Privacy Policy
How we collect, use, and protect your personal information
Last updated: June 27, 2026 | Version 1.2
Your Privacy Matters
CandidateHub is operated by New Indigo Solutions. We are committed to protecting your privacy and handling your data responsibly. Throughout this policy, "we", "our", and "us" refer to New Indigo Solutions, the data controller for your personal information. This policy explains our practices in detail.
1. Information We Collect
1.1 Personal Information
When you use Candidate Hub, we may collect:
- •Account Information: Name, email address, password
- •Profile Data: Professional experience, education, skills, career objectives
- •Resume/CV Content: Work history, achievements, contact information
- •Contact Information: Phone number, address (if provided)
- •Payment Information: Billing details for Pro subscriptions (processed securely by third-party providers)
1.2 Usage Information
We automatically collect information about how you use our service:
- •Pages visited and features used
- •Time spent on the platform
- •Device information (browser type, operating system)
- •IP address and general location
- •Interactions with AI-generated content
1.3 Job-Related Information
When using our job analysis features, we may collect:
- •Job descriptions and requirements you input
- •Company names and job titles of interest
- •Your application preferences and settings
- •Feedback on AI-generated suggestions
1.4 Compensation Information
For compensation analysis features, we may collect:
- •Your current and desired salary information
- •Job title and industry for market comparison
- •Geographic location for regional salary data
1.5 Publicly Available Data
We aggregate data from public sources to provide our services:
- •Job postings from public job boards and career sites
- •U.S. Bureau of Labor Statistics (BLS) compensation data
- •Singapore SSOC occupational classification data
1.6 Browser Extension (CandidateHub Job Assistant)
Our Chrome browser extension is a read-only assistant. It never fills out or submits job applications, and simply detecting a job collects nothing — data is only read and sent when you explicitly click an action (Analyze, Tailor, Track, or chat). When you do, it handles:
- •Job posting content on the page you are viewing (title, company, description, location), read only on your action
- •Your selected résumé/profile, sent with the job to aicandidatehub.com to generate tailored résumés and cover letters, fit analysis, and compensation estimates
- •Data stored locally in your browser (chrome.storage): your CandidateHub session token and per-job state — used only to authenticate to our API and remember your in-progress work, and not shared with anyone
The extension requests access to career-site pages (to detect job postings), the active tab, and file downloads (to save the documents it generates for you). It processes the same categories of data as the web app, for the same purposes described in this policy.
2. How We Use Your Information
2.1 Service Provision
- •Generate and optimize your professional profiles
- •Analyze job descriptions and provide matching insights
- •Create tailored CVs and cover letters
- •Provide personalized recommendations
- •Enable profile sharing and publishing features
2.2 AI Processing
We use Google's Gemini AI to:
- •Analyze your career information and generate improvements
- •Process job descriptions for alignment scoring
- •Create personalized content suggestions
- •Provide intelligent career recommendations
2.3 Service Improvement
- •Analyze usage patterns to improve our platform
- •Develop new features and capabilities
- •Monitor service performance and reliability
- •Conduct research and development
2.4 Communications
- •Send service-related notifications
- •Provide customer support
- •Share product updates and new features
- •Send marketing communications (with your consent)
3. Information Sharing and Disclosure
3.1 Third-Party Service Providers
We share information with trusted service providers who assist us:
- •AI Processing: Google (Gemini AI) for content analysis and generation
- •Payment Processing: Polar (polar.sh) for subscription billing - they process payment card data
- •Database & Authentication: Supabase for secure data storage and user authentication
- •Frontend Hosting: Vercel for hosting our web application
- •Backend Hosting: Google Cloud (Cloud Run) for hosting our API services
- •Analytics: Service usage and performance analysis tools
3.2 Legal Requirements
We may disclose information when required by law or to:
- ⚠Comply with legal obligations or court orders
- ⚠Protect our rights and property
- ⚠Ensure user safety and platform security
- ⚠Investigate fraud or abuse
3.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction.
