Privacy Policy

Introduction

Hotfix Jobs is a job discovery platform that helps you search, analyze, and track job opportunities. This privacy policy explains what information we collect, how we use it, and how we protect it. By using Hotfix Jobs, you agree to the practices described in this policy.

Information we collect

We collect information you provide when creating an account and using our services. This includes account data (email address, authentication method), resume data (uploaded PDF files and structured data extracted from them, including target roles, skills, and experience), saved-alert criteria (such as roles, seniority, work type, location, salary, skills, companies, and industries), recent job-search criteria, device tokens used to deliver push notifications, and usage data (searches performed, pages visited, jobs saved, and features used). Saved alerts and recent searches are stored with your Hotfix account so they can be used across supported devices.

How we use AI

Hotfix Jobs uses artificial intelligence throughout the platform to provide its core features. Below is a detailed explanation of each AI-powered feature and how your data is used.

Resume processing

When you upload a resume, AI extracts text, skills, experience, and education from the PDF to build your profile. The original PDF is retained in our storage bucket so you can preview it from your account page; you can replace or delete it through Account > Jobs. The structured data extracted from the PDF is used solely to power your Hotfix Jobs experience and may provide context when you ask AI to suggest or refine saved-alert criteria.

Job extraction

When new job listings are ingested from company applicant tracking systems, AI extracts structured fields (title, locations, salary, required skills, years of experience, and a short summary) from the raw posting text. This data powers search filters and the notifications we send.

Saved-alert suggestions and matching

When you create or edit a saved alert with a natural-language instruction, AI may propose structured criteria using your instruction, current alert criteria, and resume-derived profile. The proposal does not save anything automatically: Hotfix validates and shows the exact criteria for your confirmation. Matching jobs against a confirmed saved alert is deterministic and does not call an AI model. New matching jobs may appear in Matches and contribute to push or email summaries when those channels are enabled.

Company enrichment

AI searches the web to enrich company profiles with details like headquarters, size, founding year, industry, and tech stack. This data comes from publicly available sources.

Editorial picks

AI generates short copy (titles, taglines, descriptive intros) for the editorial collection pages that group jobs by theme (e.g. roles requiring no degree, jobs at companies hiring after IPO). This copy is generated from facts about the underlying jobs and companies; no personal data is used.

Job applications submitted through Hotfix

When you apply to a role through Hotfix’s in-app apply experience, your application is submitted to the company’s applicant tracking system (Greenhouse, Ashby, or another supported ATS). The ATS record is the company’s system of record.

In addition, Hotfix retains its own application record so we can show you a status update, retry failed submissions, and email you if a submission could not be delivered. Each application record includes the applicant email address you entered, the form payload you submitted (excluding the resume bytes themselves), the response returned by the destination ATS, and the submission status (pending, submitted, or failed). The resume PDF you uploaded is stored alongside your account. Application records are retained indefinitely so we can keep your status history accurate; you can request deletion at any time by contacting us.

Data storage and security

Your data is stored securely using Google Cloud Platform with encryption at rest. All data in transit is protected via HTTPS. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, or destruction.

Third-party services

We use the following third-party services: Google Cloud Platform for backend hosting, database storage, and file storage; Vercel for frontend hosting; Clerk for user authentication and account management (sign-in with Google and Apple OAuth; Clerk stores your email address, OAuth provider identifiers, and session metadata under their own privacy policy); Google Analytics 4 (gtag.js) for product analytics on the web app; Firebase Analytics for product analytics on the iOS app; xAI (Grok) for our AI features (job extraction, resume parsing, saved-alert proposals, company enrichment, and editorial copy); Apple Push Notification service (APNs) for push notifications on iOS; Cloudflare Turnstile for bot and abuse prevention on anonymous endpoints (contact form, anonymous newsletter signup); Sentry for error reporting on the website; X (Twitter) Ads for advertising measurement on the web app, and Google Ads for advertising measurement on the iOS app; Creem for employer-side promoted listing payments; Resend for transactional and digest emails; and Logo.dev for company logos. Your resume data and profile information are never used for training AI models. Each third-party service operates under its own privacy policy.

No data selling

We never sell, share, or provide your resume, profile data, or personal information to employers, recruiters, or any third parties. Your data is used exclusively to provide and improve Hotfix Jobs services for you.

Cookies and analytics

We use essential cookies only, required for authentication and session management. On the web app, we use Google Analytics 4 (gtag.js) for product analytics, which captures pageviews and anonymous interactions. When you sign in, Google Analytics associates subsequent events with your account using your internal user ID so we can understand product usage at the user level. On the iOS app, we use Firebase Analytics for the same purpose. For advertising measurement we use X (Twitter) Ads on the web app and Google Ads on the iOS app. We do not sell data or engage in cross-site tracking.

Your rights and data control

You have the right to access, update, or delete your personal data at any time. You can delete your uploaded resume, update your profile information, request a full export of your data, or request complete account deletion. These actions can be performed through your account settings or by contacting us.

Data retention

We retain your data for as long as your account is active and as needed to provide our services. When you delete your account, all associated personal data, profile information, saved alerts, recent searches, watchlist, resume data, and application records are permanently removed from our systems.

Children’s privacy

Hotfix Jobs is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we discover that an account belongs to a child under 13, we will promptly delete the account and all associated data.

Changes to this policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or in-app notification. Continued use of Hotfix Jobs after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or how we handle your data, please contact us.