How we protect your information

Anyone can create a free account with email and a password, or with Google or Apple. Partner and cohort invitations are optional. When an invitation is used, the link expires after 14 days, and an admin can revoke or resend it. Sign-in is backed by managed authentication.

Application data is scoped per user. The database enforces row-level access rules so one member cannot read another member's resumes, strategy artifacts, or pipeline.

All traffic to the app is served over HTTPS. Data is stored in a managed Postgres database and managed object storage, both encrypted at rest by the provider.

We collect the information you provide directly — profile details, resumes you upload, target roles, strategy notes, and application tracking entries. We do not sell this data. We use it to generate strategy artifacts, match opportunities, and power your dashboard.

Resume uploads are stored in a private bucket and accessible only to your account and the operations team that supports your strategy.

We use a small number of providers to run the platform: managed authentication, managed Postgres + storage, transactional email, AI inference for strategy generation, and aggregated job-listings APIs. Each operates under its own privacy and security terms.

You can edit or remove resumes, applications, and strategy artifacts from inside the app at any time. To delete your account entirely, email info@gap2hired.com and we will remove your record and associated data within 30 days.

If you believe you've found a security issue, please email security@obvioushire.app with a description and reproduction steps. We aim to acknowledge within two business days.