3.4 Public Profiles
If you choose to publish your profile publicly, the information you select will be visible to:
- 👁Potential employers and recruiters
- 👁Other users of our platform
- 👁Anyone with access to your public profile URL
3.5 Browser Extension Data & Chrome Web Store Limited Use
Data read by the CandidateHub browser extension is transmitted only to CandidateHub's own API at aicandidatehub.com over an encrypted (HTTPS) connection, where it is processed by the same providers listed above (for example, Google Gemini for AI generation and Supabase for storage). It is not shared with any other third parties.
Our collection, use, and transfer of information received from the CandidateHub browser extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not sell this data, do not use it for personalized advertising, do not use it to determine creditworthiness or for lending purposes, and use it solely to provide and improve the features described in this policy.
4. Data Security
We implement comprehensive security measures to protect your information:
- 🔒Encryption: Data transmission and storage encryption
- 🔒Access Controls: Limited access to personal information
- 🔒Regular Audits: Security assessments and monitoring
- 🔒Secure Infrastructure: Protected servers and databases
- 🔒Employee Training: Staff education on data protection
5. Data Retention
We retain your personal information for the following periods:
- •Active Accounts: For the duration of your account
- •Deleted Account Data: 30 days after account deletion
- •Backup Data: Up to 90 days in backup systems
- •Financial Records: 7 years for tax and legal compliance
- •Legal Requirements: As required by applicable laws
6. Your Rights and Choices
6.1 Access and Control
You have the right to:
- ✓Access your personal information
- ✓Update or correct your data
- ✓Delete your account and associated data
- ✓Export your information
- ✓Control profile visibility settings
6.2 Communication Preferences
- ✓Opt-out of marketing communications
- ✓Manage notification settings
- ✓Choose communication channels
6.3 Data Portability
You can request a copy of your data in a machine-readable format for transfer to other services.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- •Remember your preferences and settings
- •Authenticate your sessions
- •Analyze platform usage
- •Improve user experience
Please see our Cookie Policy for detailed information about our use of cookies.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including:
- •United States: Vercel, Render, and Google Cloud services
- •Singapore: Our primary business operations
We ensure appropriate safeguards are in place to protect your data during international transfers, including Standard Contractual Clauses (SCCs) where required by law. For more details, see our Data Processing Agreement.
9. Children's Privacy
Our service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information immediately.
10. Regional Privacy Rights
10.1 European Union (GDPR)
If you are in the EU, you have additional rights under GDPR:
- 🇪🇺Right to erasure ("right to be forgotten")
- 🇪🇺Right to data portability
- 🇪🇺Right to restrict processing
- 🇪🇺Right to object to processing
- 🇪🇺Right to lodge complaints with supervisory authorities
10.2 California (CCPA)
California residents have rights to:
- 🇺🇸Know what personal information is collected
- 🇺🇸Delete personal information
- 🇺🇸Opt-out of the sale of personal information
- 🇺🇸Non-discrimination for exercising privacy rights
11. Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of significant changes via:
- 📧Email notification to your registered address
- 📢Prominent notices on our platform
- 📅Updates to the "Last updated" date above
12. Contact Information
For privacy-related questions or to exercise your rights, contact us at:
New Indigo Solutions - Privacy Team
Product: CandidateHub
Email: privacy@aicandidatehub.com
Address:
105 Cecil Street, #18-18
The Octagon
Singapore 069534
13. Data Protection Officer
For matters related to data protection and privacy compliance, you may contact our Data Protection Officer at:
Email: privacy@aicandidatehub.com
Please include "DPO Request" in the subject line.
Version History
Version 1.2 (June 27, 2026)
- Added data practices for the CandidateHub browser extension and a Chrome Web Store Limited Use statement; corrected backend hosting provider
Version 1.1 (December 31, 2024)
- Updated privacy contact information to dedicated privacy email
Version 1.0 (November 30, 2024)
- Initial release of comprehensive legal documentation
© 2026 New Indigo Solutions. All rights reserved. This privacy policy is part of our Terms of Service.