Privacy Policy

1. Information We Collect

We collect only the information you directly provide when using LinkedHype:

• Account information: Your name, email address, and password when you register. Passwords are stored as secure hashes (bcrypt) — never in plain text.
• CV document (PDF): When you upload your CV during onboarding, it is sent directly to the Google Gemini API for parsing. We do not store your CV file on our servers. Only the structured data extracted from it (skills, job titles, work history, education) is saved to your profile.
• Job preferences: Your preferred work country, city, and work type (remote / on-site / hybrid), which you provide during onboarding.
• Career DNA profile: An AI-generated structured profile derived from your CV, stored securely in your account.
• Job and message history: Jobs we surface for you and outreach messages you generate, saved to your account for your reference.
• Payment information: Handled entirely by Paddle (our payment processor). We never see or store your card number or billing details.
• Usage data: Feature interactions (e.g., how many job searches you've run) used to enforce plan quotas and improve the product.

2. How We Use Your Information

• To create and maintain your account
• To generate your Career DNA profile from your uploaded CV
• To search publicly available job listings matching your profile and preferences
• To generate personalized professional outreach messages
• To process your subscription payments via Paddle
• To enforce plan usage quotas (job searches, messages)
• To send transactional emails (email verification, password reset)
• To provide customer support when you contact us

3. CV Processing and AI

Your CV is processed as follows:

1. You upload a PDF file from your device
2. The file is transmitted over an encrypted (HTTPS) connection to our server
3. It is immediately forwarded to the Google Gemini API for structured data extraction
4. The extracted structured data (not the PDF file) is saved to your profile
5. The original PDF file is discarded — it is never written to disk or stored in our database

AI training: Your personal data and generated content are never used to train AI models. Data sent to the Google Gemini API is subject to Google's API Terms of Service and their data handling policies.

4. Job Discovery — No Third-Party Scraping

LinkedHype finds jobs by querying the JSearch API (via RapidAPI), which aggregates publicly posted job listings from Google for Jobs and major job boards. This is a legitimate, API-based data access method — we do not scrape, crawl, or bypass any platform's terms of service.

We do not access, log into, or interact with any platform (professional networks, job sites, etc.) on your behalf.

5. Data Sharing

We do not sell your personal information. We share data only with the following service providers, strictly to operate the Service:

• Google (Gemini API) — CV parsing and AI content generation
• RapidAPI / JSearch — Job listing discovery (only anonymized search queries sent, not personal data)
• Paddle — Subscription billing and payment processing
• Resend — Transactional email delivery (verification, password reset)
• Vercel — Application hosting and infrastructure
• Neon (PostgreSQL) — Encrypted database hosting
• Legal requirements — When required by law, court order, or to protect our rights and the safety of users

6. Data Security

We implement industry-standard security measures:

• All data in transit is encrypted using HTTPS/TLS
• Passwords are stored using bcrypt hashing
• Database access is restricted and encrypted at rest
• Optional two-factor authentication (2FA) is available for your account

While we take reasonable precautions, no internet system is 100% secure. We encourage you to use a strong, unique password and enable 2FA.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all associated personal data (profile, Career DNA, job history, messages) is permanently deleted from our database within 30 days. Paddle may retain billing records as required by tax and accounting regulations.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your account and all associated data
• Object to or restrict certain processing of your data
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, contact us at privacy@linkedhype.com. We will respond within 30 days.

9. Cookies

We use a minimal set of cookies:

• Session cookies: Required for authentication — used to keep you logged in
• Security cookies: Used for CSRF protection and 2FA state

We do not use advertising cookies or third-party tracking pixels.

10. Children's Privacy

The Service is intended for users aged 16 and older. We do not knowingly collect personal information from anyone under 16. If we become aware that we have inadvertently collected such data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent in-app notice at least 14 days before the changes take effect. Continued use of the Service constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or data requests: