Privacy Policy

1. Scope and Applicability

This Privacy Policy applies to all users of the HiringSky web application and any associated services (collectively, the "Service"), operated by Aero Prime Ventures LLC d/b/a HiringSky ("Company," "we," "our," or "us"), a Florida limited liability company registered in the State of Florida.

This Policy governs how we collect, use, disclose, and protect your personal information when you access or use the Service. By creating an account or using any part of the Service, you agree to the practices described in this Policy.

This Policy is designed to comply with applicable United States federal privacy law, including the Children's Online Privacy Protection Act (COPPA), the Electronic Communications Privacy Act (ECPA), the CAN-SPAM Act, and applicable Federal Trade Commission (FTC) regulations and guidance, including the FTC's 2023 AI transparency guidelines. It is also designed to comply with the Florida Digital Bill of Rights (FDBR), effective July 1, 2024, and the Florida Information Protection Act (FIPA), to the extent those laws apply to our operations and data processing activities.

This Policy does not apply to third-party websites, services, or applications that may be linked from within HiringSky. Each third-party service has its own privacy practices, which we encourage you to review.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: When you create an account, we collect your email address, a first name (which is used to personalize greetings and content within the Service), and a password (stored as a salted cryptographic hash — we never store your plaintext password). We do not require your full legal name to register.
• Sign in with Google (OAuth): You may create an account or sign in using "Sign in with Google." If you choose this method, Google provides your first name and email address to create and identify your account; no password is created or stored for Google-authenticated accounts. We do not receive your Google password or any other Google account data. Your use of Google sign-in is also governed by Google's own privacy policy.
• Career intake data: To generate your personalized content and lane positioning, we collect your answers to the intake questionnaire. This includes your current job title, years of experience, work area, target roles, work mode preference, location, salary floor, key strengths, career direction, current job search challenges, speed-stretch preference, and target industries. This data forms the foundation of all AI-generated content and lane-matching logic.
• Resume content: If you paste your resume text into the Service, that text is transmitted to our AI processing provider (Anthropic, PBC) and stored in your account for use across the modules. Your resume content may include sensitive professional information. We handle it exclusively for the purpose of generating personalized career content. The resume is not transmitted to JSearch. It is not shared with any other third party except when you submit a candidate brief or application, in which case your resume, your answers, and your contact details are shared with the employer or hiring team for that role at your direction, as described in the "Candidate Briefs and Applications" section.
• Job descriptions: If you use the "Found a role elsewhere?" feature to evaluate a specific job description, you may paste job descriptions into the Service. This text is transmitted to our AI provider for processing and is stored alongside the role in your Application Tracker.
• Application Tracker data: Information you enter into the Application Tracker, including company names, job titles, application dates, application status (kept, applied, interviewing, offer, accepted, rejected, closed), and your interactions with matched job openings, is stored in your account.
• AI Coach conversations: Messages you send to the in-app HiringSky Coach and the Coach's responses are stored in your account so you can return to prior conversations.
• Talent Network opt-in (optional): If you choose to opt into the HiringSky Talent Network, we store your opt-in status, the date and time of consent, and the profile fields you have explicitly agreed to make visible. See Section 7 for full details.

2.2 Information Collected Automatically

• Technical data: When you use the Service, we automatically collect certain technical information including your browser type and version, device type and operating system, IP address (used for security and abuse prevention), and session identifiers. We do not track precise geolocation or infer your location for advertising.
• Product events: We collect certain in-app events (for example, generating outreach, moving a role into your tracker, or restarting) to understand feature usage and improve the Service. These events are associated with your account identifier and are processed by our workflow-automation provider (Make.com). They do not include your resume, intake answers, or coaching messages.

2.3 Information We Do Not Collect

We do not currently collect payment information, because the Service is offered free of charge. We do not collect Social Security numbers, government identification numbers, biometric data, precise geolocation, or any other sensitive personal information beyond what is necessary to deliver the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To provide, operate, and personalize the modules (Career Positioning, Resume + LinkedIn Overhaul, Job Search Strategy, Recruiter Messages), the AI Coach, the Matched Job Openings tracker, and the Application Tracker
• AI content generation: To transmit your profile and intake data to our AI provider (Anthropic) to generate personalized career strategy, resume, search, outreach, and coaching content
• Job matching: To transmit your lane preferences (role titles, location, work mode, pay floor, search radius, industries) to our job-posting data provider (OpenWeb Ninja JSearch) to retrieve current job postings relevant to your lane. See Section 6 for details
• Account management: To create and manage your account and maintain your session and progress
• Communications: To send transactional emails including account confirmation and password reset via our email service provider (Resend, Inc.). We do not send promotional or marketing emails without your explicit opt-in consent, consistent with the CAN-SPAM Act
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, abuse, and security incidents
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Product improvement: To analyze anonymized, aggregated usage patterns for the purpose of improving the Service. This analysis does not involve your personally identifiable information
• Talent Network preparation (opt-in only): If you have opted into the Talent Network, we store the consented profile fields in your account in preparation for a future employer-facing feature. See Section 7

