Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide when you:

• Create an Account: Name, email address, password, phone number
• Build Your Profile: Skills, work experience, education, resume/CV, portfolio links, professional bio
• Post a Job: Company name, job details, requirements, compensation information
• Apply for Jobs: Cover letters, application responses, uploaded documents
• Contact Us: Support inquiries, feedback, correspondence
• Subscribe: Payment information (processed securely by Maya/PayMaya)

1.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, time spent, click patterns, search queries, job views
• Location Data: General location based on IP address (not precise GPS)
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies (see Cookie Policy below)

1.3 Information from Third Parties

• Authentication providers (if you sign in via social login)
• Public professional networks (LinkedIn, if you choose to import)
• Payment processors (transaction confirmations from Maya/PayMaya)

2. How We Use Your Information

We use collected information for the following purposes:

2.1 Core Service Delivery

• Create and manage your account
• Match job seekers with relevant opportunities
• Facilitate communication between employers and candidates
• Process job applications and manage recruitment workflows
• Deliver job alerts and platform notifications
• Process payments and manage subscriptions

2.2 Platform Improvement

• Improve our AI-powered job matching algorithms
• Analyze usage patterns to enhance user experience
• Develop new features and services
• Conduct research and analytics

2.3 Communication

• Send transactional emails (application confirmations, status updates)
• Deliver job alerts based on your preferences
• Send platform updates and feature announcements
• Respond to support requests and inquiries
• Send marketing communications (with your consent, opt-out available)

2.4 Legal and Security

• Comply with legal obligations and enforce our Terms of Service
• Prevent fraud, abuse, and security incidents
• Protect the rights and safety of our users
• Resolve disputes and troubleshoot issues

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

3.1 With Your Consent

• Job Applications: When you apply for a job, your profile and application materials are shared with the employer
• Public Profiles: Information you choose to make public is visible to other users

3.2 Service Providers

We share information with trusted third-party service providers who assist us in operating our platform:

• Supabase: Database and authentication services
• Maya (PayMaya): Payment processing
• Resend: Email delivery service
• OpenAI: AI-powered features (job matching, resume analysis)
• Sentry: Error monitoring and performance tracking
• Vercel: Hosting and CDN services
• Google Analytics: Usage analytics (anonymized)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

3.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal process (court orders, subpoenas)
• Government requests and regulatory requirements
• Enforcement of our Terms of Service
• Protection of rights, property, and safety of GHL Hire, users, or the public

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your information becomes subject to a different privacy policy.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. You can manage cookie preferences through our Cookie Settings.

4.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality (authentication, session management)
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with our platform (Google Analytics)
• Marketing Cookies: Track effectiveness of our campaigns (optional, requires consent)

You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data transmitted using SSL/TLS encryption (HTTPS)
• Access Controls: Row-level security and authentication for all data access
• Secure Storage: Data stored in secure, SOC 2 compliant infrastructure (Supabase)
• Payment Security: Payment information handled by PCI-DSS compliant processors
• Monitoring: Continuous security monitoring and incident response
• Regular Audits: Periodic security assessments and updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

6.1 Rights for All Users

• Access: View and update your personal information in your account settings
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Opt-Out: Unsubscribe from marketing emails (transactional emails may still be sent)
• Data Portability: Download a copy of your data in a machine-readable format

6.2 GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights under GDPR:

• Right to be informed about data collection and use
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making and profiling

6.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

6.4 How to Exercise Your Rights

To exercise any of these rights:

• Visit your Account Settings for profile updates and data downloads
• Email us at privacy@ghlhire.com
• Use our Contact Form

We will respond to your request within 30 days. We may need to verify your identity before processing your request.

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Most data deleted within 30 days of account deletion
• Legal Requirements: Some data may be retained longer to comply with legal, tax, or regulatory requirements
• Backups: Data in backups may persist for up to 90 days after deletion
• Job Applications: Application history may be retained for 2 years for record-keeping purposes

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses for transfers from the EU/EEA.

9. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@ghlhire.com.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@ghlhire.com
• Data Protection Officer: dpo@ghlhire.com
• Contact Form: ghlhire.com/contact

For GDPR-related inquiries, you also have the right to lodge a complaint with your local data protection authority.