Privacy Policy

Last Updated: February 19, 2026

This Privacy Policy describes how AptivHires ("we," "us," or "our") collects, uses, and shares information about you when you use our mobile application (the "App") and our website, https://www.aptivhires.com (the "Site"). This policy has been updated to reflect our paid subscription and AptivCoins virtual currency features.

1. Information We Collect

We collect information you provide directly to us, information from third parties, and information automatically when you use our services.

a) Information You Provide to Us:

• Account Information: When you create an account, we collect your email address and a hashed version of your password.
• Profile Information: You may choose to provide additional information for your profile, such as your first and last name, phone number, address, and education level.
• Resume Content: When you use our resume builder, we collect all the information you input, including your work experience, education history, skills, projects, and any other details you provide.
• Uploaded Documents: We collect the resume files (e.g., in PDF format) that you upload to our service.
• Billing & Payment Information: When you purchase a Pro subscription or AptivCoin pack, we collect your billing name and the last four digits of your card (for display purposes). Full payment card details are processed and stored exclusively by our payment processor, Stripe. We never store your full card number, CVV, or expiry on our servers.
• Subscription & Transaction Data: We store records of your subscription status, AptivCoin balance, purchase history, and coin transaction events (earn/spend activity). This is required to deliver and maintain the paid features of our Service.
• Referral Information: If you use or share a referral link, we record the referral relationship to credit the appropriate AptivCoin bonuses.
• Communications: If you contact us directly, we may receive additional information about you.

b) Information from Third Parties:

• Google Sign-In: If you choose to sign up or log in using Google, we receive your name and email address from Google to authenticate and create your account.

c) Information We Collect Automatically:

• Server Logs: Like most online services, we automatically collect information in server logs. This may include your IP address, device type, operating system, and the dates and times of your requests to our API. This is used for security, debugging, and analytics.
• Google Analytics (GA4): We use Google Analytics 4 to understand how users interact with our website. GA4 collects anonymized usage data such as page views, session duration, and general geographic region. This data is aggregated and does not personally identify you. You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on.
• Cookies & Session Data: We use session cookies to keep you logged in. We do not use third-party advertising cookies or tracking pixels.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our services, including the resume builder, AI tailoring features, and AptivBrain mock interviews.
• To create and manage your account and authenticate you.
• To process your uploaded resume and the information you provide through our AI pipeline to generate tailored resume content.
• To process and fulfill subscription and AptivCoin purchases, including tracking your AptivCoin balance and transaction history.
• To manage your subscription lifecycle — including renewals, cancellations, and subscription status changes communicated to us by Stripe via webhooks.
• To communicate with you, including sending verification emails, password reset links, billing confirmations, and responding to your support requests.
• To detect, prevent, and investigate fraudulent activity, such as abuse of referral or coin reward systems.
• To monitor and analyze trends and usage to improve the user experience.
• To ensure the security and integrity of our services.

3. How We Share Your Information

We do not sell or rent your personal information to third parties for their marketing purposes. We only share information in the following limited circumstances:

• With Service Providers: We share information with third-party vendors and service providers who need access to such information to carry out work on our behalf. These include:
  • Amazon Web Services (AWS): We use AWS for hosting our backend services, database (PostgreSQL), and for securely storing your uploaded resume files (S3). AWS maintains SOC 2 and ISO 27001 certifications.
  • Stripe: We use Stripe to securely process all payments. When you make a purchase, your payment information is sent directly to Stripe. Stripe is PCI DSS Level 1 certified — the highest standard for payment security. Stripe stores your payment details; we only receive a customer ID and limited billing metadata. Stripe's privacy policy is available at stripe.com/privacy.
  • Groq: We send the text content of your resume and any job descriptions you provide to the Groq API to perform AI-based analysis and content generation. We do not send your name or email with these requests.
  • Google: We use Google's services for user authentication when you use Google Sign-In, and Google Analytics 4 (GA4) for anonymized usage analytics.
• For Legal Reasons: We may disclose your information if we believe it is required by law, subpoena, or other legal process.
• With Your Consent: We may share information with your consent or at your direction.

4. Data Security

We take reasonable measures to protect your information from loss, theft, misuse, and unauthorized access. Our security practices include:

• HTTPS / TLS Encryption: All data in transit between your browser or app and our servers is encrypted using SSL/TLS.
• Password Hashing: Passwords are never stored in plain text. We use industry-standard hashing algorithms so that even our team cannot read your password.
• PCI-Compliant Payment Processing: Payment card data is never stored on our servers. All payment processing is handled by Stripe (PCI DSS Level 1 certified).
• Secure Cloud Infrastructure: Our backend, database, and file storage are hosted on AWS, which operates under rigorous security certifications including SOC 2, ISO 27001, and PCI DSS.
• Least Privilege Access: Our internal systems and APIs are designed so that only necessary data is accessed for each operation.

While we implement reasonable safeguards, no method of transmission over the Internet or electronic storage is 100% secure. If we become aware of a security breach affecting your data, we will notify you as required by applicable law.

5. Data Retention

We retain your personal information for as long as your account is active. If you choose to delete your account, we will permanently delete your account information and associated resume files from our primary systems.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access & Update: You can view and update your profile information at any time through your account's Profile page.
• Account Deletion: You can request full deletion of your account and all associated data by contacting us at info@aptivhires.com. We will process deletion requests within 30 days.
• Subscription Management: You can cancel your Pro subscription at any time through your Profile page or by contacting Stripe's billing portal. Cancellation stops future charges but does not delete your account or data.
• Opt-Out of Analytics: You can opt out of Google Analytics tracking using the Google Analytics Opt-out Add-on.
• Data Portability: You can export your resume and portfolio data directly from the app. For other data exports, contact us.

If you are located in the European Economic Area (EEA), UK, or California, you may have additional rights under GDPR or CCPA respectively. Please contact us at info@aptivhires.com to exercise any such rights.

7. Children's Privacy

Our services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we will notify you by revising the "Last Updated" date at the top of the policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at: info@aptivhires.com