Privacy Policy

Last updated: June 2026

HireProxy is a multi-tenant SaaS platform operated by Broadlake Technologies LLC. The platform helps candidates create AI-powered career agents, analyze role fit, prepare for interviews, and practice interview answers using candidate-provided data. This policy explains what information we collect, how we use it, and how we protect it.

What We Collect

• Account information collected during registration via Supabase Auth (email address, display name)
• Career data you provide to build your AI career agent, including resumes, user profiles, work history, career stories, employment gaps, and branding preferences
• Job and interview data you provide for role-specific prep, including job descriptions, target roles, interview stages, interviewer context, prep guides, study cards, and notes
• Practice data from Interview Mode, including typed or spoken answers, transcripts, speech metrics, AI feedback, adaptive follow-up questions, and retry history
• Pending-start uploads submitted before sign-in, including email address, resume files, optional job descriptions, terms acceptance, preparation status, and claim status
• Conversation logs between recruiters/hiring managers and your AI career agent
• Contact events and AI-generated reports summarizing recruiter interactions
• Payment information processed through LemonSqueezy (we do not store credit card numbers directly)
• Usage and security data such as IP-derived identifiers, timestamps, request metadata, rate-limit counters, and bot-prevention challenge results

How We Use Your Information

• To generate AI responses to recruiter questions using your candidate-provided data
• To generate role-specific interview prep, job-fit analysis, practice questions, coaching, and follow-up questions
• To transcribe practice audio, calculate delivery metrics, and generate spoken coaching during Interview Mode
• To create and claim private pending-start workspaces, then delete unclaimed temporary uploads after they expire
• To manage your account and provide platform services
• To process subscription payments through LemonSqueezy
• To send transactional emails via Resend (account verification, contact notifications)
• To enforce rate limits and prevent abuse
• To monitor errors and improve reliability through Sentry (error monitoring)
• To improve the platform's functionality and user experience

Third-Party Services

• Anthropic (Claude API)— AI model provider that processes conversation messages, career data, job descriptions, and practice transcripts to generate career-agent responses, fit analysis, interview prep, and coaching
• OpenAI— Audio transcription and text-to-speech provider for Interview Mode voice transcription and spoken coaching
• Supabase— PostgreSQL database, user authentication, and file storage
• LemonSqueezy— Subscription payment processing
• Resend— Transactional email delivery
• Sentry— Error monitoring and performance tracking
• Vercel— Application hosting and edge network
• Vercel KV (Redis)— Rate limiting and ephemeral session data
• Cloudflare Turnstile— Bot-prevention challenge on public start forms before the platform accepts uploads or starts AI preparation
• LogRocket— Product diagnostics and session replay only on non-sensitive marketing surfaces when the LogRocket app ID is enabled; disabled on public start, candidate, admin, interview, upload, and auth surfaces

Data Retention

Account and career data is retained in Supabase for as long as your account is active. Interview prep and practice data are retained with your account unless deleted earlier. Pending-start uploads that are not claimed expire after 24 hours and are cleaned up by scheduled jobs. Conversation logs are retained per our Data Retention Policy. Payment records are maintained by LemonSqueezy per their data retention practices. Rate limiting data in Vercel KV expires automatically. For full details, see our Data Retention Policy.

Cookies & Tracking

HireProxy uses essential cookies required for authentication and session management. Cloudflare Turnstile may process security signals to prevent abuse on public start forms. First-party product analytics track usage counts and operator support signals without storing raw resume, job-description, or voice-answer content for analytics. LogRocket diagnostics are limited to non-sensitive marketing surfaces when enabled. A cookie consent mechanism is built into the platform for optional advertising and audience measurement pixels controlled by the NEXT_PUBLIC_ENABLE_TRACKING feature flag. Those pixels are loaded only when tracking is enabled and consent is accepted.

What We Don't Do

• We do not sell your candidate data or practice data
• We do not share candidate content or practice data with third parties for marketing purposes
• We do not publish raw Interview Mode answers unless you choose to refine or share them
• We do not run facial analysis, emotion detection, stress detection, or personality inference
• We do not independently verify your credentials, employment history, or career claims
• The AI is grounded in candidate-provided data and is instructed not to fabricate credentials or experience

Questions? Contact Broadlake Technologies LLC at privacy@hireproxy.app