We do not use your personal information for behavioral advertising, retargeting, or sale to data brokers under any circumstances.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We share your information only in the following limited circumstances:

4.1 Essential Service Providers

We share data with the following service providers who are necessary to operate the Service. Each is bound by data processing agreements and their own privacy policies:

4.2 Legal Requirements

We may disclose your information if required to do so by law, court order, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect the safety of any person, prevent fraud, or protect our legal rights.

4.3 Business Transfers

If Aero Prime Ventures LLC is involved in a merger, acquisition, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service prior to your information being transferred and subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties if you have given us explicit consent to do so, such as through the Talent Network opt-in described in Section 7. This includes submitting a candidate brief or application: when you submit, you direct us to share your brief, resume, answers, and contact details with the employer or hiring team for that role.

5. AI Processing and Anthropic

HiringSky uses Claude, an AI language model developed and operated by Anthropic, PBC, to generate all AI-powered content in the Service. When you use any AI-powered feature, your input data is transmitted to Anthropic's API over an encrypted TLS connection to generate a response.

When used to create a candidate brief, the AI organizes your confirmed experience against a role's requirements and does not score, rank, or make hiring decisions; the employer decides.

5.1 What Data Is Transmitted to Anthropic

Depending on the feature you use, the following data may be transmitted to Anthropic's API: your first name, intake questionnaire answers, resume text, job descriptions you paste for fit analysis, coaching questions you ask, and prior coaching conversation history (capped at the last 8 messages for context).

5.2 Anthropic's Data Handling

Under Anthropic's API usage policies applicable to API customers: API inputs and outputs are not used to train Anthropic's AI models by default; Anthropic may retain API traffic data for up to 30 days for safety monitoring, abuse prevention, and trust and safety review, after which it is deleted; Anthropic does not sell API data to third parties. These policies are governed by Anthropic independently of HiringSky. For Anthropic's current data practices, see anthropic.com/privacy.

5.3 AI Content Limitations and Disclosure

In compliance with FTC guidance on AI transparency, we disclose that all career strategy, resume, outreach, coaching, and role-fit content in HiringSky is generated by AI. AI-generated content may contain inaccuracies, errors, or omissions. You should review all AI-generated content carefully before relying on it or submitting it to prospective employers. HiringSky does not guarantee the accuracy, completeness, or fitness for a particular purpose of any AI-generated output.

6. Job Posting Data and JSearch

HiringSky's Matched Job Openings feature surfaces current job postings relevant to your chosen career lane. To do this, we retrieve job posting data from OpenWeb Ninja's JSearch API, a third-party job aggregation service that compiles postings from across the public web.

6.1 What We Send to JSearch

When you view your Matched Job Openings, HiringSky transmits a search query to JSearch containing the following data fields:

• Your chosen lane's role titles (e.g., "Program Manager," "Public Health Coordinator")
• Your location (city and state)
• Your work mode preference (remote, hybrid, in-person)
• Your pay floor (if you have set one)
• Your search radius preference
• Your lane-specific industry tokens (e.g., "healthcare," "nonprofit")

We do not transmit your name, email address, resume content, intake answers (other than the lane-derived fields above), AI-generated outputs, or any other personal information to JSearch.

6.2 What JSearch Returns to Us

JSearch returns publicly available job posting data, including job titles, employer names, locations, posting dates, salary ranges (where disclosed), job descriptions, and apply links. This data is generated by employers and aggregated by JSearch from public sources; it is not your personal data.

6.3 Storage of Matched Roles

The job postings returned by JSearch are displayed to you in your Matched Job Openings view and stored in your account in association with your lane. You may keep, apply to, mark as interviewing, or remove individual roles; these actions are saved to your account. The list refreshes automatically when you log in or revisit the Matched Job Openings view, and merges fresh results with roles you have already engaged with (so your tracker state is preserved).

6.4 Apply-Link Destinations

When you click "Apply" on a matched role, you are redirected to a third-party website (the employer's career page, an applicant tracking system, or a major job board such as LinkedIn, Indeed, ZipRecruiter, or Glassdoor). Once you leave HiringSky, your interaction with that third-party site is governed by their own privacy practices, not ours.

