Legal
Privacy Policy
Last updated: October 3, 2026
1. Who we are and scope
This Policy explains how HireAlice, operated by Jan Nazorek, the controller of your personal data, collects, uses, shares and protects that data when you use the website and service, in accordance with applicable data protection laws.
2. Data we collect
• Account: email, name, password (stored only in hashed form), language and preferences. • Professional profile: skills, seniority, location, job preferences and the résumé you upload. • Service usage: saved, ignored and compared jobs, saved searches and alerts, clicks on job listings. • Subscription: plan, status and billing history. Card or Pix details stay with the payment provider, not with us. • Technical data: IP address, browser, access date and time, security and error logs.
3. Google user data (Sign in with Google)
If you choose to sign in with Google, we request only the basic openid, email and profile scopes. We do not request access to Gmail, Google Drive, Calendar, Contacts or any other Google service. • What we receive: your Google account ID, email address, name and profile picture URL. • How we use it: only to create your HireAlice account and sign you in, link it to your Google account, show your name and photo in the app and send account emails. We do not use Google user data for advertising, to build profiles for third parties or to train AI models. • What we store: the account ID, email, name and photo URL, in our database. We do not store your Google password or any Google access or refresh token; the token used during sign-in is discarded as soon as your identity is verified. • Sharing: we do not sell, rent or transfer Google user data to third parties. It is processed only by our hosting provider as part of running the service, or disclosed when required by law. • Retention and deletion: Google user data is kept while your account is active. When you delete your account in Settings, it is erased or anonymized within 30 days. You can also revoke HireAlice's access at any time at https://myaccount.google.com/permissions. HireAlice's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. How we use it and legal bases
• To provide the service: create and authenticate your account, calculate matches, send alerts and account emails (performance of a contract). • To process subscriptions and meet tax obligations (performance of a contract and legal obligation). • To protect the service against fraud and abuse, limit misuse and fix errors (legitimate interest). • To keep access logs for the period required by law (legal obligation). • To send optional communications, measure site performance, and measure and target our ads with the Meta Pixel (consent, which you can withdraw at any time). We do not sell your personal data.
5. Artificial intelligence
We use AI models to extract information from your résumé, calculate your fit with job listings and answer natural-language searches. We send AI providers only the data needed for each analysis. You can ask for a review of automated decisions. See the AI Use page.
6. Who we share data with
We share data only with processors that help us run the service, under contract and only as needed: • hosting and database; • email delivery (Resend); • error monitoring (Sentry); • AI providers (such as Google, Anthropic or OpenAI); • payment providers (Asaas, Mercado Pago, Stripe). If you accept “Advertising and marketing” cookies, Meta Platforms, Inc. receives data about your browsing through the Meta Pixel for advertising purposes (see section 11). Without that consent, nothing is sent to Meta. We may also share data when required by law or court order, or to defend our rights. Hiring companies do not receive your data through HireAlice; you apply directly on their websites.
7. International transfers
Some processors and third parties, such as cloud, AI, email and payment providers and Meta (advertising), may process data in countries other than your own, especially in the United States. In these cases we rely on appropriate safeguards, such as data protection contractual clauses.
8. How long we keep data
We keep your data while your account is active. When you delete your account, it is deactivated immediately and, after 30 days, your personal data and résumé are erased or anonymized. Access logs are kept for 6 months, and billing records for the period required by tax law.
9. Security
We use technical and organizational measures to protect your data, such as encrypted connections (HTTPS), hashed passwords, access control and abuse limits. No system is completely secure; if a relevant security incident occurs, we will notify you and the competent authorities as required by law.
10. Your rights
You have the right to: confirm whether we process your data and access it; correct incomplete or outdated data; request anonymization, blocking or deletion; export your data (portability); learn who we share it with; withdraw consent; and object to processing based on legitimate interest. You can export and delete your data directly in Settings, or make any request using the contact below. We reply within 15 days. You can also file a complaint with the data protection authority in your country.
11. Cookies
We use essential cookies to keep you signed in and for security and, with your consent, preference, performance measurement (Sentry) and advertising and marketing cookies. For the latter, the Meta Pixel sends data about your browsing to Meta Platforms, Inc. for advertising purposes. You can change or withdraw your consent at any time under “Cookie preferences” in the footer. See the Cookies page for details.
12. Minors
HireAlice is not intended for anyone under 18, and we do not knowingly collect data from children or teenagers. If we identify an account belonging to a minor, we will delete it.
13. Changes to this Policy
We may update this Policy. The date of the latest update is shown at the top of this page, and we will announce material changes by email or in the service.
14. Data protection officer and contact
Data protection officer (DPO): Jan Nazorek, email [email protected]. Use this contact to exercise your rights or ask questions about this Policy.