Privacy Policy

HireSignal (“we”, “us”, or “our”) operates HireSignal. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read it carefully.

1. Information We Collect

1.1 Information you provide directly

• Account information: name, email address, and password (managed by Clerk).
• GitHub usernames you submit for analysis.
• Payment information (processed by Lemon Squeezy — we do not store card details).

1.2 Information collected automatically

• Usage data: pages visited, features used, analyses run, and timestamps.
• Device information: browser type, operating system, IP address.
• Analytics events via Amplitude (anonymised where possible).

1.3 GitHub data

We fetch data from the GitHub public REST API on your request. This includes public repository metadata, commit history, contribution activity, and profile information. We only access public data — we never access private repositories.

2. How We Use Your Information

• To provide, operate, and improve the Service.
• To process payments and manage your subscription via Lemon Squeezy.
• To authenticate your identity via Clerk.
• To send transactional emails (account confirmation, billing receipts).
• To analyse usage patterns and improve the product (via Amplitude).
• To comply with legal obligations.

We do not sell your personal data to third parties.

3. Data Retention

Analysis results are stored in your account history and can be deleted by you at any time from the dashboard. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it.

Candidate GitHub data used in analyses is not stored server-side after the analysis session ends. We do not build profiles of third-party candidates.

4. Data Sharing and Third Parties

We share data with the following third-party services:

5. Cookies

We use essential cookies to maintain your session and store plan preferences. We do not use advertising cookies. You can control cookies through your browser settings, but disabling essential cookies may affect Service functionality.

6. Security

We implement industry-standard security measures including HTTPS encryption, HMAC-signed session tokens, and access controls. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Object to or restrict processing of your data.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@hiresignal.io. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. International Transfers

Your data may be processed in countries outside your own, including the United States and the European Union. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on the Service. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact

For any privacy-related questions or requests, please contact our Data Protection contact at privacy@hiresignal.io.