Privacy policy

Recruit Today ([COMPANY LEGAL NAME], [COMPANY NUMBER], [REGISTERED ADDRESS]) is the controller of the personal information described here. Contact: hello@hirestride.co. [DATA PROTECTION / EU-UK REPRESENTATIVE — to confirm if required].

• Account: name, email address and a hashed password (we never store your password in plain text).
• Job preferences: country, target roles, skills, experience, desired salary, visa settings (e.g. weekly hours, new-entrant status).
• CVs: the text extracted from CVs you upload (the original file is not kept), AI analyses of it, and tailored applications / cover letters you generate.
• Activity: jobs you save, apply to or view while signed in, and tracker statuses and notes.
• Usage counters used to apply plan limits.
• Subscriptions: plan, status and purchase records. Card details are handled by Stripe or the Apple/Google stores; we never see them.
• If you enable notifications: a device push token.
• Security: sign-in session tokens and the device/browser user agent linked to them.
• Server logs: IP address, request details and timestamps, kept for security and troubleshooting.

We use strictly necessary cookies only: rt_token and rt_refresh (httpOnly, keep you signed in, up to 30 days) and rt_country(your chosen country, 1 year). Your cookie-banner choice is stored in your browser's local storage. We do not use analytics, advertising or tracking SDKs or cookies.

• To provide the service you sign up for (accounts, job feed, CV analysis, tailoring, tracker, subscriptions) — performance of a contract.
• Security, fraud prevention, fixing problems and improving the service — legitimate interests.
• Push notifications and job-alert emails — consent, which you can withdraw at any time in settings or on your device.
• Keeping billing records — legal obligation.

We use these service providers, who process data on our instructions:

• Google (Gemini API) — your CV text, job descriptions and preferences are sent to Google to generate CV analyses, job matches and tailored applications. [CONFIRM paid tier / terms under which Google does not use prompts for training].
• Stripe — web payments (email, account id, payment details).
• RevenueCat, Apple App Store and Google Play — in-app subscriptions (account id, purchase and device information).
• Resend — sending emails (address, alert content, password-reset links).
• Expo push service (via Apple APNs / Google FCM) — delivering notifications (push token, notification text).
• [HOSTING PROVIDER — DigitalOcean, to confirm, and region] — hosting our servers and database.

Job listings come from sources such as Adzuna, NHS Jobs and gov.uk; we only receive data from them and do not send them your personal information. We do not share your saved or applied job history with employers.

Some providers process data outside your country (including the US). Where required we rely on appropriate safeguards such as the UK/EU Standard Contractual Clauses or adequacy decisions. [TRANSFER MECHANISMS — to confirm per provider].

• Account data, CV text, analyses, applications and activity: until you delete your account, when it is removed. [RETENTION PERIOD for inactive accounts — to confirm].
• Session cookies: up to 30 days; country cookie: 1 year.
• Billing event records (without personal details) are kept after deletion for accounting. [RETENTION PERIOD — to confirm].
• Server logs and backups: [RETENTION PERIOD — to confirm].

Depending on where you live you may have the right to access, correct, export, delete or restrict use of your data, object to processing, and withdraw consent. You can do most of this yourself:

• Download your data and delete your account from your profile (in the app: Profile → Delete account).
• Deleting your account does not cancel an App Store or Google Play subscription — cancel it in your store settings.
• For anything else, email hello@hirestride.co.

You can also complain to your data protection authority (in the UK, the ICO).

• US (including California, CCPA/CPRA): we do not sell or share personal information for cross-context behavioural advertising. You may request to know, correct or delete your data and will not be discriminated against for doing so.
• Canada (PIPEDA): you may access and correct your information and withdraw consent by contacting us.
• Australia (Privacy Act / APPs): you may access and correct your information and complain to us, then to the OAIC.

HireStride is not directed at children under [16 — age to confirm] and we do not knowingly collect their data.

We will update this page, and the date below, if our practices change. Last updated: [DATE].