Hire Space

Privacy Policy

Last updated: 3 June 2026

1. What we collect

Contact details you provide (name, email, phone); content you submit (CVs, job descriptions, answers); account data if you sign in; and basic usage data (which tools you use, counts, timestamps).

2. How we use it

To provide and improve the tools, to generate your results, to enforce plan limits, to contact you about the Service and relevant tips/updates, and to process payments.

3. AI processing

To produce results, the content you submit (e.g. your CV) is sent to our AI provider, Anthropic, for processing. We do not sell your data, and we instruct providers to process it only to serve your request.

4. Service providers we share with

We use trusted processors strictly to run the Service: Supabase (database & authentication), Anthropic (AI processing), Resend (email), Stripe (payments), and our hosting provider. They access data only as needed to provide their service.

5. Job listings

When you use the Job Finder, search terms derived from your inputs are used to query third-party job sources; clicking a listing takes you to that third party, governed by their own policies.

6. Storage & local data

Some data (e.g. your saved pipeline) may be stored in your browser’s local storage on your device. Account and lead data is stored in our database. Payment card details are handled by Stripe — we never see or store them.

7. Retention

We keep data for as long as needed to provide the Service and meet legal obligations. You can request deletion at any time.

8. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your data, and to object to certain processing. Contact us to exercise them.

9. Security

We use reasonable technical and organisational measures to protect your data. No method is 100% secure, but we work to keep it safe.

10. Contact

For any privacy request, email privacy@cvcraft.app.

This document is a general template and not legal advice. Have a qualified lawyer review it (and confirm GDPR/CCPA specifics) before launch.