Privacy Policy

Welcome to UpHire ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at uphire.ai (the "Service").

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

We collect information you provide directly, including:

• Account Information: Name, email address, and password when you register.
• Resume & Career Data: CV documents, cover letters, job descriptions, and application tracking data you upload or create.
• Voice Data: Audio recordings from mock interview sessions, which are processed for transcription and feedback and are not stored permanently.
• Payment Information: Billing details processed securely by our payment providers: Paddle for purchases made on the web, and the Apple App Store or Google Play (via RevenueCat) for in-app purchases. We never receive or store raw card numbers.
• Usage Data: Log data, device identifiers, IP addresses, browser type, pages viewed, and interaction events.

We use the information we collect to:

• Provide, operate, and maintain our Service
• Process payments and manage subscriptions
• Generate AI-powered resume feedback, ATS scores, and interview coaching
• Send transactional emails (account confirmations, billing receipts)
• Improve and personalize your experience
• Analyze usage patterns to enhance the platform
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal data, and we do not use your resume or career data to train our own AI models. Your data is processed privately and is never sold to third parties for advertising.

We may share your information only in the following limited circumstances:

• Service Providers: Trusted vendors who help us deliver the Service under strict data processing terms: Google (Gemini API) for AI processing, Supabase for database and file hosting, Paddle and RevenueCat together with the Apple App Store and Google Play for payments and subscriptions, and Firebase for push notifications and analytics.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to you.

Several UpHire features are powered by artificial intelligence: the ATS resume check, CV optimization and editing, cover letter generation, and mock interviews. These features cannot run on your device alone, so the data listed below is sent to the AI providers named here.

What we send:

• Your CV file and its contents, including your name, contact details, work history and education.
• The job title and job description you choose to apply for or optimize against.
• Your mock interview answers, including text transcribed from your voice.

Who receives it:

• Google LLC — processed through the Gemini API to analyze and rewrite CVs, generate cover letters, and produce interview questions and feedback.
• Our text-to-speech provider — receives only the interview question text that is read aloud. It never receives your CV or your answers.

We show this disclosure and ask for your permission before any of this data is sent. Nothing is sent until you agree, and you can withdraw your permission at any time under Settings → AI data sharing. The rest of the app continues to work without the AI features.

These providers act as processors on our behalf under their published data processing terms. They are required to apply protections equivalent to those described in this policy, to process your data only to deliver the feature you requested, and not to use it for their own purposes or for advertising. Google's handling of data submitted to the Gemini API is governed by the Google APIs Terms of Service and Google's privacy policy.

We retain your account data for as long as your account is active. Voice recordings from interview sessions are deleted within 24 hours of processing. You may delete your account and all associated data at any time from your account settings. We will fulfil deletion requests within 30 days.

Depending on your location, you may have the following rights regarding your data:

• Access: Request a copy of the data we hold about you.
• Correction: Request that we correct inaccurate data.
• Deletion: Request that we delete your personal data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain processing activities.

To exercise any of these rights, contact us at navitruck@tekbh.com.

We use essential cookies to maintain your session and authentication state. We use analytics cookies (e.g., PostHog) to understand how users interact with the platform. You can disable non-essential cookies through your browser settings, though some features may not function correctly.

We implement industry-standard security measures including TLS/HTTPS encryption in transit, AES-256 encryption at rest, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date and, where appropriate, by email.

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: navitruck@tekbh.com
• Phone: +216 29 207 473
• Address:
  TEKBH
  Rue Omar Kaddeh, Imm Le Montplaisir
  2ème Étage, B25
  Ave Kheireddine Pacha, Cité El Khedra
  Tunis 1073, Tunisia