Privacy Policy

1. What we collect

When you create an account, we collect your email address and password (hashed). When you set up job alerts, we store your alert preferences (keywords, location, seniority, sponsorship filters). We log which jobs you view and apply to so we can improve relevance.

We do not collect your résumé, phone number, or any payment information (Hireoven is free).

2. How we use your data

• Send you job alert emails matching your saved preferences
• Show you personalized job feeds inside the dashboard
• Calculate aggregate platform statistics (total jobs, companies monitored)
• Improve crawl coverage and job matching accuracy

We never sell your personal data to third parties.

3. Emails and notifications

You control alert frequency (immediate, daily digest, weekly digest, or off) from your dashboard settings. You can unsubscribe from all emails at any time via the unsubscribe link in any email we send. Transactional emails (password reset, account confirmation) cannot be disabled.

4. Data storage

Your data is stored in Supabase (hosted on AWS us-east-1). Emails are sent via Resend. The app runs on infrastructure we operate (e.g. self-hosted Docker). We use Vercel Analytics for anonymous page-view statistics - no personal identifiers are sent to Vercel Analytics.

5. Cookies

We use a single session cookie to keep you logged in. We do not use advertising cookies or third-party tracking pixels.

6. Your rights

You can delete your account at any time from Dashboard → Settings → Delete account. This permanently removes your email, alert preferences, and activity logs within 30 days.

To request a data export or ask questions, email us at privacy@hireoven.com.

7. Hireoven Apex Bridge (browser extension)

The Apex Bridge browser extension detects job listings and autofills applications on ATS and careers sites. Because it needs to recognize a job listing or application form on any site you visit, its content script can technically run on any page — but it only reads or acts on a page when that page is a recognized job listing or application form. Nothing is collected until you explicitly agree in the extension's own onboarding screen; you can decline and the extension stays inactive everywhere until you come back and agree.

Once you agree, the extension may access:

• The content of the page you're on, to detect a job listing or application form
• Your Hireoven profile - name, contact info, work authorization, education, résumé, and any voluntary EEOC/demographic answers you've saved - to autofill matching fields on an application you open
• Values you type or correct in a form, so a manual correction is remembered and reused next time

This data is sent only to Hireoven's own servers - never to a third party, never sold, never used for advertising. Nothing is ever submitted automatically; you review every autofilled field before you submit. Uninstalling the extension removes everything stored locally by it; deleting your Hireoven account (see section 6) removes anything stored on our servers.

8. Changes to this policy

We may update this policy as the product evolves. We will notify registered users by email for any material changes at least 14 days before they take effect.