Privacy Policy

Last updated: 10 September 2026

Hirebase (“we”, “our”, “us”) operates the website https://www.hirebase.in (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using Hirebase, you consent to the practices described in this policy.

1. Information We Collect

We collect information in three ways:

1.1 Information you provide directly

  • Account information: name, email address, and password (hashed) when you sign up.
  • Profile information: target role, current skills, experience level, preferred location, and resume file when you upload it.
  • Job preferences: saved jobs, application tracker data, job alert preferences.
  • Payment information: when you upgrade to Pro, Razorpay (our payment processor) handles your card/UPI details — we never see or store your full card number.
  • Communications: any emails or messages you send to us.

1.2 Information collected automatically

  • Usage data: pages visited, time spent, clicks, job listings viewed, search queries used.
  • Device information: IP address, browser type, operating system, screen resolution, device type.
  • Cookies and similar technologies: session cookies for authentication, analytics cookies (Google Analytics 4) for understanding traffic.

1.3 Information from third parties

  • Job listings: job data is aggregated from public APIs (Greenhouse, Ashby, Remotive, Arbeitnow, The Muse, RemoteOK, We Work Remotely) and public career pages. We do not collect personal data from these sources.
  • Authentication: if you sign in via Google, we receive your name, email, and profile picture (basic OAuth scope only).

2. How We Use Your Information

  • To provide, operate, and maintain the Service (account, job browsing, AI tools, application tracker).
  • To send you email job alerts when you opt in (you can unsubscribe at any time).
  • To personalize content and recommendations (e.g., AI Job Match Score, recommended jobs).
  • To process payments for Pro subscriptions via Razorpay.
  • To detect, prevent, and address technical issues, fraud, and security violations.
  • To comply with legal obligations under the Indian Information Technology Act, 2000 and applicable data protection rules.
  • To send service-related announcements (e.g., policy changes) — rare, only when legally required.

3. Cookies and Tracking Technologies

We use the following types of cookies:

  • Essential cookies: required for login, session management, and core functionality. The Service does not work without these.
  • Analytics cookies: Google Analytics 4 to understand how users interact with the Service. Data is anonymized and aggregated.
  • Advertising cookies: Google AdSense may use cookies to serve ads based on your prior visits to our website or other websites. You can opt out of personalized advertising by visiting Google Ads Settings.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or using AI tools.

4. Third-Party Advertising

Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to our website or other websites.

Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.

You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of a third-party vendor’s use of cookies for personalised advertising by visiting www.aboutads.info.

We do not share personally identifiable information with advertisers. Advertisers receive only aggregated, anonymized data.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data only in these circumstances:

  • Service providers: Razorpay (payments), Google Analytics (analytics), Google AdSense (ads), Resend/SendGrid (transactional email). These providers process data only on our behalf and under contractual obligations.
  • Legal compliance: if required by law, court order, or government request, we may disclose data to Indian authorities under the IT Act, 2000 and applicable rules.
  • Business transfers: in the event of a merger, acquisition, or asset sale, user data may be transferred. We will notify you via email 30 days before any transfer.
  • With your consent: we may share data with third parties when you explicitly consent.

6. Data Security

We implement industry-standard security measures to protect your data:

  • Passwords are hashed using bcrypt — never stored in plain text.
  • All data in transit is encrypted via HTTPS (TLS 1.3).
  • Database access is restricted to authenticated application servers.
  • Payment data never touches our servers — Razorpay handles it directly.
  • Regular security audits of dependencies and access logs.

Despite these measures, no internet transmission is 100% secure. We cannot guarantee absolute security, but we will notify affected users within 72 hours of any data breach.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will:

  • Delete your profile, saved jobs, application tracker, and uploaded resumes within 30 days.
  • Retain anonymized usage data (without identifiers) for analytics for up to 24 months.
  • Retain transaction records (Pro subscription payments) for 7 years as required by Indian tax law.

8. Your Rights

Under Indian data protection rules and international frameworks like GDPR, you have the right to:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your account and associated data.
  • Restriction: limit how we use your data (e.g., opt out of marketing emails).
  • Data portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interests.

To exercise any of these rights, email privacy@hirebase.in with the subject “Data Subject Request”. We will respond within 30 days.

9. Children’s Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it immediately.

10. International Data Transfers

Your data is stored on servers located in India (Mumbai region) and Singapore. By using our Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email 30 days before they take effect. The “Last updated” date at the top of this page indicates when the policy was last revised.

12. Contact Us

If you have questions about this Privacy Policy, please contact: