Privacy Policy
Last updated: 7 April 2026 · Effective: 7 April 2026
HireEdge Careers Limited ("HireEdge", "we", "us") is committed to protecting your personal data. This policy explains what we collect, why, and how we use it — in plain English. We are registered in England and Wales. Our contact email is info@hireedge.co.uk.
1. What data we collect
Email addressAccount creation and loginContract
Name (optional)Personalise your experienceLegitimate interest
CV / resume textGenerate your Career Pack reportContract
Payment dataProcess subscriptions via StripeContract
Usage dataImprove the platform, enforce fair use limitsLegitimate interest
Chat messages (EDGEX)Generate AI responses, stored for conversation historyContract
We do not collect sensitive personal data (race, health, biometric, religious belief) and we do not knowingly collect data from anyone under 18.
2. How we use your data
- To provide and improve the HireEdge platform and EDGEX AI copilot
- To process payments and manage your subscription
- To send transactional emails (account confirmation, receipts)
- To enforce fair use limits and prevent abuse
- To improve AI output quality using anonymised, aggregated usage patterns
We do not sell your personal data to third parties. We do not use your data for advertising.
3. Third parties we share data with
SupabaseAuthentication and databaseEU / USA
StripePayment processingUSA (SCCs apply)
VercelHosting and infrastructureUSA (SCCs apply)
Anthropic / OpenAIAI response generation (EDGEX, Career Pack)USA (SCCs apply)
All US-based providers operate under Standard Contractual Clauses (SCCs) as required by UK GDPR for international transfers.
4. How long we keep your data
- Account data — for as long as your account is active, plus 30 days after deletion
- CV / resume text — retained only for the session in which it is submitted; not stored long-term
- Chat history — retained for 90 days, then automatically deleted
- Payment records — 7 years (legal requirement)
- Usage logs — 90 days
5. Your rights under UK GDPR
You have the right to:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interest
To exercise any of these rights, email us at info@hireedge.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
6. Cookies
We use strictly necessary cookies only — session authentication tokens managed by Supabase. We do not use advertising, tracking, or analytics cookies. No cookie consent banner is required as we only use essential cookies.
7. Security
All data is transmitted over HTTPS. Passwords are never stored — we use Supabase Auth which handles credential management securely. Payment data is handled entirely by Stripe and never touches our servers.
8. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email to registered users. Continued use of HireEdge after changes constitutes acceptance of the updated policy.