Last updated: June 5, 2026
What we collect. Your account info from Google sign-in, the resumes and job descriptions you upload, your interview practice responses (text and voice), the jobs you save, and basic usage data about how you use the product.
Why we collect it. To make the product work for you. Without your resume, we cannot tailor it. Without your interview answers, we cannot give you coaching.
Who else sees it. A small number of trusted vendors who help us run the service: hosting, payments, AI inference, email, analytics. Not advertisers. Not employers. Not data brokers.
AI providers. When you use an AI-powered feature, the relevant content is sent to our AI providers to generate the output. That content is not used to train their public models, per our contractual agreements with them.
Training. We do not use your uploaded resumes, your interview responses, your voice recordings, or your transcripts to train public AI models.
Your rights. You can export your data, delete your account, or ask us specific questions about your data by emailing privacy@hirekey.io.
If any part of the long version below contradicts this short version, we wrote the short version wrong. Tell us.
HireKey is operated by Rozea, LLC, with a mailing address at 100 N Howard St, Suite R, Spokane, WA 99201. For anything related to your data, write to privacy@hirekey.io.
We try to collect the minimum needed to operate the product.
Account information. Your name, email address, and profile photo from your Google account, plus anything else you add to your profile.
Resumes. The resumes you upload to use with the tailoring, ATS-scoring, and resume-builder features.
Job context. Job descriptions, company names, application status, salary expectations, target locations, and similar information you enter while using the product.
Interview content. Your written and spoken responses during interview practice and coaching sessions, including audio recordings if you choose to use voice features, and the transcripts and feedback generated from them.
Cover letters and other AI inputs. Anything you submit to the cover letter, briefing, salary, or other AI-powered features.
Communications. Emails you send us, support tickets, and survey responses.
Usage information. Which features you use, how often, what plan you are on, and the rough timing of your sessions.
Device and connection information. Browser type, operating system, IP address, language, time zone, referrer URL.
Abuse signals. Hashed combinations of device fingerprint, IP address, and user agent, along with behavioral patterns. We use these to keep the free tier from being drained by bots and abuse. We do not share these signals with third parties.
Cookies and similar technology. See Section 5 for details.
Google sign-in. When you sign in with Google, we receive your verified email, your name, your profile photo, and your Google account ID. We do not receive your password.
Payment processor. Our payment processor tells us when a payment succeeded or failed and which plan you are on. We do not receive or store your full card number.
Calendar integration, if you connect it. We receive only the calendar data you authorize us to receive, and we use it only to create or read interview-related events.
We use your information for these purposes and no others:
We do not use your information for advertising. HireKey does not display ads, and we do not share your data with advertising networks.
When we say "improve the product," we mean things like: counting how many people use a feature, measuring how long the tailoring step takes, A/B testing UI changes, or fixing bugs. It does not mean reading your resume to make our model smarter. We are not training a model on your content.
Which features are AI-powered. Resume tailoring and ATS scoring, voice interview coaching, written interview practice, cover letter generation, company briefings, salary benchmarks, and STAR-method evaluation are all AI-powered. We tell you in-product which model is being used for which feature.
What gets sent. When you use an AI feature, the relevant input gets sent to our AI providers. For resume tailoring, that means your resume and the job description. For interview coaching, that means your responses and the role context. We minimize the data we send.
Who the AI providers are. Our primary AI provider for reasoning and content features is Anthropic, based in the United States. OpenAI, also based in the United States, is used for text-to-speech in the voice interview coaching feature.
Whether the AI providers train on it. Under our contracts with Anthropic and OpenAI, your content is not used to train their public models.
Whether humans review it. In limited cases, authorized HireKey team members may review specific sessions to investigate a bug you reported, to investigate suspected abuse, or to respond to a support request. We do not have a team of people routinely reading your interview transcripts for quality assurance.
Recordings. If you opt into voice interview coaching, the audio is processed temporarily to produce a transcript and feedback. Audio is deleted within a reasonable period unless you choose to save it. You can delete recordings at any time.
HireKey uses cookies to keep you signed in, remember your settings, and understand which features people actually use. We do not use cookies for advertising, and we do not sell cookie data to third parties.
| Cookie | Purpose | Lifetime |
|---|---|---|
| hk_session | Keeps you signed in | Session / 30 days |
| hk_csrf | Protects against cross-site request forgery | Session |
| hk_oauth_state | Used during Google sign-in to prevent attack | 10 minutes |
| Cookie | Purpose | Lifetime |
|---|---|---|
| hk_theme | Light / dark mode preference | 1 year |
| hk_locale | Language and region setting | 1 year |
| hk_onboarded | Whether you have completed onboarding | 1 year |
| Cookie | Purpose | Lifetime |
|---|---|---|
| Set by PostHog | Aggregated usage statistics | Up to 13 months |
| Cookie | Purpose | Lifetime |
|---|---|---|
| hk_fp | Device fingerprint hash, for rate limiting | 30 days |
| hk_rl | Per-IP rate limit counter | 1 hour |
We share information only in these cases:
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not send your data to data brokers.
| Data type | Retention |
|---|---|
| Master resume, tailored versions, cover letters | While account is active |
| Saved jobs and application tracker | While account is active |
| Interview practice transcripts | While account is active |
| Voice interview audio | Deleted after a reasonable period, unless you save it |
| Account profile (name, email, photo) | While account is active |
| Payment and billing history | While active, plus 7 years after deletion (tax law) |
| Login history | 90 days |
| Application logs | 30 days |
| Security logs | 1 year |
| Support ticket contents | 2 years after resolution |
| Per-event analytics tied to a user | 13 months |
You can delete any resume, transcript, cover letter, briefing, or other content from the relevant page in the product. You can delete your entire account from account settings. Your content is removed from active systems promptly and rolls off backups in the ordinary course.
What we keep after deletion: Billing records for tax purposes (typically 7 years), hashed abuse identifiers if your account was terminated for policy violations, and anonymized aggregate statistics.
Before deleting, you can export your data from settings. If something is missing from the export, email privacy@hirekey.io.
You can access, correct, or delete your data at any time. For requests beyond what the product handles directly, email privacy@hirekey.io. California residents have additional rights under the CCPA and CPRA. We do not knowingly sell or share personal information for behavioral advertising.
Data is encrypted in transit (TLS) and at rest (AES-256). Access to production systems is restricted to authorized engineers with MFA required. See our Data Security document for full details. If you believe you have found a security issue, email security@hirekey.io.
HireKey is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with information, write to privacy@hirekey.io.
When we make material changes, we will notify you by email or in-product notice before the changes take effect.
Questions about your data: privacy@hirekey.io
General legal matters: legal@hirekey.io