H
Hirely

Privacy Policy

Effective May 18, 2026

This Privacy Policy explains how Hirely (“we”, “us”, “our”) collects, uses, stores, and shares information when you use app.mindoutreach.com (the “Service”). It also describes how we handle data we access from Google APIs (Gmail and Google Calendar) and the choices you have over that data.

1. Data we collect

Account data

When you create an account we collect your email address, name, and a hashed password (or, if you sign in with Google, the Google profile information Google returns to us: name, email, and avatar URL).

Data from Google APIs

With your explicit consent on the Google consent screen, Hirely accesses the following from your Google account in order to power the product features described in this Policy:

  • Gmail messages (read-only). Subject lines, sender, recipient, headers, body text, and labels of messages we identify as job-search-related (based on sender domains, subject keywords, and message content).
  • Gmail labels. Permission to create and apply Hirely-prefixed labels (e.g. Hirely / Interview) on classified threads so they remain organized in your normal inbox.
  • Gmail compose & modify. Permission to draft replies and place them in your Drafts folder, and to mark classified threads as read or archived. Hirely never sends email on your behalf without your explicit click.
  • Calendar events (read). Date, time, and attendee list of events on your primary calendar in the window relevant to your job search (to detect interview conflicts).
  • Calendar events (create). Permission to create new events on your primary calendar for interviews that you confirm through Hirely. We do not modify or delete events we did not create.

Usage data

We collect standard product analytics (pages visited, features used, approximate geolocation derived from IP) to understand how the Service is used and to debug issues. We do not link analytics events to Google API data.

2. How we use your data

  • To classify your job-search emails by stage (Applied, Phone screen, Interview, Offer, Rejected) and present them as a pipeline in the Service.
  • To detect when a recruiter has proposed an interview time and check your Calendar for conflicts.
  • To draft replies in your voice and place them in your Drafts folder for your review.
  • To create confirmed interview events on your Calendar when you accept a recruiter’s proposal through the Service.
  • To send you transactional and account-related email (welcome, verification, password reset, security alerts) and product reminders you have not opted out of.
  • To debug, improve, and secure the Service.

3. Limited Use of Google user data

Hirely’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We use Gmail and Calendar data only to provide and improve the user-facing features described above.
  • We do not transfer this data to others except as necessary to provide the Service, for security purposes, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
  • We do not use Gmail or Calendar data for serving advertisements, and we never sell this data.
  • We do not allow humans to read this data unless we have your affirmative agreement for specific messages, we are doing so for security purposes (e.g. investigating abuse), to comply with applicable law, or for Hirely’s internal operations (and even then the data is aggregated and anonymized).

4. Storage and security

  • OAuth tokens. The refresh and access tokens we receive from Google are stored encrypted at rest on AWS RDS (Postgres) and transmitted only over TLS 1.2+.
  • Email content. We do not retain message bodies long-term. Once a message has been classified we store only the result (sender domain, subject line, classification, message ID) so the pipeline can be reconstructed without re-reading your inbox.
  • Calendar events. We store only the IDs and time windows of events relevant to your job search, not free/busy text from unrelated events.
  • Infrastructure. The Service runs on Amazon Web Services in the United States. Access to production systems is restricted to named individuals with multi-factor authentication.

5. Retention and deletion

You can disconnect Google at any time from your account settings. When you disconnect, we revoke the OAuth tokens with Google and delete any cached Gmail and Calendar data within 24 hours. If you delete your Hirely account we delete all account and analytics data associated with you within 30 days, except where retention is required by law.

6. AI and machine learning

We use third-party large language models (currently from Anthropic and OpenAI) to classify email content and draft replies. These providers are bound by data processing agreements that prohibit them from retaining your data, training their models on your data, or sharing your data with other customers. We do not use your Gmail or Calendar data to train any model, including any model of our own.

7. Sharing your data

We share your data only with:

  • Subprocessors we use to operate the Service (AWS for hosting, Resend for transactional email, Anthropic/OpenAI for model inference, Vercel for static hosting of the web app, Inngest for background-job orchestration). Each subprocessor is bound by a data processing agreement consistent with this Policy.
  • Legal requests where we are required to disclose data by law, valid subpoena, or court order.
  • Successor entities in the event of a merger, acquisition, or sale of substantially all of our assets, in which case we will notify you and give you the opportunity to delete your data first.

We do not sell your data. We do not share your Gmail or Calendar data for advertising purposes.

8. Your rights and choices

  • Access & export. You can request a copy of the data we hold about you by emailing privacy@mindoutreach.com.
  • Correction.You can correct your account information from the Service’s settings, or request correction by email.
  • Deletion.You can delete your account from the Service’s settings or by emailing us.
  • Revoke Google access.You can revoke Hirely’s access to your Google account at any time at myaccount.google.com/permissions.

9. Children

The Service is not directed to children under 13 (or the equivalent age of majority in your jurisdiction). We do not knowingly collect data from children.

10. International users

The Service is operated from the United States. If you use the Service from outside the United States, you consent to the transfer of your data to the United States for processing as described in this Policy.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced via email to your account address at least 30 days before they take effect.

12. Contact

Privacy questions, complaints, or data requests: privacy@mindoutreach.com.