HopeHireHopeHire.

Privacy Policy

Last updated October 2026.

HopeHire is an AI agent that finds people who can refer or hire you at companies you're targeting, and sends personalized outreach on your behalf. This policy explains what data we collect through hopehire.in and the HopeHire apps, why, and what rights you have over it. HopeHire is operated by Sushant Rana as an individual at this stage — referred to below as “HopeHire,” “we,” or the “Service Provider” and “Data Controller.”

Who's responsible for your data

For any question about this policy, a data access or deletion request, or your GDPR, CCPA, or DPDP rights, that's the address to write to.

Grievance Officer (India)

As required under the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:

Write to the Grievance Officer for any complaint about how your personal data is collected, used, or shared. We'll acknowledge your complaint promptly and aim to resolve it within 30 days.

What we collect

Information you give us directly

  • Your name, email address, and profile picture from Google when you sign in with Google.
  • Your uploaded resume file, and everything extracted from it — work history, education, skills, contact details — plus the rewritten, ATS-optimized version we generate from it.
  • Job search preferences: target companies, roles, tech stack, locations, and target salary range, where you provide them.
  • Outreach settings: whether Daily Outreach or Autopilot is on, your minimum match-score threshold, and your auto-reply grace period.
  • Anything you type directly into HopeHire — messages to the AI assistant, edits to your resume, or data imported from LinkedIn if you use that flow instead of uploading a PDF.

Information collected automatically

  • Standard web request data: IP address, browser type, device identifier, pages visited, and timestamps.
  • A session cookie so you don't have to sign in on every visit.
  • Application error and performance diagnostics, via Sentry (see Third-Party Services below).
  • Analytics cookies via Google Analytics — page views and usage patterns, only if you accept the cookie banner shown on your first visit. Declining, or clearing your choice, means no analytics cookie is set and no usage data is sent to Google. We never send your name, email, or resume content as analytics data.

Information collected on your behalf, from third parties

  • LinkedIn hiring posts — we don't access your LinkedIn account. We use Apify to scrape public LinkedIn posts matching hiring-related search queries, and an AI model extracts the recruiter's name, company, and contact email from that post to build your outreach queue.
  • Gmail — once you connect Gmail, via Composio's OAuth connector, HopeHire can read the parts of your inbox needed to detect recruiter replies to outreach it sent, and send emails from your address on your behalf. We do not read email unrelated to HopeHire outreach threads.
  • Google Calendar — an optional connector, not currently required by any active feature.
  • GitHub — if you set target companies for the referral-ask feature, we query GitHub's public API and public commit history for employees at those companies, extracting a name and public commit email to send a referral-ask on your behalf. See “Data about people who aren't HopeHire users” below.

We do not collect precise device geolocation. Location fields (target cities, “Remote”) are text you type in, not GPS data.

How we use AI

AI is central to how HopeHire works, not an add-on. Depending on configuration, AI (OpenAI, OpenRouter, or Krutrim — see Third-Party Services) is used to:

  • Parse your uploaded resume into structured data
  • Rewrite your resume for ATS compatibility and score it
  • Validate scraped LinkedIn posts and extract recruiter, company, and role details
  • Write personalized cold emails and follow-ups based on your resume and the specific job post
  • Classify recruiter replies (interested, scheduling, or passing) and draft your next response
  • Power the in-app “Ask AI” assistant

Automated sending

If you turn on Daily Outreach, HopeHire sends up to 50 AI-written emails per day, automatically, to leads that match your profile, without you reviewing each one first. If you turn on Autopilot with a minimum match score, it does the same for job-board matches above that threshold. If you enable auto-reply, an AI-drafted reply to a recruiter is sent automatically after your configured grace period unless you reply yourself first.

This is automated decision-making that has a real effect on you — it decides who gets contacted, when, and with what content, using your identity and connected Gmail account. You can turn any of this off at any time in Profile settings, review what was sent in your outreach history, and request human review of any specific automated action by emailing us.

