Privacy Policy
CandidHire (“we”, “our”, “the service”) is operated by Navayuvan Subramanian as a personal project. This policy explains what data we collect when you use candidhire.navayuvan.com, how we use it, and your rights over it.
1. Data we collect
When you sign in
We use Google OAuth via Supabase Auth. When you authenticate, Google shares your name, email address, and profile picture with us. We store these in our Supabase database solely to identify your account and associate your evaluations with you.
When you submit an evaluation
- The resume you upload (PDF) or paste as text.
- The job description you enter.
- Any public URLs you provide (GitHub, LinkedIn, portfolio, blog) — these are fetched on your behalf and their content is used solely for the evaluation.
- The evaluation result (score, analysis, steps) produced by the AI agent.
- Token usage and estimated cost of the AI run (stored server-side for operational monitoring).
Technical data
Standard server logs (IP address, browser user-agent, request timestamps) may be retained for up to 30 days for security and debugging purposes.
What we do NOT collect
We do not use advertising trackers, sell data to third parties, or build profiles beyond what is needed to deliver the service.
2. How we use your data
- To authenticate you and display your past evaluations.
- To run the AI agent that scores your resume against the job description.
- To fetch public URLs you provide so the agent can research you.
- To monitor service health and debug errors.
3. Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database & authentication | Account info, evaluation data |
| Google OAuth | Sign-in | Name, email, profile picture |
| xAI (Grok) | AI evaluation agent | Resume text, job description, URL content |
| Firecrawl | Web scraping for portfolio URLs | Public URLs you provide |
Each provider processes data under their own privacy policy. We do not share your data with any other third parties.
4. Data retention
Your evaluations are stored until you delete your account or request deletion. You may delete individual evaluations at any time from the My Evaluations page. To delete your account and all associated data, email us at navayuvansubramanian.me@gmail.com.
5. Security
Data is stored in Supabase with row-level security enabled — your evaluations are only accessible to your authenticated account. All data is transmitted over HTTPS. We do not store your Google password or any payment information.
6. Cookies & local storage
Supabase Auth uses a session cookie to keep you signed in. We do not use any advertising or analytics cookies.
7. Children's privacy
CandidHire is not directed at children under 13. If you believe a child has provided us personal data, contact us and we will delete it promptly.
8. Your rights
Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, email navayuvansubramanian.me@gmail.com. We will respond within 30 days.
9. Changes to this policy
We may update this policy as the service evolves. Material changes will be noted at the top of this page with an updated effective date. Continued use of the service after changes constitutes acceptance.
10. Contact
Questions? Email navayuvansubramanian.me@gmail.com.