Privacy Policy

1 Who we are

HyreMe publishes a desktop application for macOS that helps job seekers score, rewrite and tailor their resumes. Where this policy says “HyreMe”, “we”, “us” or “our”, it means the operator of hyremeapp.com and the HyreMe application.

The single most important thing in this document: the HyreMe application runs on your computer, and your resume, your profile and every document it generates are stored there, not with us. We do not receive them, we cannot read them, and we have no copy to lose.

Questions about anything here go to the contact form.

2 What this policy covers

This policy covers two separate things, and it is worth keeping them apart:

• The website at hyremeapp.com, including your HyreMe account, and any purchase of job credits.
• The desktop application, which stores everything locally and reaches out only to HyreMe's own AI connection when you spend a credit.

3 What data we collect

Account data — collected when you create an account so you can download the app and hold credits:

• Name and email address
• Password, stored only as a cryptographic hash, or the fact that you signed in with Google or LinkedIn
• Account creation date and sign-in timestamps

Signing in with Google or LinkedIn shares your name and email address with us and nothing further. We do not read your LinkedIn profile, connections, messages or activity, and we do not post anything on your behalf.

Purchase data — if you buy a credit pack:

• Billing name, country and transaction history
• Payment method type and the last four digits of a card
• Your credit balances — profile, Score-up and job-cycle — and how many have been used

Website usage data — ordinary server and analytics data from hyremeapp.com: IP address, browser and device type, pages viewed and session duration. This is about the website, not the application.

Communications — whatever you write in the contact form, and any subsequent support correspondence.

What we do not collect:

• Your resume file, or any text extracted from it
• Your profile, ATS reports, rewritten resumes, job analyses or cover letters
• The job postings you analyse

Those live in the application's data folder on your own machine, at ~/Library/Application Support/com.hyreme.desktop/. Deleting that folder removes all of it permanently.

4 How we use your data

We use what we collect to:

• Create and manage your account and give you the application download
• Track and apply your credit balances, and renew the free monthly allowance
• Process purchases and issue receipts
• Send transactional email — confirmations, password resets, receipts, and notices about updates or breaking changes
• Send product news, only if you asked for it, with a working unsubscribe link in every message
• Answer your support and contact enquiries
• Understand website traffic in aggregate and fix what is broken
• Meet our legal obligations

5 How the application handles your data

This section describes the desktop app specifically.

• Local storage. Your profile, the text read from your resume, the current job analysis, your settings and generated PDFs are written to files in the application's own data folder on your computer.
• The AI connection. Building a profile, scoring it, rewriting it, analysing a job or generating documents sends the relevant text — your profile content, and the job description where one applies — over HyreMe's built-in AI connection. That text is processed to produce the result and is not stored by us or used to train models. There is no API key for you to manage, because the connection is ours.
• Credit accounting. The app tells our server which credit type was spent. It does not send the profile, the job, the analysis or the documents.
• Reading a job URL. If you give the app a job link, it fetches that page directly from your computer.

6 Legal basis for processing

Depending on where you live, our basis for processing is one of:

• Contract performance — running your account, delivering the download, applying credits you bought
• Legitimate interests — keeping the service secure, preventing fraud, understanding website traffic in aggregate
• Consent — product news and any non-essential cookie
• Legal obligation — tax records and responses to lawful requests

In Canada we process personal data in accordance with PIPEDA and applicable provincial privacy legislation. In the EU and UK, in accordance with the GDPR and UK GDPR.

7 Who else sees your data

We use a small number of service providers, each bound by contract to process data only on our instructions:

• Payment processing (Stripe) — purchases and refunds
• Cloud hosting — the website, account records and credit balances
• Transactional email — confirmations, resets and receipts
• Website analytics — aggregate traffic data for hyremeapp.com
• Identity providers (Google, LinkedIn) — only if you choose to sign in that way, and only to confirm your name and email

We may also disclose data where the law requires it, or where it is necessary to protect the rights and safety of our users or the public. We do not sell personal data, and we do not share it with advertisers.

8 How long we keep it

• Account data — until you delete your account
• Purchase records — seven years, for accounting and tax law
• Credit balances — for the life of the account
• Support messages — two years
• Website analytics — anonymised after thirteen months

When you delete your account, your personal data is permanently removed within 30 days, other than records we are legally required to keep. Anything held by the application on your own computer is unaffected — it stays there until you delete it, and the app keeps working on it.

9 Your rights

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct anything inaccurate or incomplete
• Delete your personal data
• Export your data in a machine-readable format
• Object to particular kinds of processing, including marketing
• Withdraw consent at any time where processing relies on it
• Complain to your local data protection authority

Use the contact form and mention “Data request”. We respond within 30 days. Note that we cannot give you a copy of your resume or profile, because we have never had one — those are files on your own computer.

10 Cookies

hyremeapp.com uses cookies to keep you signed in, remember your preferences, and measure traffic in aggregate. You can manage them through your browser or our consent banner; turning off the non-essential ones does not stop the site or the app working.

The desktop application does not use advertising or tracking cookies.

11 Security

• HTTPS/TLS for everything in transit
• Passwords stored as salted hashes, never in a readable form
• Role-based access control for staff, on a need-to-know basis
• Card details handled solely by our payment processor
• Regular dependency and vulnerability review

The strongest security property here is architectural rather than procedural: your resume and generated documents are not on our systems, so no breach of ours can expose them.

12 International transfers

Our servers are located in North America. Where data is transferred out of your region we rely on appropriate safeguards, including Standard Contractual Clauses for EU and UK transfers and equivalent mechanisms under PIPEDA.

Separately: requests made over the built-in AI connection are processed on infrastructure that may be located outside your region, under the same safeguards described above.

13 Children

HyreMe is not intended for anyone under 16 and we do not knowingly collect data from children. If you believe a child has given us personal data, tell us and we will delete it promptly.

14 Changes to this policy

We may update this policy. The effective date at the top always reflects the current version, and where a change is significant we will notify you by email or in the app before it takes effect. Continuing to use HyreMe after that date means you accept the updated policy.

15 Contact us

For anything in this policy, including data requests and account deletion, use the contact form and select Legal & privacy. We aim to respond within five business days, and within 30 days for formal data requests.