Privacy Policy

This Privacy Policy describes how AdAlchemy Digital Marketing LLC, operating GridHired ("GridHired," "we," "us," or "our") collects, uses, shares, and retains information when you use GridHired. It applies to our website, applications, and related services. It should be read together with our Terms of Service.

Account information may include your user identifier, email address, display or profile information, and verification or account-state data needed to operate your account.

Candidate information may include your candidate profile, CV or resume uploads, job applications, application events and status, ATS analysis results where you use that feature, membership and payment references, and referral attribution where used.

Company and employer information may include public company information, websites and domains, logos, team membership and roles, claim evidence, job postings, and sponsor bookings and creative assets.

Transaction information may include payment and subscription identifiers, invoices, and commercial records. GridHired does not store full payment-card numbers.

Newsletter information may include the email address you provide when you subscribe to GridHired updates from the homepage or other explicit newsletter signup surfaces, along with subscription status, consent version, source, and related timestamps.

Technical information may include session and security tokens, rate-limit and security records, analytics data when analytics is enabled, and browser or session storage necessary for product workflows.

Company profiles, jobs, Grid listings, logos, and sponsor creative may be public and may be indexed by search engines. Candidate profiles and CVs are not offered as a public candidate directory. Information you submit in applications is shared with the relevant employer through the application flow, not with all employers on the platform.

We use information to:

• operate, maintain, and improve GridHired;
• authenticate users and protect account security;
• process applications and recruitment functionality;
• bill for paid products and manage subscriptions or bookings;
• verify company claims and eligibility;
• provide support and respond to requests;
• detect, prevent, and address fraud and abuse;
• measure product usage when analytics is enabled;
• send optional GridHired newsletter and product updates when you explicitly subscribe; and
• comply with law and enforce our terms.

When you explicitly run ATS analysis and have accepted the current versioned ATS consent for your account:

• GridHired reads the selected private CV from our storage;
• we extract text from the CV file on our servers;
• we send the extracted CV text to Anthropic for analysis;
• if you provide a pasted job description, that text is also sent for the analysis request;
• the raw CV file bytes are not sent to Anthropic in the current implementation;
• Anthropic returns AI analysis to GridHired;
• we store normalized analysis results linked to your account; and
• we do not store the full pasted job description in the analysis record; a hash may be stored instead.

ATS consent is versioned. Anthropic's handling of information sent to its service may also be governed by its applicable terms and privacy commitments. GridHired does not control Anthropic's independent retention, training, or data-location practices.

Authorized company users may access candidate and application information made available to them through applications to their jobs or company. Employers cannot browse all candidate CVs on GridHired merely by having an account.

Stripe processes payment and card information when you make a purchase. GridHired stores transaction and subscription identifiers and commercial records needed to operate billing, not full payment-card details.

We use service providers that process information on our behalf, including Firebase and related Google Cloud services, Stripe, Anthropic when ATS analysis is used, Vercel for hosting and deployment, and Google Analytics 4 when enabled.

GridHired may use:

• an HttpOnly authentication session cookie;
• a CSRF security cookie for state-changing requests;
• Firebase SDK persistence where applicable;
• sessionStorage for Grid selection continuation;
• sessionStorage for listing-setup draft state;
• local browser storage for your optional analytics preference; and
• Google Analytics storage or cookies only after you allow analytics.

Authentication and security technologies operate independently of analytics preferences. Declining analytics does not disable sign-in or other core product features.

GridHired may use Google Analytics 4 with IP anonymization configured, but only after you affirmatively allow analytics in the product. Analytics helps us understand how features are used. If you decline analytics, Google Analytics does not load and we do not send analytics events from your browser session.

Your analytics choice is stored locally in your browser, separate from account legal acceptance. You can change or revoke analytics consent at any time through Analytics preferences in the site footer or equivalent in-product controls. Revoking analytics stops further collection and future page loads will not initialize Google Analytics. Revocation does not retroactively erase analytics data Google may already have collected before you revoked consent.

IP anonymization reduces identifiability but does not guarantee perfect anonymity when analytics is enabled.

GridHired does not sell personal information. We share information only as necessary to operate the service, including with service providers, in employer and application flows, through public company or job content you choose to publish, to comply with law or protect safety, or in connection with a business transaction where applicable.

Our providers and infrastructure may process information in countries other than your own. Those providers process information according to their agreements with us and applicable law.

We retain information for as long as reasonably necessary for the purposes described in this policy, including:

• ATS analysis history is limited by a configured history limit (default 10 analyses per account);
• CV files are retained until deleted where deletion is permitted and available in the product;
• withdrawing an application does not necessarily delete historical application records;
• claim, payment, security, and business records may be retained as reasonably necessary for verification, accounting, disputes, fraud prevention, and legal obligations; and
• rate-limit data is temporary security data with operational time-to-live controls in production;
• newsletter subscriber records are retained while you remain subscribed and, after unsubscribe, a minimal suppression record may be retained to honor your opt-out and prevent accidental resubscription; and
• newsletter subscription is optional, separate from account creation, and you may unsubscribe at any time using the link in future GridHired update emails or by contacting us.

We do not promise fixed deletion windows such as 30, 60, or 90 days for all categories of data.

Depending on your account and product features, you may currently:

• accept or decline optional analytics, and change that choice later;
• subscribe to or unsubscribe from optional GridHired newsletter updates;
• edit relevant profile information;
• delete eligible CVs that are not referenced elsewhere;
• withdraw applications where the product permits it;
• cancel recurring Grid subscription renewal at period end where applicable; and
• delete your GridHired account through self-service where available.

You may also contact GridHired regarding privacy or data requests using the contact details below.

You may delete your GridHired account through self-service where the product permits it, subject to operational, security, and legal constraints. Some accounts may be blocked from self-service deletion, including platform administrative accounts and sole company owners until company ownership is resolved with GridHired support.

When you delete your account, GridHired generally:

• removes your candidate profile and ordinary account/profile data where feasible;
• removes ATS analysis history linked to your account;
• removes unreferenced CV uploads where deletion is permitted;
• removes your company memberships and related personal access; and
• de-identifies historical job applications where they must remain for employer or business records.

CVs attached to retained historical applications may remain where necessary for that application record or employer access. Company profiles, jobs, Grid subscriptions, sponsor bookings, logos, and other company or business content may remain after a member deletes their personal account.

We may retain records where necessary for payments and accounting, fraud prevention and security, disputes, legal and compliance obligations, historical job application and business records, and company or business operations. Prior ATS processing consent records may be retained as evidence of prior processing. Rate-limit and security records may expire under operational retention controls.

Account deletion does not itself create a refund. See our Refund & Cancellation Policy.

Deleting an account does not necessarily erase records GridHired must retain for fraud prevention, transaction integrity, or enforcement of one-time promotional eligibility. You may register again later with the same email address, but previous membership, history, and access are not restored automatically.

Account deletion does not automatically subscribe you to the newsletter, and deleting an account does not by itself unsubscribe an independently provided newsletter email address. Privacy requests may still require newsletter personal-data deletion or suppression handling according to this policy.

GridHired may offer an optional newsletter for updates such as new companies, interesting opportunities, regional discovery, and product news. Subscription is accountless and requires only the email address you choose to provide.

Pressing Subscribe on the homepage with the nearby disclosure is the affirmative marketing action. Newsletter consent is separate from platform Terms and Privacy acceptance, analytics consent, account creation, and paid memberships.

When outbound email delivery is implemented, newsletter messages will include a personalized unsubscribe link. Until then, subscription capture is stored server-side and no confirmation or welcome email is sent at signup.

ATS processing requires explicit, versioned consent before analysis runs. Revoking ATS consent through a dedicated in-product control is not yet implemented.

We use access controls, server-side authorization, validation, and other security measures appropriate to the service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

GridHired is intended for users who can form a binding contract under applicable law. We do not knowingly collect personal information from children in a manner that requires parental consent where prohibited by law.

We may update this Privacy Policy from time to time. The effective date and version at the top of this page identify the current version. Material changes will be communicated through the service or by other reasonable means where appropriate.

For privacy questions or requests, contact us at support@gridhired.com.