Privacy Policy

Overview

This Privacy Policy explains how Hopvest ("Hopvest", "we", "us", or "our") collects, uses, shares, and protects information when you visit hopvest.com and use our resume tailoring service (the "Service"). By using the Service you agree to this policy.

You can use the core tailoring tool without an account. Signing in lets you save your work across sessions and devices.

Information we collect

Information you provide:

• Resume content. The text you paste, or the text we extract from a PDF or DOCX file you upload. We discard the uploaded file after extracting its text and do not keep the original file.
• A photo, if you add one to a resume layout that shows one. Your PDF is built in your browser, so a photo does not leave your device for a PDF. A Word download is built on our server, so the photo is sent there to build the file and is not kept once the file is sent back to you. If a photo is part of a resume you save to your account, it is saved with that resume.
• Job descriptions and role details you add so we can tailor your resume.
• Mock interview answers. The answers you type during a mock interview. We send them to our AI provider to score them and to build your readiness report. See Data retention below for exactly which parts of a mock interview we store on our servers.
• Account information when you sign in with Google: your name, email address, and profile picture.
• Anything you send us directly, such as an email to support.

Information collected automatically when you use the Service:

• Usage and device data: pages viewed, actions taken, referring page, browser and device type, operating system, language, approximate location derived from your IP address, and the date and time of your visit.
• Cookies and similar technologies (see Cookies and tracking below).
• Product and session analytics. We use tools that record interactions such as clicks, scrolls, and mouse movement to understand how the Service is used, including heatmaps and session replays. We configure these tools to mask the text you type wherever possible, so the content of your resume is not meant to be captured by them.
• Product events we record ourselves. We keep our own record of activity such as which tool you use (the resume tailor, the builder, or mock interviews), which step you reach, and whether an attempt finished, tied to a durable anonymous identifier and, once you sign in, to your account. This record does not include your resume content, the job description text you paste, or your mock interview answers. When something goes wrong, for example our AI provider failing to respond, we also record a short technical message describing the failure. We filter that message first, removing quoted text, email addresses, web addresses, and long digit sequences, keeping only its first sentence, and capping it at 500 characters, so that resume or job description text a provider echoes back in an error is not meant to reach this record. See Cookies and tracking below for how the identifier works, and Data retention below for how long we keep it.

Information from third parties:

• From Google, when you choose to sign in, we receive the basic profile information listed above.
• From advertising and analytics partners, we may receive limited measurement data, for example that a visit or sign-up came from a particular ad.

How we use your information

• Provide the Service: read your resume and the job description, generate a tailored result, and, if you are signed in, save your resumes, saved jobs, tailored versions, and the facts you enter.
• Run mock interviews: send the answers you type to our AI provider to score them, build your readiness report, and save that report to your account so you can reopen it later and see how you improve across sessions. A mock interview needs an account, so a report is always tied to yours.
• Improve and secure the Service: troubleshoot problems, analyze usage, prevent abuse and fraud, and build new features.
• Communicate with you: respond to your requests and send service related messages.
• Marketing and advertising: measure and improve our campaigns, including conversion tracking, and reach people who may be interested in the Service. We currently advertise, or may in the future advertise, on platforms such as Google and Meta, and may work with affiliates or other marketing partners.
• Comply with law and enforce our Terms.

Email updates and your choices

If you have an account, we may send you two kinds of email. Transactional updates, such as a note when your shared resume link is opened, are on by default because they are tied to real activity on your account. Re-engagement reminders, such as a prompt to tailor for your next application, are off by default and only sent if you opt in.

Every email includes a one-click unsubscribe link, and you can change your email preferences at any time from your dashboard. We only email you about real events, and we never sell your email address. We use Resend to deliver these emails on our behalf.

How your resume is processed by AI

To tailor your resume we send your resume text and the job description to Google's Gemini API, which produces the result. We do not use your content to train AI models, and Google states that it does not use content submitted to its paid Gemini API to train its models.

Google processes the data you submit under Google's own terms. We encourage you to review those terms for details of how Google handles content sent to its API. We discard uploaded files after extracting their text and keep only the text needed to provide the Service.

Payments and payment data

When you buy a mock interview, the payment is handled by Paytm, a PCI-DSS compliant payment gateway in India. Paytm collects and processes the payment details you enter, such as your UPI, card, or bank information, under its own privacy policy. We do not collect or store your full card or bank account numbers.

We keep a record of your order, including the amount, the sessions purchased, your account email, and the payment reference, so we can credit your sessions, issue receipts and refunds, and meet tax and accounting requirements. Payment and transaction records are stored in India in line with Reserve Bank of India requirements.

Google user data

When you sign in with Google we access your basic Google profile, namely your name, email address, and profile picture, only to create and secure your account. We do not request access to your Gmail, Drive, contacts, or other Google services.

Hopvest's use of information received from Google APIs will follow the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and tracking

We and our partners use cookies and similar technologies in these categories:

• Essential: needed for the Service to work, including keeping you signed in.
• Analytics: help us understand usage, for example Google Analytics 4 and Microsoft Clarity (which also provides heatmaps and session replay). We also set our own cookie, hv_anon, that carries a durable anonymous identifier we use to record the product events described in Information we collect above on our own servers. That identifier does not change when you return to the Service, and once you sign in it is linked to your account, so activity from before you signed in is connected to it afterward.
• Advertising: measure ad performance and support advertising on third party platforms, for example the Meta pixel and Google Ads tags. We also send the same conversion events to Meta directly from our servers through its Conversions API, so measurement still works when a browser blocks the pixel. These may set cookies and share event data such as page views and conversions with those platforms.
• Performance measurement: Vercel Web Analytics counts page views and traffic sources, and Vercel Speed Insights measures anonymous page performance metrics (Core Web Vitals) so we can keep the site fast. Both are cookieless and do not collect personal data or fingerprint visitors.

