Privacy policy
HireSight ("we") is operated by Mykhailo Petrenko. For how the product treats candidate data specifically, the plain-English version is on the data handling page.
Who the data is about
Customers — people with an account: email address, and usage records. Candidates — people whose resumes a customer analyzes: the resume file and its contents, plus public profile data collected about them. The customer decides which candidates to analyze and why; HireSight processes that data on their behalf.
Why we process it
To produce the comparison report the customer asked for, and to keep the product working and accurate. Under the GDPR the basis is legitimate interests — verifying claims that a candidate has themselves published — balanced against a candidate's rights by using only public sources, keeping data no longer than the periods below, and honouring deletion requests without question.
Retention
Resume files: 90 days. Analyses and the public profile data used: 180 days. Lookup caches: 7 days. Anonymized statistics with no names, links, filenames, or quoted text: kept indefinitely, because they no longer identify anyone. Account records last until the account is deleted.
Your rights
Access, correction, deletion, restriction, objection, and portability. Email mikkicon.jobs@gmail.com and we respond within 30 days. If you are in the EU or UK, you may also complain to your national data protection authority.
Processors and transfers
OpenAI, BrightData, MongoDB Atlas, AWS, Vercel. Some are based in the United States; transfers rely on Standard Contractual Clauses. Resume content is not used to train third-party models.
Analytics and cookies
A session cookie keeps you signed in. Without an account, a random visitor cookie holds your free scan, and a hash of your browser settings and IP address caps how much anyone can spend in a day. Both are stored hashed, used only for that limit, and never matched against other sites. PostHog and Vercel Analytics record aggregate product usage. No advertising trackers and no selling of data to anyone.
Security and changes
Data is encrypted in transit and at rest, and access is limited to the operator. Material changes to this policy will be announced on this page. Last updated 2 August 2026.