6.5 JSearch's Privacy Practices

OpenWeb Ninja's privacy practices for the JSearch API are governed by their own policy. For details, see openwebninja.com.

7. Talent Network Opt-In

The HiringSky Talent Network is an opt-in feature that allows you to express interest in being discoverable by employers who may eventually use HiringSky to find candidates. Participation is entirely voluntary and may be enabled or disabled at any time.

7.1 Current Status

7.2 What Employers Will See (If and When the Feature Launches)

If you opt in, the following fields from your profile will be visible to employers in the future Talent Network feature:

• Current role (from your intake)
• Target roles (from your chosen lane)
• Target industries
• Location (city and state)
• Salary range / pay floor

The following will not be visible to employers without your additional explicit consent:

• Your name
• Your email address
• Your resume text
• Your AI-generated outputs
• Your Application Tracker history
• Your AI Coach conversations
• Any other intake answers beyond those listed above

7.3 Two-Stage Consent

The Talent Network operates on a two-stage consent model:

1. Discoverability consent (Stage 1): By opting in, you consent to having the limited profile fields listed in Section 7.2 made visible to vetted employers in the future Talent Network feature.
2. Outreach consent (Stage 2): Even after you have opted in, your name and contact information remain hidden from employers. If an employer expresses interest in you through the Talent Network, you will be notified and you can choose to accept or decline their outreach. Only if you accept will your name and contact information be revealed to that specific employer.

7.4 Future Employer Standards

We intend to vet employers before granting them access to the Talent Network and to require employers to respond to candidate applications within a defined time period (anticipated to be 14 days). These employer standards have not yet been implemented because the employer-facing surface is not yet live; they describe our future intent, not a current guarantee.

7.5 Opting Out

You may withdraw your Talent Network opt-in at any time through your account settings. Withdrawal takes effect immediately for any future employer interactions and removes your consented profile fields from the Talent Network records (though your account and Application Tracker data remain in your account as normal).

7.6 No Data Sale or Resale

Even within the Talent Network, we do not sell, license, or resell your data to employers or any third party. The Talent Network is a discovery mechanism, not a data product. Employer access (when launched) will be governed by separate employer terms that prohibit resale, data harvesting, or use for any purpose other than direct hiring outreach.

8. Candidate Briefs and Applications

HiringSky lets you create a candidate brief that organizes your confirmed experience against a specific role's requirements, and submit it to apply for that role.

• An automated tool organizes the information you provide (your resume and your answers) into a structured summary mapped to the role's requirements. It does not score, rank, rate, or make hiring decisions. The employer makes all hiring decisions.
• When you submit a brief or application, you direct us to share your brief, resume, answers, and contact details with the employer or hiring team for that role.
• Where offered, your contact details are withheld from the employer until the employer chooses to move forward with your application.
• We do not guarantee that an employer will receive, review, or respond to your submission, and we do not control how an employer uses information you submit.
• You confirm the information in your brief and answers is accurate and complete before submitting.

9. Cookies, Storage, and Tracking

9.1 What We Use

• Session cookies: We use session cookies for authentication purposes — these are set by Supabase Auth and are necessary for you to remain logged in. They expire when you close your browser or log out.
• LocalStorage: We use your browser's localStorage to store session preferences, including language settings, UI state, a small cache of recent matched-roles fetches (to speed up page loads), and a record of whether you have seen certain one-time notices (such as the AI disclosure banner). This data is stored entirely in your browser and is not transmitted to our servers.
• No third-party advertising trackers: We do not use advertising cookies, tracking pixels, Meta Pixel, Google Analytics advertising features, or any third-party behavioral tracking technology. HiringSky products are ad-free and we do not share data with advertisers.

9.2 Managing Cookies

You can control cookies through your browser settings. Disabling session cookies will prevent you from staying logged in. Clearing localStorage will reset your language preference, UI preferences, and matched-roles cache, but will not affect your account data, which is stored server-side in Supabase.

10. Data Retention and Deletion

We retain your personal data for as long as your account is active and for a reasonable period thereafter as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

• Account and generated data: Retained for the duration of your active account. When you request deletion, your account enters a 30-day deletion period during which you retain access to Module 1 only; if you do not cancel within those 30 days, your account and all associated data (modules, resume, coaching history, and tracker) are permanently deleted
• Matched job openings data: Retained in your account as long as you have roles tracked. Stale role records may be removed when newer fresh-fetch results no longer include them and you have not engaged with them
• Talent Network opt-in records: Retained for the duration of your opt-in. Removed within 30 days of withdrawal or account deletion
• Server logs: Retained for up to 90 days for security purposes, then deleted
• Anthropic API data: Retained by Anthropic for up to 30 days per their policies, then deleted
• JSearch query data: JSearch's retention practices are governed by OpenWeb Ninja's own policy

You may request deletion of your personal data at any time by emailing contact@hiringsky.com or using the account deletion function in your profile settings. Requesting deletion starts a 30-day deletion period, during which you have access to Module 1 only and can cancel at any time to restore full access. If you do not cancel, your account and all associated data are permanently deleted at the end of the 30 days.

