Summary
- We store your account, your resumes and your ATS reports so you can use them. We don't sell data or use it for advertising.
- There are no analytics, advertising or tracking scripts. The only cookies are the sign-in session and the trial device id.
- Uploaded files are read and then discarded; only the extracted content is kept.
- Your name and contact details are removed before resume content is sent to an AI provider.
- Cover letters, application records, document checkpoints and preparation checklists you save are stored in your private account.
Account information
When you register we store your email address (lower-cased), an optional name, a bcrypt hash of your password (never the password itself), when the account was created, and your role. Email sign-up and sign-in are confirmed with a one-time code sent to your address. We don't send marketing email.
Resumes and documents
Resumes you create or import are stored in our database with their title, content, design settings, timestamps and latest ATS score. For an imported resume, the original file name is stored; the file itself is read in memory and discarded. To show resume thumbnails, a rendered image of each resume's first page is cached on the server (up to the 500 most recent images across all users).
Cover letters autosave their title, text, target description, company and writing preferences to your account. A browser-tab copy supports recovery while saving. Applications store the job details, notes, contacts, dates and document copies you select. Resume checkpoints store a named copy of the content and design. Your preparation checklist stores your target role and days you mark complete.
Application snapshots are separate from their source resume or letter. Deleting a source does not delete the application copy; delete that application to remove its snapshots. Deleting a resume removes its checkpoints. You can delete saved letters, applications and checkpoints from the workspace. Whole-account deletion removes these records too.
If you join a placement cohort, you explicitly agree to share the name on your account and your task completion with its coordinator; you can withdraw this in Settings and you then disappear from the coordinator's list. The cohort does not expose resumes, interview answers, voice recordings or billing information. You can withdraw completion or leave to remove your membership and shared progress. Coordinators can remove assignments or delete their cohort.
The public bullet checker and STAR worksheet process input locally without storing it on our server. The signed-in profile review and skill planner analyse supplied text on the server without an AI call or a saved result. The browser assistant keeps its contact profile only in popup memory and fills selected empty fields only on your action. Job imports use a URL fragment before you review and save the tracker form.
ATS checks
The ATS score is calculated on our server by fixed rules, without AI. When you check an uploaded file, the report (score, findings, file name) is saved to your history. Checks of a resume you're editing update that resume's latest score. We keep your most recent 100 reports and delete older ones automatically.
AI processing
AI features need your permission first. Nothing is sent to an AI provider until you allow it, and you can switch each permission off in Settings, under Privacy & data; switching it off stops that use straight away.
AI is used only for features you start: importing a file, AI parsing of an uploaded file for the ATS check, rewrites, whole-resume improvements, the optional recruiter review, cover letters and optional AI ranking of job results.
- Rewrites, review, cover letters
- Your resume content (headline, summary, roles, employers, dates, bullets, education, skills, projects, certifications, languages, custom sections), plus any job description and instructions you type. Your name, email, phone, address, website, LinkedIn and GitHub are removed first. Cover letters use a placeholder for your name, filled in on our server.
- Import and file checks
- The text extracted from your file, after emails, phone numbers, links and your name are replaced with placeholders such as [EMAIL_1]. The original values are restored on our server afterwards.
- Job ranking (optional)
- Listing titles and snippets, and from your resume only the headline, the first 600 characters of the summary, up to four job titles and your skills.
A known limitation
Requests go to the AI provider configured by the service administrator, from our server. The provider handles the data it receives under its own terms, including how long it keeps it; we don't control that. AI suggestions are shown for your review before they change your resume, and details your resume doesn't state are flagged rather than added.
Job search
Job searches are run from our server through a self-hosted metasearch engine, which sends the query to public web search engines (such as Google, Bing, DuckDuckGo, Brave and others). The query contains the role, the location or “remote”, site filters and up to two of your skills. It doesn't include your name, contact details or resume text. Results are cached for one hour under your account. When you open a listing, you visit the job site directly, under that site's own privacy policy.
Mock interviews
We store each interview you take: the role, the questions, your answers, the grades and the integrity counts (paste attempts and tab switches). To prepare and grade questions, the role, job description you provide, your resume without its contact block, and your answers are sent to the AI provider. Topic scores (for example “sql joins: 72”) are kept in a graph database linked to your account id, so later interviews and voice calls can focus on your weak topics. It holds no names, emails or answer text.