Emails we send you

Separately from outreach HopeHire sends on your behalf, we occasionally email you directly — product announcements and a weekly summary of your own outreach activity (emails sent, replies received) and a feature tip. Every such email has an unsubscribe link; clicking it stops all future emails of this kind without affecting your account.

Data about people who aren't HopeHire users

To find recruiters and referral contacts on your behalf, we process public contact information about people who have never signed up for HopeHire — a name and public-facing email extracted from a public LinkedIn hiring post or a public GitHub commit. We only use this to send the specific outreach or referral-ask email you configured; we don't build profiles on these contacts or use their data for anything else. If you are such a contact and want your information removed from our systems, email the Grievance Officer above and we'll delete it.

Legal basis for processing (GDPR & DPDP)

Where GDPR applies to you, we rely on:

  • Contract — most core processing (resume storage, outreach sending) is necessary to provide the service you signed up for.
  • Consent — for optional features like Daily Outreach and Autopilot, which you explicitly opt into.
  • Legitimate interests — for fraud prevention, abuse monitoring, and improving matching quality.
  • Legal obligation — where we're required to retain or disclose data by law.

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), HopeHire acts as the Data Fiduciary and you are the Data Principal. We process your data based on your consent (given at signup and for each optional feature you enable) or where necessary to perform the service you've asked for.

Third-party services

We don't build everything ourselves. Depending on which feature you use, your data may flow to:

We have data processing agreements in place with these providers where required. We don't sell your data, and we don't share it with anyone for their own independent marketing use.

International data transfers

HopeHire operates from India. Depending on which provider handles a given piece of processing, your data may be transferred to and processed in the United States or the European Economic Area. Where GDPR requires a transfer safeguard, we rely on the receiving provider's Standard Contractual Clauses or an applicable adequacy decision.

How long we keep your data

  • Your account and resume data: for as long as your account is active, plus 24 months after you delete your account, unless you request earlier deletion or the law requires longer.
  • Outreach history and logs: up to 24 months.
  • Diagnostic and error data: up to 24 months.
  • Aggregated, de-identified data that no longer identifies you: kept indefinitely.

Deleting or exporting your data

You don't need to email us for this — it's built into the product. Go to Profile → Security & Privacy:

  • Export My Data downloads a JSON copy of your outreach history and profile data.
  • Delete Profile permanently deletes your account and data (type DELETE to confirm). This is irreversible.

If you'd rather do it by email, write to founder.hopehire@gmail.com and we'll process the request within the timeframe required by applicable law (generally within one month under GDPR).

Children

HopeHire is a job-search tool built for working-age adults and isn't intended for anyone under 18. We don't knowingly collect data from children. If you believe a minor has used HopeHire, contact us and we'll delete the account.

Security

We use encrypted connections (TLS), access controls limiting who on our side can see your data, and secrets management for API credentials. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable, current measures to protect what we hold.

Data breach notification

If a breach occurs that poses a risk to your rights, we'll notify the relevant authority within 72 hours where required, and notify you directly without undue delay if the breach is likely to result in high risk to you.

Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data (the “right to be forgotten”)
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent at any time, without affecting anything already done under that consent
  • Not be subject to a purely automated decision that significantly affects you, without the ability to request human review

California residents (CCPA/CPRA): you additionally have the right to know what's collected, delete it, correct it, opt out of sale or sharing (we don't sell your data), and not be discriminated against for exercising these rights.

India (DPDP Act, 2023): as a Data Principal you have the right to a summary of what personal data we hold on you, to correction and erasure, to nominate another individual to exercise your rights on your behalf in case of death or incapacity, and to file a complaint with our Grievance Officer above before escalating to the Data Protection Board of India.

To exercise any of these, email founder.hopehire@gmail.com. If you're in the EU and believe your rights have been violated, you can also complain to your local Data Protection Authority — a list is available at edpb.ec.europa.eu.

Changes to this policy

We'll update this page when our practices change, and update the “Last updated” date at the top. Material changes will be communicated where required by law before they take effect.

Contact

Questions about this policy, or about your data: founder.hopehire@gmail.com.