Privacy Policy

SwiftHunts ("we," "us," or "our") operates the SwiftHunts platform, accessible at https://swifthunts.com and related mobile or browser applications (collectively, the "Service"). This Privacy Policy explains what personal information we collect from job seekers and recruiters, how we use it, and the choices you have.

By creating an account or using any part of the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2.1 Information You Provide Directly

• Account information: Your name, email address, password (hashed and salted) and user type (applicant or recruiter)
• CV / Résumé: When you upload your CV, we store the file and parse its contents — including work history, education, skills, and career level — to power our AI matching and auto-application features.
• Job preferences: Target job titles, industries, locations, minimum salary expectations, and companies or industries you wish to exclude.
• Recruiter / Company information: Company name, company website, job postings, and application-review decisions you take within the platform.
• Payment information: Subscription and billing data are processed by our payment providers, currently Paystack and Bachs. We store provider identifiers, plan, currency, subscription status, and billing dates; we do not store card numbers or bank details on our servers.
• Support messages: Content of any support tickets or messages you submit to us.
• Profile preferences & settings: Any additional information you add to your profile, such as a profile photo, location, or career level.

2.2 Information We Collect Automatically

• Usage data: Pages visited, features used, buttons clicked, and time spent on different sections.
• Application activity: Details of job applications submitted through our Service.
• Log data: IP address, browser type and version, referrer URL, and timestamps of server requests.
• Cookies and local storage: Authentication tokens and session preferences stored in your browser. See Section 8 for details.

2.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email address, and Google ID. We do not receive your Google password.
• Job sources: We aggregate publicly available job listings from third-party providers to populate our job board.

We use your personal information for the following purposes:

• Account management: Creating, authenticating, and maintaining your account; sending email verifications and password resets.
• AI-powered job matching: Analyzing your CV and preferences to identify relevant job listings and compute match scores.
• Automated applications (Auto-Hunting): Submitting job applications on your behalf when you enable this feature. Your CV, cover letter, and contact details are shared with prospective employers as part of each application.
• CV tailoring: Generating position-specific CV versions through our SwiftDocu integration (Premium plan).
• Recruiter matching: Surfacing your profile to recruiters who use SwiftHunts to find candidates, where you have opted into this visibility.
• Notifications and nudges: Sending you dashboard notifications and email alerts about application updates, recruiter nudges, and platform changes.
• Billing and subscriptions: Processing payments, managing plan upgrades and downgrades, and enforcing plan-based feature limits.
• Platform security and integrity: Detecting fraud, abuse, or spam; enforcing our Terms of Service; moderating job listings flagged as inappropriate.
• Analytics and product improvement: Understanding how users interact with the platform so we can fix bugs and build better features. We use aggregated or anonymised data wherever possible.
• Legal compliance: Complying with applicable laws, regulations, or enforceable government requests.

We do not sell your personal information to third parties, and we do not use it for advertising purposes.

We share your information only in the following circumstances:

• With employers and recruiters (applicants): When an application is submitted on your behalf, the receiving employer or recruiter receives your CV, cover letter, name, and email address. By enabling Auto-Hunting or clicking "Apply," you authorise this sharing.
• With applicants (recruiters): When a recruiter posts a job or uses candidate discovery, we surface anonymised or profile-level applicant data to help them find candidates. Recruiters see match scores, skills, career level, and the information in a candidate's profile — but not their raw email address unless the candidate has applied directly.
• With service providers: We engage trusted third-party vendors who process data on our behalf under strict confidentiality agreements, including Paystack (payments), AWS / Cloudinary (file storage), OpenAI (AI features), and our email delivery provider.
• For legal reasons: We may disclose your information if required by law, court order, or to protect the rights, property, or safety of SwiftHunts, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account and profile data are retained until your account is deleted.
• Application logs and cover letters are retained while your account is active
• Uploaded CVs are retained while your account is active.
• Payment records are retained for as required by applicable financial regulations.
• Support tickets are retained for 3 years.

You may request earlier deletion at any time (see Section 7).

We take the security of your data seriously. Our measures include:

• Passwords are hashed using bcrypt with per-user salts before storage.
• All data is transmitted over HTTPS/TLS.
• Authentication tokens are short-lived JWTs with secure HttpOnly cookie delivery.
• OTP codes are stored as SHA-256 hashes and verified using constant-time comparison to prevent timing attacks.
• API endpoints are rate-limited to prevent brute-force attacks.
• We use security headers on all server responses.

While we implement commercially reasonable safeguards, no system is completely secure. We cannot guarantee the absolute security of your information.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct any inaccurate or incomplete data.
• Deletion: Request that we delete your account and associated personal data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain types of processing, such as for marketing.
• Restriction: Request that we limit the processing of your data in certain circumstances.
• Withdrawal of consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, email us at support@swifthunts.com. We will respond within 30 days.

You can update most of your profile information directly from the My profile page in your dashboard. To delete your account, contact us at support@swifthunts.com.

We use the following types of cookies and browser storage:

• Authentication cookies: HttpOnly, Secure cookies storing your session token. These are strictly necessary for the Service to function.
• Preference storage: Browser localStorage is used to remember UI preferences such as your selected user type (job seeker vs. recruiter) on the landing page.
• Cookie choice: Browser localStorage remembers whether you accepted or declined analytics cookies, so we do not ask on every visit.
• Analytics cookies (only with your consent): Microsoft Clarity records how pages are used (clicks, scrolling and page visits) to help us improve the Service. With your consent it sets cookies such as _clck, _clsk and MUID to recognise repeat visits. If you decline, Clarity runs without cookies and cannot link your visits together.
• Cookie-free measurement: Vercel Analytics counts page views without cookies, and Sentry receives error reports so we can fix problems. Neither sets cookies in your browser.

We do not use advertising cookies. When you first visit, we ask whether you accept analytics cookies; you can change your choice at any time with "Cookie settings" at the bottom of our home page. You can also configure your browser to refuse cookies, though signing in will not work without the authentication cookie.

Our Service integrates with or links to third-party services, each governed by their own privacy policies:

• Paystack – Payment processing (paystack.com)
• Bachs – Payment processing (bachs.io)
• Google OAuth – Sign-in provider (policies.google.com)
• OpenAI – AI features including CV parsing, match summaries, and cover letter generation (openai.com/policies)
• AWS / Cloudinary – File storage for CVs and documents
• SwiftDocu – CV tailoring integration
• Microsoft Clarity – Usage analytics, with cookies only if you accept them (privacy.microsoft.com)
• Vercel Analytics – Cookie-free page view counts (vercel.com/legal/privacy-policy)
• Sentry – Error monitoring (sentry.io/privacy)

We are not responsible for the privacy practices of these third parties. We encourage you to review their policies.

SwiftHunts is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal data, we will delete it promptly. If you believe a minor has submitted data to us, please contact us at support@swifthunts.com.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the platform before the changes take effect. The "Effective Date" at the top of this page will always reflect the latest revision.

Your continued use of the Service after any changes become effective constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: