Privacy policy

What we collect and why

If you sign in with Google

• Your name and email address from Google, and Google’s account ID for you. We use them to create your account, sign you in and show you who is signed in. We do not get your Google password.
• Profile details you add: name, headline, current status (student, graduated or working), degree, graduation year, fields, roles, skills, cities, preferred work arrangements, experience level and whether night shifts suit you. We use them to pick jobs for you in the “For you” feed.
• Search terms you save, such as “data analyst pune”. We use them to find matching jobs for you.
• Saved jobs, tracked applications and hidden (“not interested”) jobs. We keep them so they are the same on every device you sign in on.
• Your CV, if you upload one (PDF or Word, up to 4 MB). It is stored privately so you can keep it with your profile; only you can download it. If you allow AI reading, we also keep the text taken from it, which we use to suggest profile details. You review those suggestions before anything is added to your profile.

For everyone

• Clicks on “Apply on company site”: which job and company, the time, and your account if you are signed in. We use these to count how many people go on to apply, and to see which companies get traffic.
• Messages you send us with the “Message us” box or “Report this job”: your message, the page you sent it from, and your email if you give it (or your account if you are signed in). We use them to fix problems and reply to you.
• Basic technical data: to stop abuse, we count requests per IP address for a short time. These counters are stored in a scrambled (hashed) form. Our hosting provider also keeps standard server logs.

Stored only in your browser (guests)

If you are not signed in, your saved jobs, hidden jobs and application tracker are kept in your browser’s local storage on your device. We cannot see them. They stay until you clear your browser data. When you sign in, they are copied to your account so you do not lose them.

CV reading by AI

AI reading is optional. When you upload a CV, it is only read if you tick the box that allows it. Without that, the file is stored and nothing reads it. With your permission, we take the text from your CV and send it once to OpenAI to suggest skills, roles, cities and search terms. We ask OpenAI not to store that request. OpenAI may keep data for a short time under its own policies, for example to prevent abuse.

We also use OpenAI to tidy up job descriptions from company career pages. Those are public job ads, not your personal data.

Where your data is stored and processed

• Turso: our database, holding your account, profile, search terms, saved and tracked jobs, CV text (if AI reading was allowed), click events and messages.
• Vercel: hosts the website, and stores CV files privately in Vercel Blob storage.
• OpenAI: reads CV text only when you allow it (see above).
• Google: handles sign-in.

Some of these providers may store or process data outside India. We use them only to run Hiring Bistro.

What we never do

• We never sell your personal data.
• We never send your CV or profile to employers. Applying always happens on the employer’s own website, and you decide what to share there.
• We do not use advertising or tracking cookies.

How long we keep it

• Your account, profile, search terms, saved, tracked and hidden jobs: until you delete your account.
• Your CV file and its text: until you delete it, upload a new one (the old file is then deleted), or delete your account.
• Clicks on “Apply on company site”: kept as traffic statistics. When you delete your account, they are no longer linked to you.
• Messages: as long as we need them to deal with what you told us. Messages sent while signed in are deleted with your account. You can ask us to delete any message.
• Sign-in sessions end after 7 days, or when you sign out.

How to delete your data

Go to your profile page. Use Delete on your CV to remove the file and its text, or Delete my account at the bottom of the page to remove your account and everything listed above that is linked to it. Guests can clear their saved jobs and tracker by clearing their browser data for this site. You can also email us and we will do it for you.

Cookies and browser storage

• Sign-in cookies (only if you sign in): keep you signed in and protect the sign-in step from forgery. The session lasts up to 7 days.
• Local storage: your saved and hidden jobs, your application tracker, and whether you closed the sign-in banner (for 7 days).
• Session storage: remembers your last search results so “Back to results” works. It is cleared when you close the tab.

We do not use analytics or advertising cookies.

Your rights

Under India’s Digital Personal Data Protection Act, 2023, you can ask us what personal data we hold about you, ask us to correct or complete it, ask us to delete it, and withdraw consent you gave (for example, to AI reading of your CV, by deleting the CV). You can also name someone to act for you if you cannot. Most of this you can do yourself on your profile page; for anything else, email us. We will reply as soon as we can. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Children

Hiring Bistro is meant for job seekers aged 18 and over.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top.

Contact

Questions or requests about your data: keshariamufaddal@gmail.com, or use the message box.