Privacy Policy

Last Updated: October 31, 2026 · Effective Date: October 31, 2026

At HireFast (also accessible as Hire Fast from https://hirefast.pk and https://app.hirefast.pk), the privacy and security of your personal and professional information are our highest priorities.

This Privacy Policy explains what information we collect, how we use and safeguard it, your data ownership rights, and our strict adherence to Google API user data policies.

1. Information We Collect

When you use HireFast to build resumes, search for jobs, or track applications, we collect only the information necessary to provide our services:

Account Information: Your name, email address, and securely hashed password (using Argon2id).
Career & Profile Data: Work history, skills, education, projects, contact details, and resume files (PDF, Word DOCX, Markdown) that you import or provide.
Job Search & Application Data: Job postings you search for, save, or analyze, along with tailored resumes, cover letters, fit scores, and interview notes generated within your account.
Optional Google Account Data: If you explicitly choose to connect your Google account in Settings, HireFast receives OAuth access tokens to sync Gmail replies and Calendar events.

2. How We Use Your Information

We use your data solely for core application features requested by you:

To analyze job descriptions and optimize your real skills and experience into ATS-friendly tailored resumes and cover letters.
To manage your job application pipeline on your private Kanban tracker.
To check for employer interview invitations, status updates, and recruiter questions.
To sync scheduled interviews with your calendar and suggest polite follow-up schedules.

Strict Fact-Checking Commitment: HireFast never fabricates experience, fake employers, or fictional credentials. Our AI models only sharpen and organize your verified career facts.

3. Google API Data & Limited Use Disclosure

HireFast offers optional Google integration for users who wish to automate interview tracking and reply management. When you connect your Google account, HireFast requests only the following permissions:

https://www.googleapis.com/auth/gmail.readonly: To read incoming emails strictly matching your active job applications to detect interview invitations, recruiter inquiries, and status updates.
https://www.googleapis.com/auth/gmail.send: To allow you to send application emails directly from your personal Gmail with attached PDF resumes, strictly upon your manual confirmation.
https://www.googleapis.com/auth/calendar.freebusy & https://www.googleapis.com/auth/calendar.events: To check your availability when scheduling interviews and add confirmed interview appointments to your Google Calendar.

Google API Services User Data Policy Compliance:
HireFast's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We NEVER sell your Google data to third parties.
We NEVER use your Google data to serve advertisements or retargeting campaigns.
We NEVER use Google user data to train generalized artificial intelligence or machine learning models.
Human access to your email content is strictly prohibited; emails are processed solely by automated algorithms for the features you request.

4. Data Storage, Encryption & Security

All private tokens, OAuth refresh tokens, and optional personal API keys are encrypted at rest using industry-standard AES-256-GCM encryption. Data is transmitted securely over HTTPS with TLS 1.3 encryption. Your workspace is logically isolated and accessible only via authenticated sessions.

5. 100% Data Ownership, Export & Deletion

You own all your career documents and application data:

Full Export: You can download your complete profile, applications, themes, and notes in an open JSON format anytime from Settings → Your data → Export everything.
Account Deletion: You can permanently wipe your account, applications, and backups in 1-click from Settings → Your data → Delete everything. Once deleted, your data is completely purged.
Disconnecting Google: You can revoke HireFast's Google access at any moment in Settings → Email & Calendar → Disconnect, or from your Google Account Permissions page.

6. Third-Party Service Providers

HireFast utilizes trusted infrastructure providers strictly to host services and compute document tailoring:

Database Hosting: Neon PostgreSQL (SOC2, ISO27001 compliant cloud database).
AI Compute (BYOK or Built-in): Groq Cloud LPU and Google Gemini APIs under enterprise zero-data-retention terms for text generation.

7. Children's Privacy

HireFast is intended for job seekers and career professionals. We do not knowingly collect personal information from individuals under 16 years of age.

8. Contact & Inquiries

If you have any questions or feedback regarding this Privacy Policy or your data, please contact our privacy team at:

Email: info@hirefast.pk
Website: https://hirefast.pk
Application: https://app.hirefast.pk