Privacy Policy

1. Introduction

Welcome to SpeedUpHire ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered resume optimization and ATS scoring services.

By using SpeedUpHire, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account with us through Google OAuth authentication, we collect:

• Your Google account email address
• Your name as provided by Google
• Your Google profile picture (if available)
• Unique user identifier from Google

2.2 Resume and Job-Related Data

When you use our services, we process and may temporarily store:

• Resume content (text extracted from uploaded PDF files)
• Job descriptions you provide for ATS analysis
• Candidate name, phone number, and email (extracted from resume)
• Skills, experience, projects, and education information (extracted from resume)
• ATS scores and analysis results
• Tailored resume content generated by our AI
• Cover letters generated by our AI

2.3 Usage and Activity Data

We automatically collect information about your use of our services:

• Activity logs (resume scans, resume tailoring, cover letter generation)
• Timestamps of service usage
• IP address for rate limiting and security purposes
• Browser and device information
• Usage statistics and analytics

2.4 Technical Data

For service optimization and security, we collect:

• Session tokens and authentication data
• Rate limiting data (request counts and timestamps)
• Error logs and system performance data
• Cache data for improved service performance

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide ATS scoring, resume optimization, and AI-powered recommendations
• Authentication: To verify your identity and manage your account
• Personalization: To provide tailored recommendations and improve your experience
• Analytics: To understand usage patterns and improve our services
• Security: To prevent fraud, abuse, and ensure platform security
• Rate Limiting: To ensure fair usage and prevent system abuse
• Customer Support: To respond to your inquiries and provide assistance
• Legal Compliance: To comply with applicable laws and regulations

4. Data Storage and Retention

4.1 Storage Infrastructure

Your data is stored using industry-standard security measures:

• Database: PostgreSQL database with encryption at rest
• Cache: Redis cache for temporary data (24-hour expiration)
• Authentication: Supabase authentication system
• File Processing: Temporary PDF processing (files not permanently stored)

4.2 Data Retention Periods

We retain your data for the following periods:

• Account Data: Retained while your account is active and for 30 days after account deletion
• Resume Content: Stored only if you explicitly choose to save it; otherwise processed and discarded immediately
• ATS Analysis Results: Retained for 1 year to provide historical analysis and improvements
• Activity Logs: Retained for 2 years for analytics and service improvement
• Cache Data: Automatically expires after 24 hours
• Rate Limiting Data: Stored in memory and cleared after 60 seconds
• Error Logs: Retained for 90 days for debugging and system improvement

4.3 Optional Data Storage

You have control over what data we store:

• Resume content is only saved to our database if you explicitly choose the "Save Resume" option
• If you don't save your resume, the content is processed for analysis and then discarded
• ATS analysis results are cached temporarily (24 hours) for performance optimization

5. Data Sharing and Third Parties

5.1 Third-Party Services

We use the following third-party services to provide our platform:

• OpenAI: For AI-powered resume analysis, scoring, and content generation
• Google OAuth: For secure authentication
• Supabase: For authentication and user management
• PostgreSQL: For secure data storage
• Redis: For caching and performance optimization

5.2 Data Sharing Practices

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services necessary for platform operation
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: When you explicitly consent to sharing

6. Your Rights and Choices

6.1 Data Access and Control

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of data processing
• Objection: Object to certain types of data processing

6.2 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

• Email: support@speeduphire.com
• Subject Line: "Data Privacy Request"
• Include: Your account email and specific request details

6.3 Account Deletion

You can delete your account at any time through your account settings or by contacting us. Upon account deletion:

• Your account data will be permanently deleted within 30 days
• Saved resume content will be immediately deleted
• Activity logs may be retained for up to 2 years for analytics (anonymized)
• Cached data will expire automatically within 24 hours

7. Security Measures

We implement comprehensive security measures to protect your data:

• Encryption: Data encrypted in transit (HTTPS/TLS) and at rest
• Authentication: Secure OAuth 2.0 authentication with Google
• Access Control: Role-based access controls and user authentication
• Rate Limiting: Protection against abuse and unauthorized access
• Monitoring: Continuous monitoring for security threats
• Regular Updates: Regular security updates and patches
• Data Minimization: We collect only necessary data for service provision

8. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your personal information.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending email notifications for significant changes

Your continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

12. Legal Basis for Processing (GDPR)

For users in the European Union, our legal basis for processing your personal data includes:

• Consent: When you provide explicit consent for specific processing activities
• Contract: To perform our services as outlined in our Terms of Service
• Legitimate Interest: For analytics, security, and service improvement
• Legal Obligation: To comply with applicable laws and regulations