Privacy Policy

Effective: 2026-05-05

This Privacy Policy describes how HiredOS ("we", "us") collects, uses, shares, and protects information about you when you use our platform, websites, mobile applications, browser extension, and APIs (collectively the "Service").

1. Information we collect

Information you provide

• Account data via Clerk authentication: name, email address, profile picture, hashed password (managed by Clerk).
• Profile data: headline, bio, hourly rate, skills, categories, portfolio links, tone preferences.
• Job & proposal content: titles, descriptions, budgets, AI-generated proposals, contracts, deliverables, reviews, and messages.
• Payment metadata via Stripe: customer ID, subscription ID, Connect account ID. We do not see or store full card numbers.

Information collected automatically

• Usage analytics: page views, features used, proposals generated, contract activity, request timestamps.
• Device data: IP address, user agent, mobile device model and OS, push notification token.
• Cookies & storage: first-party session cookies for authentication; local storage for in-app preferences. We do not use third-party advertising trackers.

Information from third parties

• Job boards: when you opt into automated scraping, we ingest publicly posted jobs from sources you select. This data is associated with your account for scoring and proposal generation.

2. How we use information

• To provide AI proposal generation, opportunity scoring, and marketplace transactions;
• To process payments, escrow, payouts, and subscriptions;
• To send transactional emails and push notifications about your account activity;
• To enforce rate limits, prevent abuse, and protect platform integrity;
• To improve the Service in aggregate (we do not train third-party foundation models on your content);
• To comply with legal obligations and respond to lawful requests.

3. Sharing & sub-processors

We share information only with the following sub-processors, strictly to operate the Service:

• Clerk — authentication and user identity
• Anthropic — AI (Claude) inference for proposals, demos, and deliveries
• Stripe — payment processing, subscriptions, Connect payouts
• Vercel — application hosting and edge network
• Neon / managed Postgres — primary data store
• Upstash — Redis-backed rate limiting
• Resend — transactional email delivery
• Expo — mobile push notification delivery

We do not sell personal information.

4. Your rights

Depending on your jurisdiction (including under GDPR and CCPA), you have rights to access, correct, port, or delete your personal data, and to opt out of certain processing. To exercise these rights, email privacy@hiredos.app. We will respond within 30 days.

5. Data retention

• Account data and profile: retained until account deletion.
• Transactional records (contracts, payments, payouts, reviews): retained for at least seven (7) years to meet tax and accounting obligations, even after account deletion.
• Proposals and AI deliveries: retained for two (2) years or until you delete them.
• Usage analytics: retained for thirteen (13) months in identified form, then aggregated.

6. Security

We use TLS for all network traffic, hash API keys with SHA-256, validate webhooks cryptographically, enforce CSP and standard hardening headers, and apply rate limits and token-cost caps to defend against abuse. No system is perfectly secure; you are responsible for keeping your account credentials safe.

7. International transfers

Our sub-processors are primarily based in the United States. By using the Service, you consent to the transfer of your information to the United States, which may not provide the same level of data protection as your jurisdiction.

8. Children

The Service is not directed to children under 18, and we do not knowingly collect data from them. If you believe a minor has provided us information, contact us and we will delete it.

9. Cookies

We use first-party session cookies set by Clerk for authentication. We use no third-party advertising or tracking cookies.

10. Changes

We may update this Privacy Policy. Material changes will be communicated by email or in-app notice. Continued use after the effective date constitutes acceptance.

11. Contact

Privacy inquiries: privacy@hiredos.app
Data Protection Officer: dpo@hiredos.app

This Privacy Policy is provided in good faith but has not been reviewed by counsel. You should consult a licensed attorney before launching publicly, especially regarding GDPR, CCPA, and any sector-specific obligations (e.g. financial-services data).