Privacy Policy
Last updated: October 8, 2026
1. Who We Are
Hiredrm ("we," "us," or "our") is a job search pipeline management tool operated by Irvcorlabs LLC, a Florida limited liability company, 7616 W Courtney Campbell Cswy Unit 309, Tampa, FL 33607. This Privacy Policy explains how we collect, use, and protect your information when you use hiredrm (the "Service"). Contact us at admin@irvcor.com with any questions.
2. Information We Collect
We collect information you provide directly: • Account information: name, email address, and password when you sign up. • Job search data: position titles, companies, application stages, notes, contacts, and any other information you enter into the Service. • Payment information: handled entirely by Stripe — we never store your card number or banking details. • Gmail data (optional): if you connect Gmail, we access your messages to display them in the app and to extract job-related details. Raw email content is fetched in real time and is not stored; only the structured details you save (e.g., company, role, dates) are persisted to your pipeline. Access tokens are encrypted at rest, and you can disconnect at any time. • AI feature inputs: when you use AI features (interview prep guides, inbox scan, or the in-app assistant), the relevant content — your candidate profile, position details, or the emails you scan — is sent to our AI subprocessors to generate a response. • Usage data: pages visited, features used, and actions taken within the Service (used to improve the product). • Device data: browser type, IP address, and operating system collected automatically via our hosting provider (Vercel).
3. How We Use Your Information
We use your information to: • Provide, maintain, and improve the Service. • Power optional AI features (interview prep guides, inbox scanning, and the in-app assistant). • Process payments and manage your subscription via Stripe. • Send transactional emails (account confirmation, password reset, billing receipts). • Respond to support requests. • Detect and prevent fraud or abuse. We do not use your job search data for advertising or sell it to recruiters, employers, or any third party.
4. Third-Party Services
We use the following trusted third-party services (subprocessors): • Supabase — database and authentication. Your data is stored in Supabase's infrastructure (AWS us-east-1). Privacy policy: supabase.com/privacy. • Stripe — payment processing. Stripe stores your payment method and billing history. Privacy policy: stripe.com/privacy. • Vercel — hosting and edge network. Privacy policy: vercel.com/legal/privacy-policy. • Resend — transactional email delivery. Privacy policy: resend.com/privacy. • Anthropic — AI model provider for the inbox scan and in-app assistant. Content you submit to these features is processed to generate responses; Anthropic does not train its models on data submitted through its API. Privacy policy: anthropic.com/legal/privacy. • Groq — AI model provider for interview prep guides. Your candidate profile and the relevant position details are processed to generate the guide. Privacy policy: groq.com/privacy-policy. • Google — Gmail API, used only if you connect your Gmail account. Use of your Google data complies with the Google API Services User Data Policy, including the Limited Use requirements. Privacy policy: policies.google.com/privacy. • Sentry — error and performance monitoring; may process limited diagnostic context to help us fix issues. Privacy policy: sentry.io/privacy. • Upstash — rate limiting; processes only a hashed identifier and request counts, never your job search content. Privacy policy: upstash.com/trust/privacy.txt. These services are bound by their own privacy policies and data protection standards.
5. Data Retention
We retain your account data for as long as your account is active. When you delete your account, we permanently delete your data within 30 days. Specific retention periods: • Account, positions, contacts, and activity: deleted immediately when you delete your account; residual copies in backups are purged within 30 days. • Gmail connection and tokens: deleted immediately when you disconnect Gmail or delete your account. • Audit logs: retained for up to 12 months for security and abuse prevention, then deleted. • Billing records: retained by Stripe for up to 7 years as required by financial regulations. • Encrypted database backups (Supabase point-in-time recovery): a rolling window of up to 30 days, after which deleted data is unrecoverable.
6. Your Rights
You have the right to: • Access the data we hold about you. • Export your job search data at any time using the built-in export feature. • Correct inaccurate information in your account settings. • Delete your account and all associated data yourself at any time from Settings → My Candidate Profile → Delete my account. You may also email us at admin@irvcor.com. • Opt out of non-essential product emails from Settings → My Candidate Profile → Email preferences. If you are in the European Economic Area (EEA), United Kingdom, or California, you have additional rights under the GDPR, UK GDPR, or CCPA/CPRA. Contact us to exercise them.
7. Cookies
We use cookies and similar technologies strictly for authentication (to keep you logged in) and session management. We do not use advertising, analytics, or tracking cookies of any kind. Because we use only strictly-necessary cookies, we do not display a cookie consent banner — consent is not required for cookies that are essential to the Service functioning, under GDPR, the ePrivacy Directive, and CCPA/CPRA. See our Cookie Policy for the full list of cookies we use. You can clear cookies through your browser settings, which will log you out of the Service.
8. Security
We implement industry-standard security practices including encrypted data storage, HTTPS-only connections, and Row Level Security in our database so users can only access their own data. However, no system is 100% secure — we encourage you to use a strong, unique password.
9. Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If we learn we have collected such information, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or via an in-app notice at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance.
11. Contact
Irvcorlabs LLC, 7616 W Courtney Campbell Cswy Unit 309, Tampa, FL 33607. Questions or concerns about this Privacy Policy? Email us at admin@irvcor.com. We aim to respond within 5 business days.