1. Information we collect
1.1 Account details. Email, password (stored only as a salted hash), name, school, school location, major, year in school, graduation date and career field, plus when you accepted the terms and when you last used the app.
1.2 What you add. Your resume (which may include your phone number, email, address and work history), AI coach conversations, tailored resumes with the job posting, saved jobs, contacts, call notes, drafted messages and your alumni search history.
1.3 Usage records. Which AI features you use and what each use cost us (to enforce limits), and crash records (time, page and kind of error, linked to your account number). To enforce rate limits we keep keyed hashes of your IP address and, for log-in and password-reset attempts, of your email address, never the raw values.
1.4 Without an account. If you join the waitlist, your email, school and major; if you use the free score page, the resume text we read from it.
2. Information sharing
2.1 Service providers. We don't sell your data, and we don't show ads. We share data only with the services GrizzlyHire runs on, and only what each needs:
| Service | What it receives | Purpose |
|---|---|---|
| Supabase | everything in your account | database hosting |
| Anthropic (Claude API) | your resume, profile and the text you're working on when you use an AI feature (including the free score page without an account); the details of a person you're writing to (name, role, company, public search details and your notes); your school's name while it's checked at sign-up | writing and checking AI text. By default Anthropic does not train on inputs or outputs from its commercial products, and GrizzlyHire has not opted in to anything that changes that |
| Brave Search | school, field, role, major and company words, or a LinkedIn link you paste (and the name words in it), when you search for alumni or look up a profile; your school's name when it is checked. Never your own name or resume | public web search |
| Google Fonts | your IP address and browser details when a page loads its fonts | page fonts |
| Have I Been Pwned | only the first five characters of a one-way hash of a password you choose, never the password | checking for breached passwords |
| Stripe | when you buy Pro: your email address and what you bought; your card details go only to Stripe. We keep Stripe's customer and subscription ids | payments and subscriptions |
| Resend | your email address and the account emails we send you | sign-up, password and security emails |
| Render | all requests to GrizzlyHire | website hosting |
2.2 Legal and safety. We may also share information if the law requires it, or to protect someone's safety.
3. Data retention
3.1 Your account. Account data stays until you delete your account; being signed out never deletes anything. A free account that has never paid and hasn't been used for 2 months is deleted after a warning email two weeks before.
3.2 Search results. Alumni search results stay in the server's memory for about an hour and aren't saved, except the details of a person you look up, which go into your draft messages.
3.3 Short-lived records. Rate-limit records are cleared after about a day; a resume scored without an account is kept for up to 7 days unless you sign up and claim it; waitlist emails are kept until you ask us to remove them.
3.4 Logs and backups. Server logs can include page addresses and your email address; the app deletes them after 30 days, and Render, which hosts the site, may keep its own copy of recent request logs. Database backups may hold your data for up to about two months after you delete your account.
4. Your rights and choices
4.1 Editing. You can edit your profile and resume at any time.
4.2 Deletion. Settings > Delete my account permanently deletes your account, resume, saved jobs, contacts and messages. AI usage and crash records may remain under your old account number, without your name or email.
4.3 Access. To ask what we hold about you, or for a copy, contact us at the address below.
5. Cookies
One session cookie keeps you logged in, protects forms and remembers your guest resume before you sign up. There are no advertising cookies.
6. Data security
We use encrypted connections, hashed passwords and access controls, but no system is perfectly secure.
7. Age
GrizzlyHire is not for anyone under 16. If we learn that an account belongs to someone under 16, we'll delete it.
8. Contact information
Questions or privacy requests: pereiraben08@gmail.com