Voice tutor calls
Your microphone is used only while a call is on, after you allow it in your browser. Call audio travels through LiveKit (our real-time audio provider) to Google's Gemini Live models, which speak with you and transcribe what you say. We don't record or store the audio. We store the call's text transcript, the notes taken during it and its report. The tutor receives the context you chose for the call: the target role and job description, your resume without its contact details, and results from the interview you picked. During and after the call, the transcript is sent to the AI provider to take notes and write the report.
Payments
Payments are processed by Razorpay. Your card, UPI and bank details go to Razorpay, not to us. We keep the order details (plan, amount, currency, coupon, payment id and status) to apply your plan and for our records. For subscriptions we also keep the Razorpay subscription id, its status and the dates of the current period and next charge.
Trial eligibility
The free trial is limited to one per person and device. When you start a trial we record keyed, one-way hashes (HMAC-SHA256 with a secret only our server holds) of: a random device id in the qh_device cookie and in your browser's local storage; a summary of coarse device characteristics (platform, time zone, languages, screen size, processor count, memory class and graphics renderer), hashed in your browser before it's sent; and your network (the first three parts of an IPv4 address). We can't read hardware ids such as a MAC address, and we don't. The raw values aren't stored, and the hashes can't be turned back into them. They're used only to decide trial eligibility and to look into abuse, and are deleted after two years.
Emails we send
We send email only about your account and payments: sign-in and sign-up codes, a welcome message, password changes, trial start and reminders, receipts for charges, renewals and credit purchases, failed payments, cancellations and refunds. These are needed to run your account and can't be switched off. We don't send marketing email. Delivery is through our email provider (Hostinger).
Logs
Our web server keeps standard access logs: your IP address, the date and time, the page or API route requested, the response status, the referring page and your browser's user agent. The application logs record routes, errors and internal IDs, never request bodies, resume text, AI prompts or output, passwords, session tokens or API keys. IP addresses are also used briefly as keys for rate limits. Logs are kept for as long as the server keeps them; a fixed retention period isn't configured yet.
Retention
- Account and resumes
- Until you delete them, or the account is deleted.
- Mock interviews and voice call transcripts
- Until you delete them, or the account is deleted. Call audio isn't stored.
- Payment records
- Kept for accounting even after an account is deleted, marked as belonging to a deleted account.
- ATS reports
- Your latest 100; older ones are removed automatically.
- Resume thumbnails
- Cached images of the newest 500 renders; older images are removed as new ones are made.
- AI review and job-search caches
- 6 hours and 15 minutes.
- Signed-out session records
- Until the session would have expired, at most seven days.
- Server logs
- No fixed retention period is configured yet.
Database backups may be made to protect against data loss and can contain deleted data until they're replaced.
Deletion
You can delete any resume yourself. Deleting a resume doesn't delete ATS reports already made from it. You can delete your whole account yourself in Settings, under Privacy & data. That removes the account, all its resumes, ATS reports, mock interviews, voice call transcripts, cover letters, applications and topic progress, and its cached data, and ends its sessions immediately. You are shown a receipt that lists what was removed and what is kept: payment and subscription records (accounting), the credit history (kept for one year, as a processing log), a de-identified record of the permissions you gave, and one-way device codes used to limit the free trial. A cached thumbnail image may remain on the server until newer ones replace it. You can also download your data first. If you cannot sign in, email jyotiranjan@quickhunt.in.
Your choices
You can view and edit everything in your resumes at any time, export them as PDF, or avoid AI features entirely. For access or deletion requests we can't handle through the product, email jyotiranjan@quickhunt.in. Depending on where you live, you may have further rights under local data-protection law.
Changes
We update this policy when the product's handling of data changes, and revise the date at the top.
Understand the data involved before using a feature
Different actions use different inputs. Editing a resume saves structured content to your account. A requested AI rewrite sends the relevant resume content after contact masking. A voice session uses your microphone while the call is active and saves the transcript and notes described above. Review the feature-specific sections rather than assuming that every tool processes the same data.
A public example in a guide is separate from your private resume. The examples use fictional people and results and can be read without an account. Public site content is intended to be discoverable by search engines; account routes have noindex instructions and require authentication to access personal records.
Does masking remove every personal detail I type?
No. The masking flow focuses on the fields and patterns described in the AI processing section. If you put a sensitive name, identifier or confidential customer information into an experience bullet or instruction, do not assume it will be detected. Share only information appropriate for the feature.
Where can I ask about a specific document or account?
Use the contact instructions and identify the relevant account without sending a password or verification code. Read the deletion section for the current distinction between removing a resume and deleting an account.