Privacy Policy

1. ROLE AND SCOPE

1.1 Controller and Processor Roles

Depending on how the Service is used:

• For account holder information (e.g., recruiter account details), Everyday Recruit acts as the Data Controller.
• For candidate resumes uploaded by users, Everyday Recruit acts as a Data Processor, processing data solely on behalf of the user.

Users uploading candidate data are responsible for ensuring lawful processing and proper notice to candidates.

2. INFORMATION WE COLLECT

We collect the following categories of information:

2.1 Account Information

When you create an account, we may collect:

• Full name
• Email address
• Encrypted password
• Company name (if provided)

2.2 Candidate Data (Uploaded by Users)

Users may upload resumes and related documents that may contain:

• Candidate names
• Contact information
• Employment history
• Education history
• Skills and qualifications
• Professional summaries
• Other information contained in resumes

We do not independently verify the accuracy of such data.

2.3 Usage and Technical Information

We may automatically collect:

• IP address
• Browser type
• Device information
• Log files
• Access timestamps
• Interaction data within the application

This information helps us maintain system integrity and improve the Service.

3. HOW WE USE INFORMATION

We use collected information solely for legitimate business purposes, including:

• Providing and maintaining the Service
• Authenticating users
• Processing resumes through AI systems
• Improving functionality and performance
• Monitoring system security and preventing fraud
• Communicating service-related notices

We do not sell personal data.
We do not use uploaded resume data to train public AI models.

4. AI PROCESSING DISCLOSURE

The Service utilizes artificial intelligence technologies to analyze resumes.

By uploading documents, you acknowledge and agree that:

• Resume content will be processed by automated AI systems.
• Processing may involve third-party AI service providers strictly for analysis purposes.
• AI outputs may contain inaccuracies or incomplete information.
• We do not guarantee the accuracy or fairness of AI-generated results.
• We do not use private customer data to train publicly available AI models.

5. THIRD-PARTY SERVICE PROVIDERS & COOKIES

We use carefully selected service providers to operate our infrastructure, including:

• Cloud Storage & Database Services: Supabase
• Authentication Services: Supabase (Auth)
• Payment Processing: Stripe
• AI Processing Services: Google Gemini

5.1 Strictly Necessary Cookies

We and our third-party authentication and payment partners (Stripe, Supabase) use "Strictly Necessary Cookies" inherently required for the Service to function. These include:

• Authentication Cookies: Used to keep you logged in securely as you navigate the app.
• Security & Anti-Fraud Cookies: Used to prevent Cross-Site Request Forgery (CSRF) and secure payment sessions during checkout.

These essential cookies cannot be disabled, as the site cannot function securely without them. We do not use any marketing, advertising, or non-essential tracking cookies at this time.

We are not responsible for independent privacy practices of third-party platforms beyond our control.

6. DATA SHARING AND DISCLOSURE

We may disclose personal information only under the following circumstances:

• To service providers assisting in delivering the Service
• To comply with legal obligations or lawful requests
• To protect our rights, property, or safety
• In connection with a merger, acquisition, or asset sale

We do not sell or rent personal information.

7. DATA RETENTION

We retain personal data only for as long as necessary to:

• Provide the Service
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

Users may delete uploaded resumes from their dashboard. Account data may be retained for compliance, auditing, or legitimate business purposes.

8. DATA SECURITY

We implement commercially reasonable technical and organizational safeguards designed to protect personal data.

However:

• No system is completely secure.
• We cannot guarantee absolute security.
• Users are responsible for safeguarding login credentials.

Except in cases of willful misconduct, we are not liable for unauthorized access beyond our reasonable control.

9. INTERNATIONAL DATA TRANSFERS

If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.

By using the Service, you consent to such transfers.

10. YOUR RIGHTS

Depending on your jurisdiction, you may have rights including:

• Access to personal data
• Correction of inaccurate data
• Deletion of data
• Restriction of processing
• Data portability

Requests may be submitted through your account dashboard or by contacting us.

For candidate data, requests should be directed to the recruiter or entity that uploaded the information.

11. CHILDREN’S PRIVACY

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

12. LIMITATION OF LIABILITY

To the maximum extent permitted by law, Everyday Recruit shall not be liable for:

• Indirect, incidental, or consequential damages
• Loss of data or business interruption
• AI inaccuracies
• Security incidents beyond reasonable control

Liability, if any, shall be limited in accordance with our Terms of Service.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

14. CONTACT INFORMATION

If you have questions regarding this Privacy Policy, please contact us.