Privacy policy
Last updated 13 November 2026
FitHire (fithire.tech) helps you find visa-sponsored jobs and tailor your CV and cover letter for them. This page says what we keep about you, why, who else sees it, and how to have it deleted. Questions: privacy@fithire.tech.
What we keep
- Your account: email address, and your name if you sign in with Google.
- Your CV, the profile we build from it, your preferences (countries, roles, salary floor) and the jobs you save or apply to.
- Your phone number, only if you connect Telegram, to check the chat is yours; and your Telegram chat ID, to send your digest.
- Tailored CVs and cover letters, and the job ads you paste.
- AI provider keys you choose to save. These are encrypted before they're stored and only ever shown back as their last four characters.
- A record of each AI call (which model, how much it cost), without its content.
How AI is used
Reading your CV, evaluating a job for you and writing a tailored CV use AI models. Before anything is sent, your name, email, phone, links and home city are removed and replaced by placeholders; contact details are removed from job ads too. What is sent is the rest of your CV: employers, titles, dates and achievements.
- By default your CV goes only to providers that don't train on what they receive (Anthropic, OpenAI, and Google Gemini on a paid plan).
- Free providers (free Gemini, Groq, OpenRouter) read your CV only if you switch that on in Settings; they may use what they receive to improve their models.
- Matching you to jobs happens on our servers without AI; your CV isn't sent anywhere for it.
- The design check sends page images of your CV and letter with your name and contact details blanked.
Who else processes it
- Supabase (database, sign-in and file storage) and Vercel (the website).
- GitHub Actions (the scheduled job search and tailoring runs).
- Telegram, if you connect it, for messages and the PDFs you ask for.
- The AI providers above, as described.
We don't sell your data or use it for advertising.
Who can see it
Only you. Every personal record and file is tied to your account and the database refuses to show it to anyone else. Job ads found on public boards are shared; job ads you paste are yours alone.
Keeping and deleting
We keep your data while your account exists. To have your account and everything in it deleted, email privacy@fithire.tech from your account's address; we'll do it within 30 days. You can delete individual documents and your saved AI keys yourself at any time, and disconnect Telegram in Settings.
Cookies
We use only the cookies needed to keep you signed in. No tracking or advertising cookies.
Changes
If this policy changes in a way that matters, we'll say so in the app before it applies.