Privacy policy

Last updated: April 21, 2026

This Privacy Policy applies to the HREcho browser extension, mobile application, website, and related services ("Services"). Accessing or using HREcho constitutes your automatic agreement to these Terms of Use and our Privacy Policy. If you do not agree, please stop using HREcho immediately.

• What we collect — only the basics: email, hashed password, social login ID, subscription info, as well as your resumes and vacancy viewing history.
• What we don’t collect — we don't see your card numbers, we don't use ad trackers, and we never sell your data.
• AI Processing — we analyze your resume text and job descriptions to generate recommendations, but we do not use your personal data to train models without anonymization.
• Vacancy Data — we store your interaction history with vacancies and recruiter contacts you've saved to help you manage your job search process.
• Where stored — on secured servers (may be located in the EU or US) in compliance with security standards.
• Your rights — you can request, delete, export your data, or file a complaint with a regulator.
• Children — the service is strictly 18+. We do not collect data from minors.
• Ads — zero ads in the app, we do not share data with advertisers.
• Account deletion — when a profile is deleted, all data is erased within 30 days (except for tax reporting on transactions).

We only collect the minimal amount of personal information necessary to operate and improve our Services:

• Professional Data — the content of your resumes, cover letters, and their AI-driven adaptation history to track your job search progress.
• Email address — used for account identification and login.
• Password — used for account authentication and login.
• Third-party provider ID (Apple/Google, etc.) — if you choose to sign in using third-party services.
• Subscription data — such as plan type and activation date, obtained through integrations.
• Search data — vacancies you have saved and recruiter contacts you have found for professional purposes.

When using AI adaptation, we process your resume text and job description in real-time. We do not use this data to train models without first removing personal information (anonymization).

We store passwords only as hashed and salted data, never in plain text.

We do not collect or store your payment card details. All financial transactions are securely processed through the Apple App Store / Google Play Store / other certified providers. We receive purchase metadata (such as subscription type, purchase date, renewal status, and transaction identifiers) from Apple / Google / other certified providers via receipts and webhooks. This information is strictly limited to non-sensitive purchase metadata and does not include your card details. We use this data only to confirm the subscription, provide access to premium features, and fulfill legal obligations (accounting or tax records).

Your data may be stored and processed outside your country of residence, including in the European Union and/or the United States. We ensure that such transfers comply with applicable data protection laws.

We may use local storage technologies (such as browser localStorage or app storage) to save your preferences and work history. We do not use cookies for tracking or advertising purposes.

Data Controller: IE Mikhail Chuloshnikov, Armenia, Yerevan, Agatangeghos 7, KENTRON, 0010. D-U-N-S: 933896428

Official contact for privacy-related requests: [email protected].

Your data is used exclusively for:

• Authenticating your account and ensuring login;
• Managing access to subscription-based features;
• Saving and displaying your personal resume adaptation data;
• Improving the overall functionality and performance of the app;
• Sending optional service-related updates;
• Providing tools for vacancy analysis and relevant skill matching;
• Displaying the history of your requests and generated recommendations for your convenience.

We do not transfer personal data to third parties, except for trusted service providers necessary for the operation of our Services (e.g., cloud hosting providers). These providers act only on our instructions and in accordance with data protection agreements.

To provide certain functions, we use trusted third-party sub-processors:

• Cloud Infrastructure — to host our servers and databases (e.g., DigitalOcean, OVH Cloud, Hetzner, or AWS).
• AI Service Providers — for text analysis and recommendation generation (e.g., OpenAI/Google Gemini, or Anthropic).
• Payment Systems — Apple / Google / other certified providers, as described in the "Subscriptions" section.

These providers receive only the minimal amount of data necessary to perform their specific tasks.

We apply industry-standard security measures, including encryption in transit (SSL/TLS), the use of hashed and salted passwords, and restricted access to stored data.

We store your account data as long as your profile is active. If you delete your account, all associated personal data will be removed from our systems within 30 days. Purchase-related records may be retained in accordance with applicable legal requirements (e.g., tax or accounting obligations), but after account deletion, they are disconnected from the user's identity.

You have the right to:

• Access your data;
• Request correction or deletion;
• Withdraw consent to data processing;
• Export your data;
• File a complaint with your local consumer protection authority (GDPR / CCPA, where applicable).

To exercise any of these rights, please contact us at [email protected]. For security purposes, we may ask you to verify your identity before fulfilling a request. We will respond to your request within 30 days, as required by applicable data protection laws.

We do not display ads or share your personal information with advertisers or data brokers. We also confirm that we do not "sell" personal data as defined under the California Consumer Privacy Act (CCPA).

HREcho is not intended for persons under the age of 18. We do not intentionally collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time. Continued use of the Services after such changes signifies your agreement to the revised policy.