HopeHireHopeHire.

Privacy Policy

Last updated September 2026.

HopeHire is an AI agent that finds people who can refer or hire you at companies you're targeting, and sends personalized outreach on your behalf. This policy explains what data we collect through hopehire.in and the HopeHire apps, why, and what rights you have over it. HopeHire is operated by Sushant Rana as an individual at this stage — referred to below as “HopeHire,” “we,” or the “Service Provider” and “Data Controller.”

Who's responsible for your data

For any question about this policy, a data access or deletion request, or your GDPR or CCPA rights, that's the address to write to.

What we collect

Information you give us directly

  • Your name, email address, and profile picture from Google when you sign in with Google.
  • Your uploaded resume file, and everything extracted from it — work history, education, skills, contact details — plus the rewritten, ATS-optimized version we generate from it.
  • Job search preferences: target companies, roles, tech stack, locations, and target salary range, where you provide them.
  • Outreach settings: whether Daily Outreach or Autopilot is on, your minimum match-score threshold, and your auto-reply grace period.
  • Anything you type directly into HopeHire — messages to the AI assistant, edits to your resume, or data imported from LinkedIn if you use that flow instead of uploading a PDF.

Information collected automatically

  • Standard web request data: IP address, browser type, device identifier, pages visited, and timestamps.
  • A session cookie so you don't have to sign in on every visit.
  • Application error and performance diagnostics, via Sentry (see Third-Party Services below).

Information collected on your behalf, from third parties

  • LinkedIn hiring posts — we don't access your LinkedIn account. We use Apify to scrape public LinkedIn posts matching hiring-related search queries, and an AI model extracts the recruiter's name, company, and contact email from that post to build your outreach queue.
  • Gmail — once you connect Gmail, via Composio's OAuth integration, HopeHire can read the parts of your inbox needed to detect recruiter replies to outreach it sent, and send emails from your address on your behalf. We do not read email unrelated to HopeHire outreach threads.
  • Google Calendar — an optional connector, not currently required by any active feature.

We do not collect precise device geolocation. Location fields (target cities, “Remote”) are text you type in, not GPS data.

How we use AI

AI is central to how HopeHire works, not an add-on. Depending on configuration, AI (OpenAI, OpenRouter, or Krutrim — see Third-Party Services) is used to:

  • Parse your uploaded resume into structured data
  • Rewrite your resume for ATS compatibility and score it
  • Validate scraped LinkedIn posts and extract recruiter, company, and role details
  • Write personalized cold emails and follow-ups based on your resume and the specific job post
  • Classify recruiter replies (interested, scheduling, or passing) and draft your next response
  • Power the in-app “Ask AI” assistant

Automated sending

If you turn on Daily Outreach, HopeHire sends up to 50 AI-written emails per day, automatically, to leads that match your profile, without you reviewing each one first. If you turn on Autopilot with a minimum match score, it does the same for job-board matches above that threshold. If you enable auto-reply, an AI-drafted reply to a recruiter is sent automatically after your configured grace period unless you reply yourself first.

This is automated decision-making that has a real effect on you — it decides who gets contacted, when, and with what content, using your identity and connected Gmail account. You can turn any of this off at any time in Profile settings, review what was sent in your outreach history, and request human review of any specific automated action by emailing us.

Legal basis for processing (GDPR)

Where GDPR applies to you, we rely on:

  • Contract — most core processing (resume storage, outreach sending) is necessary to provide the service you signed up for.
  • Consent — for optional features like Daily Outreach and Autopilot, which you explicitly opt into.
  • Legitimate interests — for fraud prevention, abuse monitoring, and improving matching quality.
  • Legal obligation — where we're required to retain or disclose data by law.

Third-party services

We don't build everything ourselves. Depending on which feature you use, your data may flow to:

We have data processing agreements in place with these providers where required. We don't sell your data, and we don't share it with anyone for their own independent marketing use.

International data transfers

HopeHire operates from India. Depending on which provider handles a given piece of processing, your data may be transferred to and processed in the United States or the European Economic Area. Where GDPR requires a transfer safeguard, we rely on the receiving provider's Standard Contractual Clauses or an applicable adequacy decision.

How long we keep your data

  • Your account and resume data: for as long as your account is active, plus 24 months after you delete your account, unless you request earlier deletion or the law requires longer.
  • Outreach history and logs: up to 24 months.
  • Diagnostic and error data: up to 24 months.
  • Aggregated, de-identified data that no longer identifies you: kept indefinitely.

Deleting or exporting your data

You don't need to email us for this — it's built into the product. Go to Profile → Security & Privacy:

  • Export My Data downloads a JSON copy of your outreach history and profile data.
  • Delete Profile permanently deletes your account and data (type DELETE to confirm). This is irreversible.

If you'd rather do it by email, write to sushantrana.dev@gmail.com and we'll process the request within the timeframe required by applicable law (generally within one month under GDPR).

Children

HopeHire is a job-search tool built for working-age adults and isn't intended for anyone under 18. We don't knowingly collect data from children. If you believe a minor has used HopeHire, contact us and we'll delete the account.

Security

We use encrypted connections (TLS), access controls limiting who on our side can see your data, and secrets management for API credentials. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable, current measures to protect what we hold.

Data breach notification

If a breach occurs that poses a risk to your rights, we'll notify the relevant authority within 72 hours where required, and notify you directly without undue delay if the breach is likely to result in high risk to you.

Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data (the “right to be forgotten”)
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent at any time, without affecting anything already done under that consent
  • Not be subject to a purely automated decision that significantly affects you, without the ability to request human review

California residents (CCPA/CPRA): you additionally have the right to know what's collected, delete it, correct it, opt out of sale or sharing (we don't sell your data), and not be discriminated against for exercising these rights.

To exercise any of these, email sushantrana.dev@gmail.com. If you're in the EU and believe your rights have been violated, you can also complain to your local Data Protection Authority — a list is available at edpb.ec.europa.eu.

Changes to this policy

We'll update this page when our practices change, and update the “Last updated” date at the top. Material changes will be communicated where required by law before they take effect.

Contact

Questions about this policy, or about your data: sushantrana.dev@gmail.com.