Privacy Policy
Last updated: 2026-07-18
This Privacy Policy describes how Neurohires ("we", "our", "the Service") collects, uses, and protects personal data when you use the platform. The English version is the legally controlling version.
1. Data we collect
We collect: (a) Account data — email address, name, password hash, role, and session tokens. (b) Profile data — work experience, education, skills, and preferences you enter. (c) Resume content — text you paste into the free resume checker is analyzed in memory and never stored on our servers. Resume files you upload are stored against your profile until you delete them. (d) Job activity — applications, match scores, saved jobs, and interview records. (e) Communications — messages between candidates and recruiters on the platform. (f) Usage data — page views, feature interactions, and session timing used for product analytics. (g) Payment metadata — subscription status and last-4 of card, processed by Stripe. Full card numbers never reach our servers.
2. How we use your data
We use your data to: provide and improve the platform (matching, resume analysis, interview preparation); personalize your experience; send transactional communications (account confirmation, interview reminders, weekly hiring summaries); prevent fraud and abuse; meet legal obligations; and operate our AI recruiting engine, which analyzes aggregate patterns to improve match quality. Before any resume or profile text is sent to an AI model, our system automatically strips emails, phone numbers, SSNs, and other direct identifiers and replaces them with placeholders. We do not sell your personal data.
3. Data sharing and subprocessors
We share data only with vetted subprocessors bound by data processing agreements. Key providers: Supabase (database and authentication, US/EU), Vercel (hosting, global edge), OpenAI (LLM analysis — PII redacted before transmission), Stripe (payments, no raw card numbers), and Resend (transactional email). A full list with data categories and hosting regions is at neurohires.com/legal/subprocessors. We do not share data with recruiters or employers beyond what is necessary to facilitate a specific hiring interaction you initiated.
4. Retention
Active account data is retained while your account is open. Resume text pasted into the free checker is never persisted beyond the analysis request. Uploaded resume files are retained until deleted by you or when your account closes. AI match scores are retained for the life of your account. Audit and security logs are retained for 2 years. When you request account deletion, a 7-day grace period begins during which you may cancel; after that, your profile, resumes, applications, messages, and analyses are permanently deleted. Database backups are purged on a 30-day rolling cycle.
5. Your rights
Your rights vary by region. In all regions you may contact yan@neurohires.com to exercise any right listed below.
United States
California (CCPA/CPRA) residents may request to know what personal information we have collected, request deletion, request correction, and opt out of the sale of personal information. We do not sell personal information. Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA) residents have similar rights. To exercise rights: use Settings → Privacy in your account dashboard, or email yan@neurohires.com. We respond to verified requests within 45 days.
European Union / EEA
If GDPR applies, you have the right to: access your data (Article 15); correct inaccurate data (Article 16); erasure — use Settings → Privacy → Delete Account; a 6-digit verification code is sent to your email, and a 7-day grace period follows during which you may cancel (Article 17); restriction of processing (Article 18); data portability in JSON or CSV format — use Settings → Privacy → Export Data (Article 20); and to object to processing (Article 21). You may lodge a complaint with your national supervisory authority. We respond to requests within 30 days.
Latin America
Brazil (LGPD) residents may confirm, access, correct, anonymize, block, or request deletion of personal data, and revoke consent. Other LATAM countries have similar frameworks. Contact yan@neurohires.com to exercise these rights.
Asia Pacific
Singapore (PDPA) and Australia (Privacy Act) residents have rights to access and correct personal data subject to applicable law. Contact yan@neurohires.com for requests.
6. Contact
For privacy requests, data subject access requests, subprocessor questions, or to report a concern, contact yan@neurohires.com. We respond to all verified requests within 30 days. For security vulnerability reports, use yan@neurohires.com.
Locale: en