11. Security

We implement industry-standard security measures to protect your personal information:

• Encryption in transit: All data transmitted between your browser and our servers — and between our servers and our service providers (Anthropic, JSearch, Supabase) — is encrypted using TLS 1.2 or higher
• Encryption at rest: Your generated content and account information is encrypted at rest in Supabase's database infrastructure
• Password security: Passwords are stored as salted cryptographic hashes using bcrypt. We never store or transmit plaintext passwords
• Access controls: Access to production systems and user data is limited to authorized personnel with a legitimate business need
• Third-party security: Our infrastructure providers (Supabase, Vercel, Anthropic) maintain their own security programs, including SOC 2 compliance where applicable

No system is completely secure. While we implement reasonable safeguards, we cannot guarantee that your data will never be accessed, disclosed, altered, or destroyed by unauthorized means. You bear some responsibility for maintaining the security of your account credentials.

12. Data Breach Notification

In the event of a data breach affecting your personal information, we will comply with the Florida Information Protection Act (FIPA), which requires notification to affected Florida residents within 30 days of determining that a breach of security has occurred.

Notification will be provided by email to the address associated with your account, or by substitute notice (conspicuous posting on our website) if direct notification is not feasible. Where the breach affects 500 or more Florida residents, we will also notify the Florida Department of Legal Affairs.

If a breach originates from one of our service providers (Supabase, Anthropic, JSearch / OpenWeb Ninja, Vercel, or Resend), we will coordinate with that provider and notify affected users as soon as we have sufficient information to do so.

13. Children's Privacy (COPPA)

The Service is not directed to, and we do not knowingly collect personal information from, children under the age of 13. HiringSky is a professional career development tool intended for adults in the workforce.

Users between the ages of 13 and 17 may only use the Service with verifiable parental or legal guardian consent. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at contact@hiringsky.com. We will take steps to delete the information promptly.

If we become aware that we have inadvertently collected personal information from a child under 13, we will delete that information from our systems within 48 hours of discovery.

14. Florida Digital Bill of Rights (FDBR)

The Florida Digital Bill of Rights, effective July 1, 2024, provides certain rights to Florida consumers with respect to their personal data. To the extent Aero Prime Ventures LLC meets the FDBR's applicability thresholds, Florida residents have the following rights:

To exercise any of these rights, submit a request to contact@hiringsky.com with the subject line "Florida Privacy Rights Request." We will respond within 45 days as required by the FDBR. We will not discriminate against you for exercising your rights.

15. California Residents (CCPA/CPRA)

If you are a California resident and HiringSky meets the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) applicability thresholds, you have additional rights under California law.

At our current scale, HiringSky may not be subject to CCPA/CPRA. However, we extend the following rights to California residents regardless:

• The right to know what personal information we collect, use, and disclose (we do not sell)
• The right to delete personal information we hold about you, subject to certain exceptions
• The right to opt out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your rights

To submit a California privacy rights request, contact contact@hiringsky.com with the subject line "California Privacy Rights Request."

16. International Users

HiringSky is operated from the United States and is primarily designed for users in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

European Union and EEA users: HiringSky has not completed a formal GDPR compliance assessment. We currently do not actively solicit users in the EU/EEA. If you choose to use the Service from the EU/EEA, you do so at your own discretion and HiringSky does not represent that its practices are fully compliant with GDPR at this time.

17. Third-Party Links and Services

The Service contains links to third-party websites, including employer career pages, applicant tracking systems, and job board apply pages reached through the Matched Job Openings feature. These links are provided so you can apply to roles surfaced in your lane. When you click on a third-party link, you leave the HiringSky Service and are subject to the privacy policies of that third-party site.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policy of any website you visit.

18. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by:

• Sending an email to the address associated with your account
• Posting a prominent notice within the HiringSky application
• Updating the "Last Updated" date at the top of this Policy

Material changes will not apply retroactively. Your continued use of the Service after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the updated Policy, you should stop using the Service and delete your account.

19. Contact and Rights Requests

For privacy questions, rights requests, data deletion requests, or to report a privacy concern, please contact us:

We will respond to all privacy rights requests within 45 days. For Florida FDBR requests, responses are required within 45 days. We may extend the response period by an additional 45 days when reasonably necessary, with notice.