Privacy Policy

1. Who this covers

This policy covers hiredsignal.com, the HiredSignal application behind sign-in, and the HiredSignal MCP server that an AI agent connects to on your behalf. It applies to anyone who visits the site, creates an account, or authorises an agent against that account.

2. What is collected

Account data. Your email address, and the authentication records created when you sign in. Sign-in is handled by the sign-in service; HiredSignal never sees or stores your password.

Billing data. If you subscribe, Stripe processes the payment and returns a subscription identifier and status. Card numbers are handled by Stripe and are never sent to or stored by HiredSignal.

Content you provide. A CV, a saved search, or a job you mark — held against your account so the product can act on it.

Agent access. When you authorise an AI agent through the MCP server, the token issued to that agent, its scope, and the queries it makes are recorded so that access can be shown to you and revoked by you.

Job listings. HiredSignal collects publicly posted job advertisements from employer sites and job boards. These are business records about vacancies, not personal data about you.

3. What is not collected

The public marketing pages of hiredsignal.com load no analytics, advertising or tracking scripts. The only third-party request the published page makes is to Google Fonts for the typeface.

HiredSignal does not sell personal data, does not share it with advertisers, and does not use your CV or your searches to train machine learning models.

4. Why it is held, and for how long

Account and billing data are held to provide the service and to meet accounting obligations. Content you provide is held until you delete it or close your account.

Deleting your account removes your account record, your stored content and any agent tokens issued against it. Billing records are retained where tax and accounting law requires it.

5. Processors

The sign-in service (authentication) and Stripe (payments) are used as processors. Email is delivered by a transactional email provider. Infrastructure is self-hosted; object storage and CDN providers are used for static assets and backups.

6. Your rights

You can ask for a copy of the personal data held about you, ask for it to be corrected, or ask for it to be deleted. Requests are answered within one month.

Where processing relies on consent, you can withdraw it at any time, and you can revoke an agent's access without closing your account.

Contact

Privacy questions and data requests: privacy@hiredsignal.com