Privacy Policy

1Information We Collect

When you use JobHoundHQ (“jobhoundhq.com”), we collect only the information necessary to provide you with direct ATS job feeds, 1-click candidate profile management, and AI-assisted resume tailoring:

• Account Credentials: Your email address, encrypted authentication session tokens, and subscription status (Pro or Free).
• Candidate Profile Data: If you build your candidate profile or use our onboarding parser, we store your contact details (name, phone, location, LinkedIn/GitHub links), employment history, education, skills, and work authorization preferences.
• Resume Documents: Resume files (PDF, DOCX, TXT) and raw resume text submitted for parsing or tailoring.
• Search & Platform Usage: Job search parameters (roles, locations, remote filters), bookmarked jobs, and application status tracking.
• Technical & Network Logs: Client IP addresses and user-agent strings collected transiently for security, rate-limiting, and fraud prevention.

2How We Use Your Information

We process your personal information for the following legitimate purposes:

• Direct Job Matching & Autofill: Allowing you to quickly navigate to verified employer ATS career portals and prepopulate job application inputs.
• AI Resume Generation: Extracting key achievements and dynamically tailoring resume bullet points and ATS keywords against target job descriptions.
• Account Authentication: Generating secure, passwordless 1-click magic login links sent to your verified email address.
• Subscription Fulfillment: Verifying paid Pro status, managing plan activations, and handling billing inquiries.
• Security & Abuse Prevention: Rate-limiting requests to prevent denial of service and automated scraping of our infrastructure.

3Artificial Intelligence & Google Gemini API

JobHoundHQ integrates with the Google Gemini API to provide resume text parsing and real-time ATS resume tailoring.

4Payment Processing (Dodo Payments)

We partner with Dodo Payments as our Merchant of Record and payment gateway to process all credit card and digital payment transactions.

When you subscribe to JobHoundHQ Pro, your payment information (such as credit card numbers, billing addresses, and CVV) is processed directly by Dodo Payments in compliance with Payment Card Industry Data Security Standards (PCI-DSS). JobHoundHQ never sees, processes, or stores your raw credit card information on our servers.

5Third-Party Service Providers

We share data only with trusted infrastructure providers required to operate the service:

• Neon Postgres: Cloud relational database hosting user records with encryption at rest (AES-256) and TLS encryption in transit.
• Resend: Transactional email service used solely to deliver authentication magic links and billing receipts.
• Vercel: Cloud hosting platform and edge delivery network for high-availability web delivery.

We do not share your information with advertising networks, external data brokers, or recruiting agencies.

6Cookies & Local Storage

JobHoundHQ uses minimal, strictly necessary cookies and browser local storage:

• jobhound_session: An HTTP-only, secure cookie that maintains your signed-in session.
• jobhound_user_email: Stores your authenticated email address for displaying your profile header.
• Client-side state: Local storage is used to remember your active search filters (e.g. role categories, remote switches) so your preferences persist between pages.

We do not use tracking pixels, Facebook Pixel, or cross-site tracking cookies.

7Your Rights & Data Deletion

You maintain complete sovereignty over your personal data. Regardless of your jurisdiction, you have the right to:

• Access & Review: View all candidate profile information and resumes stored on your account.
• Correction: Update, edit, or overwrite any information in your profile directly from the onboarding/profile screen.
• Permanent Deletion: Request permanent erasure of your account, candidate profile, resumes, and payment records. Simply email our data privacy team at support.jobhoundhq@gmail.com with the subject line “Data Deletion Request.” We process deletion requests within 48 hours.

8Security Measures

We employ strict organizational and technical security controls to safeguard your personal data:

• End-to-end TLS 1.3 encryption for all data in transit across our website and API endpoints.
• AES-256 encryption at rest for our database cluster.
• Stateless cryptographic HMAC tokens for session validation.
• Strict server-side IP rate limiting on AI and authentication endpoints to repel brute-force and scraping bots.

9Contact Us