Privacy Policy

HiredBound is operated by HiredBound in the Philippines. For the personal data described here we are the personal information controller under the Data Privacy Act of 2012 (Republic Act No. 10173).

For any privacy question or request, contact us through the support address shown in your account emails.

We collect only what the service needs to work.

• Account details: your email address, your name if you give it, and a one-way hash of your password. If you sign in with Google we receive your Google account ID, email address and name — never your Google password.
• What you create: the content of your resumes and cover letters (work history, education, skills, contact details and anything else you type), photos and images you add, email signatures, and video intros with their captions.
• Files you import: when you import an old resume we read its text to fill in a new resume. We keep the resulting resume, not the uploaded file.
• Payments: the pass you bought, the amount, the payment method type (for example GCash) and the payment reference. Card and wallet details are entered on PayMongo's page and never reach our servers.
• Sign-in sessions: a record of each device signed in to your account, so you can sign devices out.
• Basic usage: which template you picked and when you last used the service. We also count page views on our own servers: the page opened, the website you came from, and whether you used a phone, tablet or computer. This uses no cookies, we do not keep your IP address, and the count cannot follow you from one day to the next. If your browser sends “Do Not Track” or Global Privacy Control, the visit is not counted. We do not run advertising or cross-site tracking, and no third-party analytics service is involved.

A resume can include sensitive details if you choose to add them (for example a photo, age or civil status). Adding them is optional and up to you.

When you send someone a tracked resume link or a video link, we record a small amount about each visit so you can see whether it was opened:

• the time of the visit and how long the page stayed open,
• the type of device (desktop, mobile or tablet) and the website they came from, if any,
• whether the PDF was downloaded,
• a random identifier kept in the visitor's browser and stored by us only as a one-way hash, used to tell a repeat visit from a new one.

We do not record the visitor's name, email address or exact location, and we do not try to identify them. You are responsible for sharing your links lawfully.

• To provide the service: save your documents, render PDFs and Word files, host your shared links, videos and signature images.
• To run your account: sign you in, verify your email, reset your password, and apply the Pro time you paid for.
• To send service emails: verification, password reset, payment receipts and the “your resume was opened” alert.
• To send product updates and reminders (for example a job follow-up date you set, or a nudge to finish your resume), only if you have left them switched on. Each one has an unsubscribe link, and you can switch them off in Settings. Notices about your account, such as a Pro pass about to end, are always sent.
• To keep the service secure and working: prevent abuse, fix problems and keep backups.

Some optional features use an AI provider (Google Gemini or OpenAI): AI tailoring and writing help (your resume text and the job post you paste), AI captions for videos and, when available, reading an imported resume. When you use one, the text or audio needed for that request is sent to the provider to produce the result.

We do not use your documents to train our own models. Virtual backgrounds and eye contact for video run on your own device, and the PDF editor works entirely in your browser — those files are not uploaded for that purpose. The one exception is a signature you add in the PDF editor: if you sign on your phone, that drawing passes through our servers for up to 15 minutes so your computer can collect it, and is then deleted; a signature is kept in your account only if you tick “Save this signature”, and you can delete it at any time.

We do not sell your personal data. We share it only with the providers that run parts of the service for us, and only as needed:

• Railway — hosting of the application, database and uploaded files.
• Cloudflare — file storage and off-site backups, where enabled.
• Resend — sending emails.
• PayMongo — processing payments.
• Google — sign-in with Google, if you use it.
• Google Gemini or OpenAI — the AI features described above, when you use them.

Some of these providers store data outside the Philippines. We may also disclose information when the law requires it.

Your documents are private by default. Something becomes visible to others only when you share it:

• A tracked resume link shows that resume to anyone who has the link, until you switch the link off or delete it.
• A video is visible to anyone with its link when you set it to public; you can make it private or protect it with a password.
• Images in an email signature are loaded from our servers by the people who receive your emails.

We use only the cookies needed to keep you signed in, to complete a Google sign-in or unlock a password-protected video, and, if you arrive through a friend's invite link, to remember that link for 30 days so you both receive the invite reward. We do not use advertising cookies. Your browser may also store small preferences, such as a dismissed tour, on your device.

• Your account and documents are kept until you delete them or delete your account.
• When you delete your account, your documents, videos, links and sessions are deleted with it. Copies in backups are overwritten within about 30 days.
• Payment records are kept for as long as tax and accounting rules require.
• Verification and password-reset links expire within 24 hours and 1 hour.

Connections are encrypted in transit. Passwords are stored only as salted one-way hashes, and sign-in sessions are stored as hashes too. Access to your documents is limited to your own account. No system is perfectly secure; if a breach affects your personal data we will notify you and the National Privacy Commission as the law requires.

Under the Data Privacy Act you have the right to be informed, to access, to correct, to object, to erasure or blocking, to data portability, and to complain. In practice:

• Access and portability: Settings → Your data → download everything as a file.
• Correction: edit your documents and profile at any time.
• Erasure: Settings → Delete account.
• Object to marketing: switch product updates off in Settings, or use the unsubscribe link.

For anything else, contact us through the support address shown in your account emails. We answer within 30 days. You may also complain to the National Privacy Commission at privacy.gov.ph.

The service is for people who are 18 or older, or who use it with the consent of a parent or guardian. We do not knowingly collect data from children under 13.

We will update this page when the service or the law changes, and change the date at the top. For significant changes we will tell you by email or in the app. See also our Terms of Service.