Privacy Policy

This Privacy Policy explains how Hiremium ("we", "us", "our") collects, uses, stores and protects information when you use our website and our AI match-scoring and resume-parsing APIs (the "Service"). By using the Service you agree to the practices described here.

Information we collect

• Account information — your name, email address, and password (stored only as a secure hash). If you sign in with a social provider, we receive your name, email, and a provider identifier.
• Billing information — subscriptions and payments are handled by our payment processor, LemonSqueezy. We do not see or store your full card details; we retain only subscription status, plan, order references, and renewal dates needed to provision your account.
• API content — the job descriptions, applications, and resume files (PDF, Word, image, or text) you submit to the API for scoring or parsing, and the structured results returned.
• Usage data — a log of each API call (endpoint, credits consumed, status, timestamp, IP address) used for billing, security, and support.
• Technical data — standard request metadata such as IP address, browser type, and pages visited.

How we use your information

• To provide, operate, and maintain the Service and process your API requests.
• To manage your account, subscription, and credit balance.
• To respond to your support and contact requests.
• To monitor for abuse, enforce rate limits, and secure the Service.
• To comply with legal obligations.

AI processing and third parties

To generate match scores and parse resumes, the content you submit is processed by third-party AI providers acting as our subprocessors. Content is transmitted securely and used only to produce your result. We do not sell your data, and we do not use the content you submit to train our own models. We also share limited data with:

• LemonSqueezy — our payment processor, for billing and subscription management.
• Infrastructure and email providers — for hosting and transactional communications.
• Authorities — where required by law or to protect our rights.

Data retention

We retain account and billing records for as long as your account is active and as required for legal and accounting purposes. Uploaded resume files sent through the asynchronous flow are deleted from our servers immediately after processing. Usage logs are kept to support billing and security. You may request deletion of your account at any time.

Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), encryption of sensitive credentials at rest, hashed passwords, and access controls. API keys are shown only once at creation and are stored in hashed form. No method of transmission or storage is completely secure, but we work to protect your information and promptly address any issues.

Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can manage your profile from your dashboard, or contact us to exercise any of these rights.

Cookies

We use essential cookies to keep you signed in and to secure forms (session and CSRF protection). We do not use cookies to sell your data. reCAPTCHA may be used on our forms to prevent abuse, subject to Google's privacy terms.

International transfers

Your data may be processed in countries other than your own, including by our subprocessors. Where required, we rely on appropriate safeguards for such transfers.

Children

The Service is not directed to individuals under 16, and we do not knowingly collect their personal data.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above, and where appropriate we will notify you.