Plain English summary: We collect only what we need to run Hirelett. We don't sell your data. Your Career Vault is visible only to you unless you explicitly turn on Career Visibility. Third-party services we use (Supabase, Paystack, Resend, Anthropic) process data as described below.
1. Who we are
Hirelett is a career platform operated by Hirelett (“we”, “us”, “our”). Our platform helps African professionals find and land international remote work. Our website is available at hirelettai.com.
For data protection queries, contact us at:
privacy@hirelettai.com2. Data we collect
Account data: Your name and email address when you sign up. We use Google OAuth or magic link — we never store passwords.
Career Vault data: Work experience, skills, education, certifications, career goals, and salary expectations that you voluntarily add to your vault. This data is used to power all Hirelett features and is never shared without your explicit consent.
Application data: When you apply to listings through Hirelett, we record the application, your vault snapshot at time of application, and any status updates from employers.
Payment data: Subscription and credit purchase data is processed by Paystack. We store your plan status and credit balance but never your card details.
Usage data: Standard server logs including IP addresses, pages visited, and feature usage. Used to debug issues and improve the product. Retained for 90 days.
Communications: Emails you send to us and notification emails we send to you.
3. How we use your data
- Providing and improving the Hirelett platform
- Personalising features using your Career Vault data (resume tailoring, interview questions, career GPS, offer evaluation)
- Sending transactional emails (status updates, receipts, magic link sign-in)
- Sending product update emails (you can unsubscribe at any time)
- Processing payments and managing subscriptions
- Enforcing our Terms of Service and preventing fraud
We do not use your data for advertising. We do not sell your data. We do not share your data with third parties except as described in Section 4.
4. Third-party services
We use the following services to operate Hirelett. Each processes data as a data processor on our behalf:
Supabase (supabase.com): Database and authentication. Your account and vault data is stored here, encrypted at rest, in EU West (Ireland) region. Supabase processes data under their Data Processing Agreement.
Anthropic (anthropic.com): AI processing. When you use features like resume tailoring, interview prep, or career GPS, relevant portions of your vault data are sent to Anthropic's API to generate outputs. Anthropic does not use API inputs to train their models. Data is processed in transit only.
Resend (resend.com): Transactional email. Your email address is shared with Resend to deliver emails. Resend processes data under GDPR-compliant terms.
Paystack (paystack.com): Payment processing. Payment card data is handled entirely by Paystack and is never stored by Hirelett. Paystack is PCI DSS compliant.
Netlify (netlify.com): Web hosting and deployment. Netlify processes standard web request data including IP addresses.
5. Career Visibility and employer access
By default, your Career Vault is completely private. Only you can see it.
If you enable Career Visibility in your vault settings, verified employers on Hirelett can discover an anonymised version of your profile (skills, experience level, location — not your name or contact details).
When an employer expresses interest and you accept their interest, your full profile becomes visible to that employer and they can contact you directly.
When you apply to a listing through Hirelett, your vault snapshot at the time of application is shared with that employer.
You can turn off Career Visibility at any time from your vault settings.
6. Data retention
We keep your account and vault data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days, except where we are legally required to retain it (e.g. payment records for tax purposes, retained for 7 years).
Anonymised, aggregated data (e.g. salary benchmarks derived from offer evaluations) may be retained indefinitely as it cannot be linked back to you.
7. Your rights
You have the right to:
- Access — request a copy of all data we hold about you
- Rectification — correct any inaccurate data (most data can be edited directly in your vault)
- Erasure — request deletion of your account and personal data
- Portability — request your vault data in a machine-readable format
- Restriction — request we stop processing your data while a complaint is resolved
- Objection — object to processing based on legitimate interests
To exercise any of these rights, email
privacy@hirelettai.com. We will respond within 30 days.
8. Cookies
Hirelett uses only essential cookies required for authentication (session tokens set by Supabase). We do not use advertising cookies, analytics cookies, or tracking cookies.
9. Security
We implement industry-standard security measures including: HTTPS encryption on all connections, encrypted storage of data at rest in Supabase, row-level security ensuring users can only access their own data, and no storage of passwords (authentication is handled via Google OAuth and email magic links).
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email. Continued use of Hirelett after changes constitutes acceptance of the updated policy. The “Last updated” date at the top of this page shows when changes were last made.