Privacy Policy
How we collect, use, and protect your personal information
Last updated: December 31, 2024 | Version 1.1
Your Privacy Matters
CandidateHub is operated by New Indigo Solutions. We are committed to protecting your privacy and handling your data responsibly. Throughout this policy, "we", "our", and "us" refer to New Indigo Solutions, the data controller for your personal information. This policy explains our practices in detail.
1. Information We Collect
1.1 Personal Information
When you use Candidate Hub, we may collect:
- •Account Information: Name, email address, password
- •Profile Data: Professional experience, education, skills, career objectives
- •Resume/CV Content: Work history, achievements, contact information
- •Contact Information: Phone number, address (if provided)
- •Payment Information: Billing details for Pro subscriptions (processed securely by third-party providers)
1.2 Usage Information
We automatically collect information about how you use our service:
- •Pages visited and features used
- •Time spent on the platform
- •Device information (browser type, operating system)
- •IP address and general location
- •Interactions with AI-generated content
1.3 Job-Related Information
When using our job analysis features, we may collect:
- •Job descriptions and requirements you input
- •Company names and job titles of interest
- •Your application preferences and settings
- •Feedback on AI-generated suggestions
1.4 Compensation Information
For compensation analysis features, we may collect:
- •Your current and desired salary information
- •Job title and industry for market comparison
- •Geographic location for regional salary data
1.5 Publicly Available Data
We aggregate data from public sources to provide our services:
- •Job postings from public job boards and career sites
- •U.S. Bureau of Labor Statistics (BLS) compensation data
- •Singapore SSOC occupational classification data
2. How We Use Your Information
2.1 Service Provision
- •Generate and optimize your professional profiles
- •Analyze job descriptions and provide matching insights
- •Create tailored CVs and cover letters
- •Provide personalized recommendations
- •Enable profile sharing and publishing features
2.2 AI Processing
We use Google's Gemini AI to:
- •Analyze your career information and generate improvements
- •Process job descriptions for alignment scoring
- •Create personalized content suggestions
- •Provide intelligent career recommendations
2.3 Service Improvement
- •Analyze usage patterns to improve our platform
- •Develop new features and capabilities
- •Monitor service performance and reliability
- •Conduct research and development
2.4 Communications
- •Send service-related notifications
- •Provide customer support
- •Share product updates and new features
- •Send marketing communications (with your consent)
3. Information Sharing and Disclosure
3.1 Third-Party Service Providers
We share information with trusted service providers who assist us:
- •AI Processing: Google (Gemini AI) for content analysis and generation
- •Payment Processing: Polar (polar.sh) for subscription billing - they process payment card data
- •Database & Authentication: Supabase for secure data storage and user authentication
- •Frontend Hosting: Vercel for hosting our web application
- •Backend Hosting: Render for hosting our API services
- •Analytics: Service usage and performance analysis tools
3.2 Legal Requirements
We may disclose information when required by law or to:
- ⚠Comply with legal obligations or court orders
- ⚠Protect our rights and property
- ⚠Ensure user safety and platform security
- ⚠Investigate fraud or abuse
3.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction.
3.4 Public Profiles
If you choose to publish your profile publicly, the information you select will be visible to:
- 👁Potential employers and recruiters
- 👁Other users of our platform
- 👁Anyone with access to your public profile URL
4. Data Security
We implement comprehensive security measures to protect your information:
- 🔒Encryption: Data transmission and storage encryption
- 🔒Access Controls: Limited access to personal information
- 🔒Regular Audits: Security assessments and monitoring
- 🔒Secure Infrastructure: Protected servers and databases
- 🔒Employee Training: Staff education on data protection
5. Data Retention
We retain your personal information for the following periods:
- •Active Accounts: For the duration of your account
- •Deleted Account Data: 30 days after account deletion
- •Backup Data: Up to 90 days in backup systems
- •Financial Records: 7 years for tax and legal compliance
- •Legal Requirements: As required by applicable laws
6. Your Rights and Choices
6.1 Access and Control
You have the right to:
- ✓Access your personal information
- ✓Update or correct your data
- ✓Delete your account and associated data
- ✓Export your information
- ✓Control profile visibility settings
6.2 Communication Preferences
- ✓Opt-out of marketing communications
- ✓Manage notification settings
- ✓Choose communication channels
6.3 Data Portability
You can request a copy of your data in a machine-readable format for transfer to other services.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- •Remember your preferences and settings
- •Authenticate your sessions
- •Analyze platform usage
- •Improve user experience
Please see our Cookie Policy for detailed information about our use of cookies.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including:
- •United States: Vercel, Render, and Google Cloud services
- •Singapore: Our primary business operations
We ensure appropriate safeguards are in place to protect your data during international transfers, including Standard Contractual Clauses (SCCs) where required by law. For more details, see our Data Processing Agreement.
9. Children's Privacy
Our service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information immediately.
10. Regional Privacy Rights
10.1 European Union (GDPR)
If you are in the EU, you have additional rights under GDPR:
- 🇪🇺Right to erasure ("right to be forgotten")
- 🇪🇺Right to data portability
- 🇪🇺Right to restrict processing
- 🇪🇺Right to object to processing
- 🇪🇺Right to lodge complaints with supervisory authorities
10.2 California (CCPA)
California residents have rights to:
- 🇺🇸Know what personal information is collected
- 🇺🇸Delete personal information
- 🇺🇸Opt-out of the sale of personal information
- 🇺🇸Non-discrimination for exercising privacy rights
11. Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of significant changes via:
- 📧Email notification to your registered address
- 📢Prominent notices on our platform
- 📅Updates to the "Last updated" date above
12. Contact Information
For privacy-related questions or to exercise your rights, contact us at:
New Indigo Solutions - Privacy Team
Product: CandidateHub
Email: privacy@aicandidatehub.com
Address:
105 Cecil Street, #18-18
The Octagon
Singapore 069534
13. Data Protection Officer
For matters related to data protection and privacy compliance, you may contact our Data Protection Officer at:
Email: privacy@aicandidatehub.com
Please include "DPO Request" in the subject line.
Version History
Version 1.1 (December 31, 2024)
- Updated privacy contact information to dedicated privacy email
Version 1.0 (November 30, 2024)
- Initial release of comprehensive legal documentation
© 2026 New Indigo Solutions. All rights reserved. This privacy policy is part of our Terms of Service.