Privacy Policy

What we collect

Account information: you sign in with Google, which shares your email address, name and profile picture with TidyHire.

Content you save: job details (title, company, link, description, location, salary), your notes such as why you applied, your interview questions and answers, your interview log, and your settings.

Your profile / CV, if you fill in the onboarding wizard: contact details, summary, education, work experience, projects and skills. If you upload a CV file (PDF or Word) to fill the wizard, the file is processed in memory to extract these fields and is not stored.

Technical information: our hosting and database providers keep standard logs (such as IP address and browser type) to operate and secure the service.

Where you came from: if you arrive through one of our campaign links (with utm_ parameters, e.g. from a flyer), its source, medium and campaign name are kept in a first-party cookie for up to 30 days and saved with your profile when you sign up. We use it only to see which channels bring users; no third party is involved.

The Chrome extension

The extension only acts when you click its icon. It then reads the job posting on the current tab (title, company, description, link) to fill in the save form. Nothing is sent until you press Save, and you can edit or delete any field first.

It does not track your browsing, read other tabs, or run in the background on job sites.

To save to your account it stores a short-lived sign-in token in your browser's extension storage. It never receives your password.

The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

How we use it

Only to provide TidyHire to you: storing your board and cheat sheets, and generating summaries. We do not sell your data, show ads, or share it for marketing.

AI processing

If you upload a CV file, its full content (including the contact details in it) is sent to Anthropic's Claude API once, only to extract the fields into the wizard; the file isn't kept by TidyHire.

When you save a job with a description, the job's title, company and description are sent to Anthropic's Claude API to generate a company summary, the tech stack, a salary estimate and suggested questions. If you filled in your profile, a condensed version of it (headline, summary, experience, projects, education and skills, without contact details) is sent too, so the questions and talking points fit your background. Anthropic processes this data under its commercial API terms and, by default, does not use API data to train its models. Your notes, answers, interview log and account details are not sent.

If you run a CV match analysis on a job, the same job details and condensed profile are sent to Anthropic's Claude API to produce the match score, gaps, interview questions and an outreach draft.

Notes you add about yourself next to the analysis are stored with the job (or in your profile, if you choose) and sent along in these calls. If you create a CV tailored to a job, your full CV (without contact details, which are added back on our side; your name and city are included only when you ask for it in another language, to translate them), the job details and your notes are sent to Claude to rewrite it; the result is stored with the job.

To enforce per-account limits, we record for each AI request its type (job summary or CV import), the model used, the number of tokens and the cost. These records contain no content from your jobs or CV.

Service providers

Supabase (database and sign-in), Vercel (hosting), Anthropic (AI summaries), Google (sign-in) and Grow (Meshulam, payments). Each processes data only to provide its part of the service.

Payments

Credit purchases are paid on Grow's secure payment page; TidyHire never sees or stores your full card number. Grow sends us the transaction details: the amount, the transaction number and approval code, the payer's name, email and phone if given, and the card's last four digits and type. We keep them with the purchase for accounting, support and refunds, and they're only readable on our server. Because accounting records must be kept, purchase records stay after an account is deleted, no longer linked to the account.

Security and retention

Data is sent over HTTPS, and database rules ensure each account can only access its own data.

Your data is kept until you delete it or your account. You can delete individual jobs and questions at any time in the app, and your whole account under Settings → Delete account, which removes all its data immediately. You can also email idan.barz@gmail.com and we will delete it within 30 days.

If you send feedback from inside the app, we store your message with the page you sent it from, your language, window size and browser, to help us fix problems. It's deleted with your account.

After an account is deleted we keep only a one-way hash of its email address together with how many jobs it saved, how much its AI use cost and how many of its free credits were left, so that signing up again doesn't hand out new free credits. The hash can't be turned back into the address.

Your rights

You can ask for a copy of your data, its correction, or its deletion by emailing idan.barz@gmail.com.

Children

TidyHire is not intended for children under 16.

Changes

If this policy changes, we will update this page and the date at the top.