Privacyin plain English.

Who runs Hireex

Hireex is the data controller for any personal data you give us. A formal legal entity will be disclosed at the latest before paid tiers go live; in the meantime, all privacy-related questions go to [email protected].

What we collect

• Your email address — for the magic-link sign-in and your daily shortlist.
• Your résumé — so we can match you to job postings.
• Your shortlist history — the roles we’ve handed you and whether you applied or skipped.
• Standard server logs (IP address, browser, timestamp) for security and abuse prevention.

Why we hold it

Legal basis: contract performance for running the service, explicit consent for the morning shortlist email, and legitimate interest for logs and security data. For users in the EU/UK, this maps to GDPR Art 6(1)(b), (a), and (f) respectively; users in other jurisdictions retain the equivalent grounds under their local privacy law.

How long we keep it

Your account and résumé live with us for as long as you keep the account open. Server logs roll off after 90 days. Delete your account from the app and we drop everything within 30 days.

Who else sees it

Nobody outside Hireex. We don’t sell, share, or rent your résumé to recruiters or third parties. Email delivery happens through a transactional email provider (Resend); they handle the bytes for delivery and nothing else. Hosting runs on our own private infrastructure.

Your rights

You can ask us at any time to: see what we hold, correct it, erase it, or hand it back to you in machine-readable form. EU/UK users hold these rights under GDPR Articles 15–20; users elsewhere hold the equivalent rights under their local privacy law. Email [email protected] and we’ll respond within one calendar month.

If you’re not happy

You can complain to your local data-protection authority. We’ll always prefer to fix it directly first — email [email protected].

Changes

If we change this notice in a way that meaningfully affects your data, we’ll email you before it takes effect.