1. Who we are
HuntStop ("we", "us", "our") is a job platform that connects job seekers with employers. We are currently in early access. Our contact email is [email protected].
2. Information we collect
We collect information you provide directly to us when you create an account or use the platform:
- Account information: your full name, email address, phone number (optional), and password (hashed — never stored in plain text).
- Profile information for job seekers: location, bio, skills, years of experience, work history, education, job preferences, salary expectations, work authorisation status, and links to LinkedIn, GitHub, or a personal portfolio.
- Profile information for employers: company name, description, industry, company size, founded year, website, headquarters location, and company logo.
- Resumes: files you upload are stored securely via Supabase Storage and are only accessible via signed, time-limited URLs.
- Job applications: the jobs you apply to, the date you applied, and the status of each application.
- Saved jobs: jobs you bookmark to review later.
- Country preference: your preferred job search country, detected from your IP address on first visit and stored in your account once you sign in.
- Two-factor authentication (2FA): if you enable 2FA, we store a TOTP secret and backup codes associated with your account. Backup codes are hashed.
- Usage data: pages visited and actions taken within the platform, used to improve the product.
3. How we use your information
- To create and manage your account.
- To match you with relevant job listings based on your profile, skills, experience, location, and country preference.
- To allow employers to review applications submitted to their job listings.
- To enable employers to download the resumes of candidates who applied to their jobs — via secure, signed URLs only.
- To send you transactional emails such as verification codes, 2FA codes, and password reset links.
- To detect and prevent fraud, abuse, and policy violations.
- To improve and develop the platform.
4. Who can see your information
- Your profile information (name, skills, experience, etc.) is visible to employers when you apply to their job listings.
- Your resume is only accessible to the specific employer whose job you applied to, and only via a secure signed URL that expires.
- Employers cannot see your resume unless you have submitted an application to their listing.
- Your email address, phone number, password, and 2FA data are never shared with employers.
- Job seeker data is not sold to, shared with, or used by advertisers.
- Platform administrators can access account data to investigate abuse, verify company profiles, and provide support.
5. Cookies and local storage
We use localStorage in your browser to store your authentication token and country preference for fast access. We do not use third-party advertising cookies. We may use minimal first-party session data to keep you signed in.
6. Third-party services
- Supabase — database hosting and file storage. Your data is stored in Supabase's infrastructure.
- Resend — transactional email delivery (verification codes, password resets).
- ipapi.co — used once on your first visit to detect your approximate country from your IP address. No personal data is sent; only an IP lookup is made.
7. Data retention
We retain your account and profile data for as long as your account is active. If you request deletion of your account, we will remove your personal data within a reasonable time. Some records may be retained for fraud prevention and legal compliance purposes.
8. Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate information in your profile.
- Request deletion of your account and associated data.
- Withdraw consent at any time by closing your account.
To exercise any of these rights, email us at [email protected].
9. Security
We take reasonable technical measures to protect your data. Passwords are hashed before storage. Resumes are stored with access controls and served via signed URLs. Two-factor authentication is available for all accounts and mandatory for employer accounts. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes your acceptance of the updated policy.