any change in ownership or use of your personal information.
Data Retention
We retain your data for as long as your account is active or as needed to provide services. Specifically:
- Account Data: Retained until you delete your account
- Resume and Job Data: Retained until you delete them or your account
- Generated Documents: Retained until you delete them or your account
- Usage Logs: Retained for up to 90 days
- Payment Records: Retained as required by tax and accounting laws (typically 7 years)
Your Rights and Choices
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Delete your account and associated data
- Export: Download your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Withdraw Consent: Where processing is based on consent
To exercise these rights, visit Settings in your account or contact us at privacy@hrvstr.net.
Data Security
We implement appropriate security measures, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure authentication with session management
- Regular security assessments and updates
- Access controls limiting employee access to data
- Secure data centers with physical security measures
While we strive to protect your information, no method of transmission or storage is 100% secure. Please use strong passwords and protect your account credentials.
Cookies and Tracking
We use cookies for:
- Essential Cookies: Required for the Service to function (authentication, security)
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Understand how users interact with our Service
You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.
Children's Privacy
Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
International Data Transfers
Our Service is operated in the United States. If you are located outside the US, your information may be transferred to and processed in the US or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers.
California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. We do not sell personal information as defined by the CCPA.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
For information about how we handle your data specifically, see our Data Policy.