Privacy Policy

Last updated October 30, 2026

Hira applies to jobs for you, so it handles a lot of personal information: your work history, documents and the answers employers ask for. This policy explains what we collect, why, who we share it with and the choices you have. It applies to applyhira.com and the Hira app. Our Terms of Service explain who operates Hira.

Information we collect

What you give us

• Account: your email address and password. Passwords are held by our sign-in provider (Amazon Cognito); we never see or store them. If you sign in with Google instead, Google tells us your email address, that Google has verified it, and an ID for your Google account. We never see your Google password, and Google receives nothing about you from Hira.
• Profile and documents: your resume, cover letters, transcripts and other files you upload, and the facts Hira learns from them or from you, such as your name, contact details, address, work history, education, skills, work authorization, sponsorship needs and salary expectations.
• Voluntary self-identification: if you choose to give them, answers to the optional equal-opportunity questions many employers ask, such as gender, race or ethnicity, veteran status and disability. You can always decline.
• Applications: the questions employers ask, Hira’s draft answers, your edits and approvals, and screenshots of employer forms so you can see what was filled in.
• Employer sign-ins: the email and password Hira uses for candidate accounts on employer sites (for example, Workday), and one-time codes you pass on to finish signing in. Passwords are encrypted with a dedicated key, and codes are discarded within moments of use.
• Chats and search agents: messages you send Hira and the job searches you set up.
• Support: problem reports and emails you send us.

What we collect automatically

• Usage: pages you visit in Hira and key events like signing up, starting an application or buying credits. We record these ourselves; we don’t use outside analytics or advertising trackers.
• Errors: when something breaks, the error, the page it happened on and your account ID, so we can fix it.
• Your time zone, so daily credits and chat replies follow your day.
• IP address: used only to limit repeated sign-in attempts, stored in a scrambled (hashed) form, and deleted after about an hour.

From others

• Payments: Stripe tells us whether a payment or subscription succeeded. We never receive your full card number.
• Job postings: public listings from employers’ job boards.

How we use it

• to run Hira: finding and matching jobs, filling in applications, asking you what it doesn’t know, and submitting the applications you approve;
• to remember answers you’ve confirmed so you aren’t asked again;
• to handle billing and credits;
• to send the emails the service needs, such as sign-in codes;
• to provide support, fix problems and improve Hira; and
• to keep Hira secure, prevent abuse and meet legal obligations.

We use sensitive information, like self-identification answers, work authorization and salary expectations, only to answer the employer questions you’ve asked Hira to answer. We don’t sell your personal information, share it for targeted advertising, or use it to build advertising profiles.

Who we share it with

• Employers and their application systems (such as Greenhouse and Workday). When Hira prepares an application, it can create an account and upload your information to the employer’s site as a draft. It submits only after you approve. What employers do with your application is governed by their own privacy policies.
• Service providers who help us run Hira, including hosting, storage, sign-in, email delivery, payments and AI processing. AI providers receive profile information, document text, employer questions, chat messages, job postings and search tasks to read documents, draft answers, reply in chat and match jobs. Payment providers receive your email address and account ID to handle billing.
• Muse, when you connect it: Meta’s Muse can receive job results, application statuses, agent tasks, job preferences, supported pending questions, your answers and final reviews, including resume filenames and voluntary demographic or legal answers. Your consent allows Muse to manage agents and preferences, import and prepare jobs using credits, relay answers, control applications, and submit a reviewed application only when you explicitly instruct it. Hira stores a hash of the connection key and records access and action metadata, without key values or answer text in that activity log. Revoking a connection stops future access; information already shared may remain in Muse under Meta’s terms and privacy controls.
• Logo hosts: some company logos load directly from the sites that host them (such as Google’s favicon service), which see your IP address and browser like any image request.
• For legal reasons: when the law requires it, or to protect the rights and safety of our users, others or Hira.
• If Hira changes hands: as part of forming a company, a merger or a sale, under this policy.

A small number of people who operate Hira can view account information to give support, investigate problems and keep the service secure. Changes they make to an account are logged.

Cookies

Hira uses only cookies it needs to work, all set by applyhira.com: one keeps you signed in (for up to 90 days), and short-lived ones carry a sign-in, sign-up, invitation or referral through to completion. We don’t use advertising or analytics cookies, so there’s nothing to opt out of.

How long we keep it

We keep your account information while your account is open. Screenshots and recordings from applications that failed are deleted after 14 days, and server logs after 7 to 14 days. You can delete your account in Settings. That closes it: you’re signed out, can’t sign in again, and your applications and agents stop. We keep the information in a closed account, archived and out of your view, to support you, prevent abuse, and meet legal, tax and accounting obligations. You can sign up again with the same email, which starts a new, empty account. Applications already submitted to employers stay with them; ask them directly to remove those.

Security

Information is encrypted in transit and at rest, and employer passwords are encrypted again with a key only Hira’s service can use. No system is perfectly secure, so please use a strong, unique password for Hira.

Your choices and rights

You can see and edit most of your information in Hira, and delete your account in Settings. You can also ask us to send you a copy of your information or correct it by emailing [email protected] from your account’s email address. We may ask you to confirm the request and will respond within 45 days.

Depending on where you live, including California, you may have rights to know what personal information we collect and how we use and share it, to access, correct and delete it, to limit how we use sensitive information, and to opt out of its sale or sharing for targeted advertising (which we don’t do). You can use an authorized agent to make a request. We won’t treat you differently for using these rights.

Children

Hira is only for people 18 and older. We don’t knowingly collect information from anyone younger; if we learn we have, we delete it.

Where information is stored

Hira is designed for people in the United States, and stores information in the United States.

Changes to this policy

If we change this policy in a way that matters, we’ll tell you by email or in Hira before the change takes effect, and update the date at the top.

Contact

Questions or requests about your privacy: [email protected].