Privacy Policy

When you use HuntKit, we collect:

• Account info — your email address and name when you sign up.
• Resume data — the resume content you enter in the builder or upload. Stored in your account so you can access it across sessions.
• Job descriptions — the job postings you add or that are matched to you via our job search engine.
• Generated content — cover letters, ATS scores, interview prep, and AI Career Coach conversations.
• Notes — any notes you create, including voice note audio that is transcribed and discarded after processing.
• Interview recordings — audio you record during practice or real interviews, stored with AI-generated summaries and scores.
• Demographics & custom answers — optional EEO information and custom form answers you provide in Settings, used by the browser extension to auto-fill application forms.
• Usage analytics — anonymized interaction events (page views, feature usage) collected via PostHog. No resume content is included in analytics.

Your data is used exclusively to provide HuntKit's features:

• Generating tailored resumes, cover letters, and ATS score reports
• Powering the resume builder, ATS Coach, and AI Career Coach
• Generating interview preparation materials and recording summaries
• Matching you to relevant jobs via semantic search
• Scheduling interviews and syncing with Google Calendar
• Auto-filling job application forms via the Chrome extension
• Processing payments and managing your subscription

We do not sell your data. We do not use your resume or job data for advertising. We do not share your data with third parties except as needed to operate the service.

Voice notes are recorded locally, sent to our server for speech-to-text transcription, and the audio is discarded after transcription completes. Interview recordings are stored in your account with transcripts and AI summaries. You can delete any recording at any time.

The HuntKit Chrome extension reads form fields on job application pages to auto-fill them with your resume data and custom answers. It communicates only with our API server (authenticated via your session token) and does not send data to any other service. The extension only activates on recognized ATS domains.

All data is transmitted over HTTPS. Authentication uses Supabase Auth with JWT tokens. Row-level security (RLS) policies ensure you can only access your own data. Security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy) are enforced on all responses. We do not store passwords directly.

Your data is retained as long as your account is active. If you deactivate your account, your data is preserved and you can restore it by contacting support. If you permanently delete your account, all associated data is irreversibly removed.

You can:

• Export your resume data as PDF or DOCX at any time
• Delete individual resumes, notes, recordings, applications, or your entire account
• Disconnect Google Calendar from Settings
• Request a copy of all data we hold by contacting us

The “Jobs For You” feature matches you to jobs aggregated from public sources. We collect this data on your behalf — it is not your personal data.

Job listings are cached in our database and refreshed on a schedule. We do not guarantee the accuracy or availability of any listing — always verify on the employer's website.

We may update this policy from time to time. We will notify you of material changes via email or in-app notice. Continued use after changes constitutes acceptance.

Questions about this policy? Email us at hello@huntkit.gg.