We use these cookies to keep the Service working, understand how it is used, and measure and run our advertising. You can control cookies through your browser settings, including blocking or deleting them at any time. Some providers offer their own controls, such as the Google Analytics opt-out add-on at tools.google.com/dlpage/gaoptout, and the ad preference controls listed in Your choices below.

How we share information

We do not sell your personal information for money. We share information only as described here:

• Service providers who run the Service for us, including Supabase (database, authentication, and storage of your saved data), our hosting provider, Resend (email delivery), and Google (AI processing through the Gemini API, and Google Sign-In).
• Paytm, our payment gateway, to process payments and refunds when you buy a mock interview. Paytm handles your payment details under its own privacy policy.
• Our internal notification relay, hosted on Google Cloud, which posts alerts into our team chat. When you send us a message through the contact form, that message and the email address you gave us are sent through this relay so we can see and answer it. Payment alerts carry only order details and no personal information.
• Analytics providers, including Google Analytics, Microsoft Clarity, and Vercel (Web Analytics and Speed Insights).
• Advertising platforms, including Google and Meta, through pixels, tags, and Meta's Conversions API used to measure and run advertising. Sharing data with advertising partners for measurement or targeting may be treated as a sale or sharing under some privacy laws; see Your choices and Your rights to opt out.
• Marketing partners such as affiliates or influencers we may work with in the future, limited to campaign level information unless you choose to interact with them.
• Legal and safety: to comply with law, respond to lawful requests, or protect the rights, safety, and integrity of the Service and our users.
• Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

Data retention

If you are signed in, we keep your saved resumes, jobs, tailored versions, facts, and mock interview reports until you delete them or close your account. If you use the Service without an account, drafts are stored in your browser, and on our servers only for as long as needed to process your request.

A mock interview needs an account, so what it produces is stored on our servers and tied to yours. When you finish one we save your readiness report: the questions you were asked, your scores and readiness label, the topics to work on, and short quotes from the answers that scored strongest. Your answers are sent to our AI provider to be scored, but we do not keep the full text of them on our servers. The full text stays in your browser. To delete your saved reports, email help@hopvest.com, as described in Account and data deletion below.

Analytics and advertising data held by our third party tools, such as Google Analytics, Microsoft Clarity, and advertising platforms, are retained for the periods those tools set. We have not yet finalized a retention period for the product events we record ourselves, described in Information we collect and Cookies and tracking above, and we will update this policy once we do. We keep some information longer where the law requires it.

Messages you send us through the contact form are kept for 180 days after we have answered them, and then deleted automatically. A message we have not answered yet is not deleted, so nothing you are waiting on a reply to can disappear.

If you tailor a resume without signing in and choose to get a shareable link, we store that single tailored result on our servers under a long, unguessable web address so the link works when you reload or share it. This anonymous result is kept for 30 days and then expires automatically. Anyone with the link can open it, so share it only with people you choose. Signing in lets you save it to your account permanently instead.

Data security

We use reasonable technical and organizational measures to protect your information, including access controls and database row level security so that, when signed in, you can reach only your own data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International transfers

We and our providers may process your information in countries other than your own, including the United States. Where required by law, we rely on appropriate safeguards for these transfers.

Your choices

• Account data: review or update your Google profile with Google, or contact us to update your account details.
• Cookies and tracking: use your browser settings to block or delete cookies, plus the provider opt-outs listed in the Cookies and tracking section.
• Advertising: use platform controls such as Google Ads Settings and Meta ad preferences, along with the opt-outs in the Cookies and tracking section.
• Marketing messages: follow the unsubscribe link in any marketing email or contact us.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Specific rights include:

• India (Digital Personal Data Protection Act, 2023): access, correction, and erasure of your data, grievance redressal, and the right to nominate another person to exercise your rights.
• European Economic Area and United Kingdom (GDPR): the rights above plus the right to lodge a complaint with your local data protection authority.
• California (CCPA and CPRA): the right to know, delete, and correct your information, to opt out of the sale or sharing of personal information and targeted advertising, to limit the use of sensitive information, and not to be discriminated against for exercising your rights.

To exercise any right, email help@hopvest.com. We will respond within the time the law allows, for example within 30 days where applicable, and we may need to verify your identity first.

Account and data deletion

To delete your account and the data associated with it, email help@hopvest.com. We process verified deletion requests within 30 days, except where we are required to keep certain data by law.

Sensitive information

Resumes can contain personal information. Please do not include sensitive details you do not want processed, such as government identification numbers, financial account numbers, or health information. We process the content you provide only to deliver the Service.

Children

The Service is intended for adults seeking employment and is not directed to anyone under 18. We do not knowingly collect information from children under 18. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the new version on this page and update the date above. If changes are significant, we may also highlight them in the Service.

Contact

For any privacy question or request, including data deletion, email help@hopvest.com. You can also reach us through the Contact page.